-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transit or tampered with,
perform these two steps to cryptographically verify its integrity:

1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org

   The primary key fingerprint must be:

      DEE9 0D99 70AE 35D5 5B7C  6C2D C6D2 54B7 6A9D 9430

   The signing subkey fingerprint must be:

      21FC E5FF 2EC6 4131 8D9E  A8F7 D9FC 75C2 9D0A 033B

    $ gpg --verify turnkey-syncthing-19.0-trixie-amd64.iso.hash

2. Recalculate either image checksum and confirm it matches:

    $ sha256sum turnkey-syncthing-19.0-trixie-amd64.iso
      dd9a0c71df7052bfa06aaee9024ced3c13ec0f329c7127af6270454abe718dec  turnkey-syncthing-19.0-trixie-amd64.iso

    $ sha512sum turnkey-syncthing-19.0-trixie-amd64.iso
      f558a7a49af185b6a6d08be87c9be795383163041bc0692fdf2aa4463d4d66bde932196cc5a8a59fa540563de942b56e88e03a26e9717e85d1f23151ad52efc8  turnkey-syncthing-19.0-trixie-amd64.iso

   Check either checksum automatically:

    $ sha256sum --ignore-missing -c turnkey-syncthing-19.0-trixie-amd64.iso.hash
      turnkey-syncthing-19.0-trixie-amd64.iso: OK

    $ sha512sum --ignore-missing -c turnkey-syncthing-19.0-trixie-amd64.iso.hash
      turnkey-syncthing-19.0-trixie-amd64.iso: OK

Key identifiers for audit use:

  Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430
  Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B
-----BEGIN PGP SIGNATURE-----
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=E7lJ
-----END PGP SIGNATURE-----