-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transit or tampered with,
perform these two steps to cryptographically verify its integrity:

1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org

   The primary key fingerprint must be:

      DEE9 0D99 70AE 35D5 5B7C  6C2D C6D2 54B7 6A9D 9430

   The signing subkey fingerprint must be:

      21FC E5FF 2EC6 4131 8D9E  A8F7 D9FC 75C2 9D0A 033B

    $ gpg --verify turnkey-tomcat-apache-19.0-trixie-amd64.iso.hash

2. Recalculate either image checksum and confirm it matches:

    $ sha256sum turnkey-tomcat-apache-19.0-trixie-amd64.iso
      1326e0cc86c48b8378ca009c019b303c1a94d77bc73289599ce51d4469321f32  turnkey-tomcat-apache-19.0-trixie-amd64.iso

    $ sha512sum turnkey-tomcat-apache-19.0-trixie-amd64.iso
      ec935484b59f1c3d142b6d21e6218679da4959d7df7fcddc8653278fab3856e0b2fa1431494226701f800cc8458a15f48d63dcdd75a8addc48a83e4efa4c161a  turnkey-tomcat-apache-19.0-trixie-amd64.iso

   Check either checksum automatically:

    $ sha256sum --ignore-missing -c turnkey-tomcat-apache-19.0-trixie-amd64.iso.hash
      turnkey-tomcat-apache-19.0-trixie-amd64.iso: OK

    $ sha512sum --ignore-missing -c turnkey-tomcat-apache-19.0-trixie-amd64.iso.hash
      turnkey-tomcat-apache-19.0-trixie-amd64.iso: OK

Key identifiers for audit use:

  Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430
  Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B
-----BEGIN PGP SIGNATURE-----
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=lSwQ
-----END PGP SIGNATURE-----