-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transit or tampered with,
perform these two steps to cryptographically verify its integrity:

1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org

   The primary key fingerprint must be:

      DEE9 0D99 70AE 35D5 5B7C  6C2D C6D2 54B7 6A9D 9430

   The signing subkey fingerprint must be:

      21FC E5FF 2EC6 4131 8D9E  A8F7 D9FC 75C2 9D0A 033B

    $ gpg --verify turnkey-oscommerce-19.0-trixie-amd64.iso.hash

2. Recalculate either image checksum and confirm it matches:

    $ sha256sum turnkey-oscommerce-19.0-trixie-amd64.iso
      7a551f5cc2675ef993dd64e3e80df7ce6585a3a3d19b9383464c6cc06fbdb6f3  turnkey-oscommerce-19.0-trixie-amd64.iso

    $ sha512sum turnkey-oscommerce-19.0-trixie-amd64.iso
      73c3ad816c113d5d7f61f52ba8d840c664b35289f7f3ded8ce931c90673986e167668f32beb3a713a35770b99e59083a18e21ac7587c41f37c00522887caf182  turnkey-oscommerce-19.0-trixie-amd64.iso

   Check either checksum automatically:

    $ sha256sum --ignore-missing -c turnkey-oscommerce-19.0-trixie-amd64.iso.hash
      turnkey-oscommerce-19.0-trixie-amd64.iso: OK

    $ sha512sum --ignore-missing -c turnkey-oscommerce-19.0-trixie-amd64.iso.hash
      turnkey-oscommerce-19.0-trixie-amd64.iso: OK

Key identifiers for audit use:

  Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430
  Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B
-----BEGIN PGP SIGNATURE-----
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=e/UX
-----END PGP SIGNATURE-----