-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transit or tampered with,
perform these two steps to cryptographically verify its integrity:

1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org

   The primary key fingerprint must be:

      DEE9 0D99 70AE 35D5 5B7C  6C2D C6D2 54B7 6A9D 9430

   The signing subkey fingerprint must be:

      21FC E5FF 2EC6 4131 8D9E  A8F7 D9FC 75C2 9D0A 033B

    $ gpg --verify turnkey-tomcat-19.0-trixie-amd64.iso.hash

2. Recalculate either image checksum and confirm it matches:

    $ sha256sum turnkey-tomcat-19.0-trixie-amd64.iso
      fa8067ef9088db67de33e813ec7991b5075eaa4578a0e2b2ec8ca530bf0dc250  turnkey-tomcat-19.0-trixie-amd64.iso

    $ sha512sum turnkey-tomcat-19.0-trixie-amd64.iso
      c67f2c817783c0d107511323d64aa5f1c0fa0071d565dd80fd4297d1919ace0896e3cb96a42cf9798165e54506e6c070c87247c59e41531df7c6731c4811c3ab  turnkey-tomcat-19.0-trixie-amd64.iso

   Check either checksum automatically:

    $ sha256sum --ignore-missing -c turnkey-tomcat-19.0-trixie-amd64.iso.hash
      turnkey-tomcat-19.0-trixie-amd64.iso: OK

    $ sha512sum --ignore-missing -c turnkey-tomcat-19.0-trixie-amd64.iso.hash
      turnkey-tomcat-19.0-trixie-amd64.iso: OK

Key identifiers for audit use:

  Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430
  Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B
-----BEGIN PGP SIGNATURE-----
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=V7cs
-----END PGP SIGNATURE-----