-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transit or tampered with,
perform these two steps to cryptographically verify its integrity:

1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org

   The primary key fingerprint must be:

      DEE9 0D99 70AE 35D5 5B7C  6C2D C6D2 54B7 6A9D 9430

   The signing subkey fingerprint must be:

      21FC E5FF 2EC6 4131 8D9E  A8F7 D9FC 75C2 9D0A 033B

    $ gpg --verify turnkey-simplemachines-19.0-trixie-amd64.iso.hash

2. Recalculate either image checksum and confirm it matches:

    $ sha256sum turnkey-simplemachines-19.0-trixie-amd64.iso
      8df440e18110d786c809831aa791236a9ba53a0addc23cb7a1edbb5d6f2c4222  turnkey-simplemachines-19.0-trixie-amd64.iso

    $ sha512sum turnkey-simplemachines-19.0-trixie-amd64.iso
      6f7917ae215880e7c10bac250bf70122c06ea24e17d7f45307561d2a7f83202ff11942626036ae5098b1a33a291580de68c5dc463d00e369f0c82cd4430ed4cb  turnkey-simplemachines-19.0-trixie-amd64.iso

   Check either checksum automatically:

    $ sha256sum --ignore-missing -c turnkey-simplemachines-19.0-trixie-amd64.iso.hash
      turnkey-simplemachines-19.0-trixie-amd64.iso: OK

    $ sha512sum --ignore-missing -c turnkey-simplemachines-19.0-trixie-amd64.iso.hash
      turnkey-simplemachines-19.0-trixie-amd64.iso: OK

Key identifiers for audit use:

  Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430
  Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B
-----BEGIN PGP SIGNATURE-----
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=dxtD
-----END PGP SIGNATURE-----