-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transit or tampered with,
perform these two steps to cryptographically verify its integrity:

1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org

   The primary key fingerprint must be:

      DEE9 0D99 70AE 35D5 5B7C  6C2D C6D2 54B7 6A9D 9430

   The signing subkey fingerprint must be:

      21FC E5FF 2EC6 4131 8D9E  A8F7 D9FC 75C2 9D0A 033B

    $ gpg --verify turnkey-opencart-19.0-trixie-amd64.iso.hash

2. Recalculate either image checksum and confirm it matches:

    $ sha256sum turnkey-opencart-19.0-trixie-amd64.iso
      5aff92b16b3c9bd2e3753487b87391a699a3d5a792a862431293af996a6b18a5  turnkey-opencart-19.0-trixie-amd64.iso

    $ sha512sum turnkey-opencart-19.0-trixie-amd64.iso
      7fe9a28869610e49c74fbf748b6e44257fc614ab5488fc63442ee0453d12ed1b24c52378a268dff2dcccd9a68dbf624a57c9dd08236d62e81f11c2e8d0a7f263  turnkey-opencart-19.0-trixie-amd64.iso

   Check either checksum automatically:

    $ sha256sum --ignore-missing -c turnkey-opencart-19.0-trixie-amd64.iso.hash
      turnkey-opencart-19.0-trixie-amd64.iso: OK

    $ sha512sum --ignore-missing -c turnkey-opencart-19.0-trixie-amd64.iso.hash
      turnkey-opencart-19.0-trixie-amd64.iso: OK

Key identifiers for audit use:

  Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430
  Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B
-----BEGIN PGP SIGNATURE-----
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=aySV
-----END PGP SIGNATURE-----