-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transit or tampered with,
perform these two steps to cryptographically verify its integrity:

1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org

   The primary key fingerprint must be:

      DEE9 0D99 70AE 35D5 5B7C  6C2D C6D2 54B7 6A9D 9430

   The signing subkey fingerprint must be:

      21FC E5FF 2EC6 4131 8D9E  A8F7 D9FC 75C2 9D0A 033B

    $ gpg --verify turnkey-ushahidi-19.0-trixie-amd64.iso.hash

2. Recalculate either image checksum and confirm it matches:

    $ sha256sum turnkey-ushahidi-19.0-trixie-amd64.iso
      9faf6ef0a33a6b46dff6fcc031dd1ab9861331166a7ceac598c013ef92db0333  turnkey-ushahidi-19.0-trixie-amd64.iso

    $ sha512sum turnkey-ushahidi-19.0-trixie-amd64.iso
      b5b3514bd3a2f89beaa44584a9651f9d17f18edc509fc55548272126b6583165458c0d0baab2d7e9bd123a989e4c37f22131182796b224f4aa6210aee7ef1851  turnkey-ushahidi-19.0-trixie-amd64.iso

   Check either checksum automatically:

    $ sha256sum --ignore-missing -c turnkey-ushahidi-19.0-trixie-amd64.iso.hash
      turnkey-ushahidi-19.0-trixie-amd64.iso: OK

    $ sha512sum --ignore-missing -c turnkey-ushahidi-19.0-trixie-amd64.iso.hash
      turnkey-ushahidi-19.0-trixie-amd64.iso: OK

Key identifiers for audit use:

  Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430
  Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B
-----BEGIN PGP SIGNATURE-----
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=+aU4
-----END PGP SIGNATURE-----