-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transit or tampered with,
perform these two steps to cryptographically verify its integrity:

1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org

   The primary key fingerprint must be:

      DEE9 0D99 70AE 35D5 5B7C  6C2D C6D2 54B7 6A9D 9430

   The signing subkey fingerprint must be:

      21FC E5FF 2EC6 4131 8D9E  A8F7 D9FC 75C2 9D0A 033B

    $ gpg --verify turnkey-roundup-19.0-trixie-amd64.iso.hash

2. Recalculate either image checksum and confirm it matches:

    $ sha256sum turnkey-roundup-19.0-trixie-amd64.iso
      3f2ade467e516f8ed1711ba12e777f00a0374155b6a0b6409940dc71c31fabd4  turnkey-roundup-19.0-trixie-amd64.iso

    $ sha512sum turnkey-roundup-19.0-trixie-amd64.iso
      3509a101fac04e639f03a6de9258715d69bb446bae19426b80c0f9af15f500f42093ab46b67e8c4c1fbab6ab90b8654bf0267b864d706fcecc58878c8ca3b856  turnkey-roundup-19.0-trixie-amd64.iso

   Check either checksum automatically:

    $ sha256sum --ignore-missing -c turnkey-roundup-19.0-trixie-amd64.iso.hash
      turnkey-roundup-19.0-trixie-amd64.iso: OK

    $ sha512sum --ignore-missing -c turnkey-roundup-19.0-trixie-amd64.iso.hash
      turnkey-roundup-19.0-trixie-amd64.iso: OK

Key identifiers for audit use:

  Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430
  Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B
-----BEGIN PGP SIGNATURE-----
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=cqK7
-----END PGP SIGNATURE-----