-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transit or tampered with,
perform these two steps to cryptographically verify its integrity:

1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org

   The primary key fingerprint must be:

      DEE9 0D99 70AE 35D5 5B7C  6C2D C6D2 54B7 6A9D 9430

   The signing subkey fingerprint must be:

      21FC E5FF 2EC6 4131 8D9E  A8F7 D9FC 75C2 9D0A 033B

    $ gpg --verify turnkey-tkldev-19.0-trixie-amd64.iso.hash

2. Recalculate either image checksum and confirm it matches:

    $ sha256sum turnkey-tkldev-19.0-trixie-amd64.iso
      22a8472ebade3903267434957db4cbc049520516238f3b171c83c92d0f3dcfa6  turnkey-tkldev-19.0-trixie-amd64.iso

    $ sha512sum turnkey-tkldev-19.0-trixie-amd64.iso
      df8568546373d8afe7eb44e37add759dd641cb9422d82ee5c56ae4fbfeb5d455f249ec523c2a3503b6579bdf6ef7ffbccdecf5e555a5042e10f134f4749692c0  turnkey-tkldev-19.0-trixie-amd64.iso

   Check either checksum automatically:

    $ sha256sum --ignore-missing -c turnkey-tkldev-19.0-trixie-amd64.iso.hash
      turnkey-tkldev-19.0-trixie-amd64.iso: OK

    $ sha512sum --ignore-missing -c turnkey-tkldev-19.0-trixie-amd64.iso.hash
      turnkey-tkldev-19.0-trixie-amd64.iso: OK

Key identifiers for audit use:

  Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430
  Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B
-----BEGIN PGP SIGNATURE-----
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=aSLf
-----END PGP SIGNATURE-----