-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transit or tampered with,
perform these two steps to cryptographically verify its integrity:

1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org

   The primary key fingerprint must be:

      DEE9 0D99 70AE 35D5 5B7C  6C2D C6D2 54B7 6A9D 9430

   The signing subkey fingerprint must be:

      21FC E5FF 2EC6 4131 8D9E  A8F7 D9FC 75C2 9D0A 033B

    $ gpg --verify turnkey-typo3-19.0-trixie-amd64.iso.hash

2. Recalculate either image checksum and confirm it matches:

    $ sha256sum turnkey-typo3-19.0-trixie-amd64.iso
      b903f18768f224202956ddd9ba3147982dba23a620a83f3c9b4e5b5c76642ec1  turnkey-typo3-19.0-trixie-amd64.iso

    $ sha512sum turnkey-typo3-19.0-trixie-amd64.iso
      2082ef93fb30c2a3b2168c7425f1bde26ade4f426fbb33d7db48f594443f1a8287e2d2372a86def12ee19a69993e8a877b10acddd344ac38c7a161d898528dac  turnkey-typo3-19.0-trixie-amd64.iso

   Check either checksum automatically:

    $ sha256sum --ignore-missing -c turnkey-typo3-19.0-trixie-amd64.iso.hash
      turnkey-typo3-19.0-trixie-amd64.iso: OK

    $ sha512sum --ignore-missing -c turnkey-typo3-19.0-trixie-amd64.iso.hash
      turnkey-typo3-19.0-trixie-amd64.iso: OK

Key identifiers for audit use:

  Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430
  Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B
-----BEGIN PGP SIGNATURE-----
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=TlXn
-----END PGP SIGNATURE-----