-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transit or tampered with, perform these two steps to cryptographically verify its integrity: 1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org The primary key fingerprint must be: DEE9 0D99 70AE 35D5 5B7C 6C2D C6D2 54B7 6A9D 9430 The signing subkey fingerprint must be: 21FC E5FF 2EC6 4131 8D9E A8F7 D9FC 75C2 9D0A 033B $ gpg --verify turnkey-postgresql-19.0-trixie-amd64.iso.hash 2. Recalculate either image checksum and confirm it matches: $ sha256sum turnkey-postgresql-19.0-trixie-amd64.iso 62a75065b739ef60c5f365208af0371ad1f04c736ee4e7fe3f1803f57ab23027 turnkey-postgresql-19.0-trixie-amd64.iso $ sha512sum turnkey-postgresql-19.0-trixie-amd64.iso b7fbd93a6bdad8ce39bb2e0785ebdfbb60659645eaa5a8b47b1ccfc236cd387eb5d7e29e19bb511d5b7e9b42cedbfe76f4bbf0a7c1a107b57188215278330811 turnkey-postgresql-19.0-trixie-amd64.iso Check either checksum automatically: $ sha256sum --ignore-missing -c turnkey-postgresql-19.0-trixie-amd64.iso.hash turnkey-postgresql-19.0-trixie-amd64.iso: OK $ sha512sum --ignore-missing -c turnkey-postgresql-19.0-trixie-amd64.iso.hash turnkey-postgresql-19.0-trixie-amd64.iso: OK Key identifiers for audit use: Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430 Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmqYjDEACgkQ2fx1wp0K AzsYAQ/8CNbR6H3gk/gqsUTpN4P73+83G31QEicYSL8R68C1rDws8W0qswvkY0cc f1FQa54jeT0Cb/9M3GpKk8S/C1ubzg51P8aCVJHVJBVxZ071vJ611zNVCGLMxJEM VpL15Kim53ZJbAsGnroGm0opaDx8ioaHkIQukf3HD4xrfcI3T6LxTsuZRACygcRR UfFk2Oq373LpS02OzruWwfXiqhsRa/NwEaDuhPMubEfdtzkJpkJz27bGnktLtPSX iA4RllBzNxYIfRUwE8JKpPS8EPNiHaUEHnrbdHeOwERDwU6MBEECd0Nin73taz89 T/n6dE6RHxOHrv+FKl4KX8j9AiChgiGylJQwW6zG06l51Ml2gwuwjACd+hLaPxq9 G0P+uanahM87b5mgN34e/PrVgUTZfqnZEIQbFtHIhcDspuert7rDDLvclWWD/vm0 k9kruvtD0a4hCZXxCJF4NxqghI0u3nKI/e0UJM6EJZSz3mJuGNZV9gaji9pTF9oO rgJ3wuRbURZxQBL/FEmCnYjRmcrPn+lX/KjRSZTX1Yu9ZCq5Kot9bKepP5Xrw6Wa AGdYoDrHLp6taamhdcuwY9hXwkIcatxW08vbaRKR9kv5mDExbMhsubIwRB5go/7k jq5a9+DIdVGJ6dInACRW3fg3LrsENz4Kmbtf0vAgXq6zTuAblmY= =hJSL -----END PGP SIGNATURE-----