-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transit or tampered with, perform these two steps to cryptographically verify its integrity: 1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org The primary key fingerprint must be: DEE9 0D99 70AE 35D5 5B7C 6C2D C6D2 54B7 6A9D 9430 The signing subkey fingerprint must be: 21FC E5FF 2EC6 4131 8D9E A8F7 D9FC 75C2 9D0A 033B $ gpg --verify turnkey-orangehrm-19.0-trixie-amd64.iso.hash 2. Recalculate either image checksum and confirm it matches: $ sha256sum turnkey-orangehrm-19.0-trixie-amd64.iso 779ae278d62d4fd241c558ce0940bd0076c1980f942be9dcdff85e014afc19bd turnkey-orangehrm-19.0-trixie-amd64.iso $ sha512sum turnkey-orangehrm-19.0-trixie-amd64.iso ff886689476ebed4db0722b9377f0ff5daaf3697bf1e103005b1e6a830b2b5684b83ef66659dba79abd0e1683411594d65fe9e929aebe9e07f7ebe18108dbe69 turnkey-orangehrm-19.0-trixie-amd64.iso Check either checksum automatically: $ sha256sum --ignore-missing -c turnkey-orangehrm-19.0-trixie-amd64.iso.hash turnkey-orangehrm-19.0-trixie-amd64.iso: OK $ sha512sum --ignore-missing -c turnkey-orangehrm-19.0-trixie-amd64.iso.hash turnkey-orangehrm-19.0-trixie-amd64.iso: OK Key identifiers for audit use: Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430 Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmqYjC8ACgkQ2fx1wp0K Azsmow//Wsnuo3b+is/heF4NbHCpSIKTVh2KFZ1/jSR3Cm8bPxStSXpEWfBU8yt2 6B+l4yv4IVCoLWyj3mwIyWrK9q+gjkhaZzUgzpcdtgDOG/t43V5PTE9LPGMp9b3l a9qON4/VXL/9x4deBBLhVVp9c8OeRuZFUgyYpqWZCacMuHJspyW9eEp1g8tqTywx zSbEELnG6BQJAvBvFYgCmWeclxeiWoC6RQ6//ayXd2hlgp54bA2V7b36Kyvdxla5 5unFCBWkNkfD+niWQI+EgFsEcIEQyCC7UHI17oNspaosOY/XUply+j7c1dE4DssT YoE/9HNKIuNMk5A2KP8ODDHkGmC+mQGCUcdJCj5DKQn6TNHW+m/e/Poci2Ws9wtd mvC7artpF3cuNmqJEzU0Mmgg/OkCxcvcAhtR8/Nh5UpcNbMWFpZFP1nxiSrwkB5W 7qYQuUoCxgu604z5dqHdSdP1Dw3sHE9TKCZFo1zb2zVOj0LHs733Z460utjOSxbr FIOjAwP7JBl1AC9xRWNf8ZnuZI58w0tBauO/wjOQWuXZrnE01ss5kmbE9A24EkCF /Mr5v4FxIGyc6KUfs0mjJqAik7GsqQNC8jxszzU1OErIO/dfk8Xyy4mnBFRAlbOo hyl7iY4vyYi3cXdklLPbPMcEtdh8adPSxHqW+jELcN+dDM/jbYQ= =9SG9 -----END PGP SIGNATURE-----