-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transit or tampered with,
perform these two steps to cryptographically verify its integrity:

1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org

   The primary key fingerprint must be:

      DEE9 0D99 70AE 35D5 5B7C  6C2D C6D2 54B7 6A9D 9430

   The signing subkey fingerprint must be:

      21FC E5FF 2EC6 4131 8D9E  A8F7 D9FC 75C2 9D0A 033B

    $ gpg --verify turnkey-rails-19.0-trixie-amd64.iso.hash

2. Recalculate either image checksum and confirm it matches:

    $ sha256sum turnkey-rails-19.0-trixie-amd64.iso
      45f8aae8865c0ec1ab912dd51f599042834a3d3e7131ad32be7cb7dbd92e1d3f  turnkey-rails-19.0-trixie-amd64.iso

    $ sha512sum turnkey-rails-19.0-trixie-amd64.iso
      30d6f74e67884bc0e737acbc234d1e46f83f16a5f6553d1e62809e1fa8cfb91ab26370da414effeb772babb31efe8a34dbb657f09e39a180ed4dc7fba3ad6e96  turnkey-rails-19.0-trixie-amd64.iso

   Check either checksum automatically:

    $ sha256sum --ignore-missing -c turnkey-rails-19.0-trixie-amd64.iso.hash
      turnkey-rails-19.0-trixie-amd64.iso: OK

    $ sha512sum --ignore-missing -c turnkey-rails-19.0-trixie-amd64.iso.hash
      turnkey-rails-19.0-trixie-amd64.iso: OK

Key identifiers for audit use:

  Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430
  Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmqYjDMACgkQ2fx1wp0K
AzvbEA/+LcUOipZ/28uhJyTFMLRCJ5LmxNfkJXcOCf8ql19MJGGicswqKpZaV11M
uJVfsIlu7jhsU7GTZkALFMFnbESUyt+IxmtJwZRD2qAG7Rx8binBQImtRlwGczCi
uD0E7MKlqnBZfDrrW123DOC/4myP5JUrHcl7HuKiVAuPmXPnj+3r/hm8C+ThODgN
98Zr7t5VCBq+1+UrpDJjtBv9+JSqUxIZJJRieW4UHx+JrVIyf6Iil+Np3fpG/9lz
fsiTeuUA6n4JyLghhzUy1Y2x2Gg0U3j/H6qJXDTxZaAlSP/+NV8iucb8D9JGRsqm
HXuq6ItufvFZyDdKIQLibBhSq73EOGF6IotUByblD4+RMkpUB3IR30525+xbNWx3
Fbn7I2niXJqlnxqXKZz/JQAQY4FXmKdEatXnvcTWBGoYAKe1GJYFbvkxnxUdEKeT
fow4fV1tK4iIhPRaziIcmT8uJ2rYUq3EqDTD68buhRNLVarkWIjX0o7547zTTc71
cjzAxpZ7I72djiNcKrC+2At2YxRH6IIX9bdqFlequ8Zyqai+AvMJHt2cvksSv6Gl
uggEJYoDcPcavqdy9f9twrkS588+vUKRfvHOem1BE6xAMuU8CoNbUk+ax2trxs3h
3/hOfG+PElHhLS4OEtYleudCWKGf/EDPqZm3KDqX/MQB0+5K6m8=
=zKaW
-----END PGP SIGNATURE-----