-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transit or tampered with,
perform these two steps to cryptographically verify its integrity:

1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org

   The primary key fingerprint must be:

      DEE9 0D99 70AE 35D5 5B7C  6C2D C6D2 54B7 6A9D 9430

   The signing subkey fingerprint must be:

      21FC E5FF 2EC6 4131 8D9E  A8F7 D9FC 75C2 9D0A 033B

    $ gpg --verify turnkey-redmine-19.0-trixie-amd64.iso.hash

2. Recalculate either image checksum and confirm it matches:

    $ sha256sum turnkey-redmine-19.0-trixie-amd64.iso
      572ab60a8848a470d535de8abb0dfd650d85fcfbd34f91ce8dec769890735d54  turnkey-redmine-19.0-trixie-amd64.iso

    $ sha512sum turnkey-redmine-19.0-trixie-amd64.iso
      27ed979a201c71e4083b457b47b1f35014b1807963a6f64ae64d0a2ebe4f05dc14900083fd3704ef010b72c937a5ed5bae3084ccde09701c9a3e073f555dfdb6  turnkey-redmine-19.0-trixie-amd64.iso

   Check either checksum automatically:

    $ sha256sum --ignore-missing -c turnkey-redmine-19.0-trixie-amd64.iso.hash
      turnkey-redmine-19.0-trixie-amd64.iso: OK

    $ sha512sum --ignore-missing -c turnkey-redmine-19.0-trixie-amd64.iso.hash
      turnkey-redmine-19.0-trixie-amd64.iso: OK

Key identifiers for audit use:

  Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430
  Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B
-----BEGIN PGP SIGNATURE-----
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=uehG
-----END PGP SIGNATURE-----