-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transit or tampered with,
perform these two steps to cryptographically verify its integrity:

1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org

   The primary key fingerprint must be:

      DEE9 0D99 70AE 35D5 5B7C  6C2D C6D2 54B7 6A9D 9430

   The signing subkey fingerprint must be:

      21FC E5FF 2EC6 4131 8D9E  A8F7 D9FC 75C2 9D0A 033B

    $ gpg --verify turnkey-phplist-19.0-trixie-amd64.iso.hash

2. Recalculate either image checksum and confirm it matches:

    $ sha256sum turnkey-phplist-19.0-trixie-amd64.iso
      6213ce8b1fd157d618b5952f285fbc0b540d88c3205cc904181a2ee2f72d9791  turnkey-phplist-19.0-trixie-amd64.iso

    $ sha512sum turnkey-phplist-19.0-trixie-amd64.iso
      df6de542a6e4151fff3486175b0a8468c717bb46d95b02311622e0125a3e2de481f18a0bbe15f6cfcf78b5069cea8e618b656e90288e06883478636d3a78a295  turnkey-phplist-19.0-trixie-amd64.iso

   Check either checksum automatically:

    $ sha256sum --ignore-missing -c turnkey-phplist-19.0-trixie-amd64.iso.hash
      turnkey-phplist-19.0-trixie-amd64.iso: OK

    $ sha512sum --ignore-missing -c turnkey-phplist-19.0-trixie-amd64.iso.hash
      turnkey-phplist-19.0-trixie-amd64.iso: OK

Key identifiers for audit use:

  Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430
  Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmqYjDEACgkQ2fx1wp0K
AzuQXA//WIdB3LqzGOokdduSPTw3QAwVrrWm81z4zEIGh08bBFwxxIlIRBcThKBh
21O/Yks+zDalHUfHemWI7/a/J5nFfbs2D11J46MZaX7rB7DlJzp6oyR5OSgTulqB
rnDeZ6gD/FQIJzp+fQOROhxA6tdq5LcDpTCXq6hU4bK/cbNYeoUG97TK/BUQJ+za
L3AYQd048jCiQhiIGRqFp3uRC6hV7ilHaZMbV7IFHW030305Nag1QgjH6LyuO1kO
dnVOp+jZOJAwyXocaBxEuzctxCg3hQFjqOzQUvOP0ha5rPjfc/fnMUswbrEMdUJ6
NE0IP/MPUKbxJ9lA/VsqhaPpI6Dtdg0cMOKGTpzjbZ8fS7IasMb7c79BnDAVVBK2
HGL/PkYsKgu/QqYqGBoQwPMa5p1t0TT3uNLuL4huQfA0nypAx5Q36yw5b3XFHblS
q7471btRkIgOvGakCyfkIRy84npQAk+I7WAJPBc8hUO6nFGF5Rl/r/olmFhzvCr8
SgakSlA8iW9JaX15fna/ChEE0rXKyp/p+o32LsvJJLKO3Y7RgeanB7TDWPdSDk4W
Nv4CGy6zUREniNDopml2osYQdcYtfLHkMtJ1lS6KKSxMuTvkO2d/8GNaLIIQa4Mq
finaHW8H5gtQLL5IEW6MnCk2U8eyaZYw+nAecTs5kcoIEokPvwE=
=LXTX
-----END PGP SIGNATURE-----