-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transit or tampered with, perform these two steps to cryptographically verify its integrity: 1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org The primary key fingerprint must be: DEE9 0D99 70AE 35D5 5B7C 6C2D C6D2 54B7 6A9D 9430 The signing subkey fingerprint must be: 21FC E5FF 2EC6 4131 8D9E A8F7 D9FC 75C2 9D0A 033B $ gpg --verify turnkey-omeka-19.0-trixie-amd64.iso.hash 2. Recalculate either image checksum and confirm it matches: $ sha256sum turnkey-omeka-19.0-trixie-amd64.iso da23575e598c90050877e9ec700c5e9cbd1e3f442a53ddf79f70d90083131a73 turnkey-omeka-19.0-trixie-amd64.iso $ sha512sum turnkey-omeka-19.0-trixie-amd64.iso 9d4862f5b881e1e5226fa794447e09354f7bc99afd2f2f5d18b679161b7f600f3107e274232960dc7e52a003338b24af8ab595e9b00be72e4200166d5f2576b0 turnkey-omeka-19.0-trixie-amd64.iso Check either checksum automatically: $ sha256sum --ignore-missing -c turnkey-omeka-19.0-trixie-amd64.iso.hash turnkey-omeka-19.0-trixie-amd64.iso: OK $ sha512sum --ignore-missing -c turnkey-omeka-19.0-trixie-amd64.iso.hash turnkey-omeka-19.0-trixie-amd64.iso: OK Key identifiers for audit use: Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430 Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmqYjC0ACgkQ2fx1wp0K Azu2fg//SBNl4FA8GhYHd3jS+ezThBJidR0omXdIPJ7+LMlEogi8UWrabZo4WPAr y5pv5kr2HQE9cR2q/VSlo3hx3WAUAaYdH/gq7Y5gYghVZW1rXyqnSAYPnfNajGTv N4rR6kFkagipomvZEyMA2y0Nkh4Yn4vWEDel57TMpDr5cQLXFRRsevUPqw7FEekz NEoptkDiSyGMIIR9kRbnBnkqdHJmiKrMERSSVkPn+EpnxVI4yCIQm4sUmyhoh3Oa WK4LHsw9jf77MYL0uujMURNFP1odvKBw3pzFd+5Mj9oKKR+abf6ReO1ly8LhzgWw S1goDW4gLuaI5FHYpmioGlHUX23Pp9m7WlDGJHJTUvqoozzbbBtMjyJV+jiPu2bN KLC8kaRvLLiKXXX2go0TGZk9i4RAQMY40MnuvYzc2LzfOuOecEAQ0La7h9C13fNh fMiCGDQwCcWfV9CPBlQH+60tyRSOVb4GZl09eqUczA/zayazvlgSvI4/2KJSzF9B eBPpcwZEIE6TlcTTheKgbnI8W4cpoDgdJsN42Qa9kL4fjXJxWdVJ2v4HmUfhQWpH Z52794JZQjepuRGhupBaK5WzODxc8fJ/m3dIDd+Xo+/28bEtZtiDeG1tV00uVBFo W9Lc3MFMIugYWwVESel1GY8+HQZo8QsFpaJwwzu0pMhU+qeSugc= =hp8Z -----END PGP SIGNATURE-----