-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transit or tampered with,
perform these two steps to cryptographically verify its integrity:

1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org

   The primary key fingerprint must be:

      DEE9 0D99 70AE 35D5 5B7C  6C2D C6D2 54B7 6A9D 9430

   The signing subkey fingerprint must be:

      21FC E5FF 2EC6 4131 8D9E  A8F7 D9FC 75C2 9D0A 033B

    $ gpg --verify turnkey-web2py-19.0-trixie-amd64.iso.hash

2. Recalculate either image checksum and confirm it matches:

    $ sha256sum turnkey-web2py-19.0-trixie-amd64.iso
      80a1829722f01383b12b2079204bdb950c47e73b04ba8fd3c6ec83691d5f40e3  turnkey-web2py-19.0-trixie-amd64.iso

    $ sha512sum turnkey-web2py-19.0-trixie-amd64.iso
      580ae93019a0a1baa3ab7d126ee9ab27348014a90193f356087253f012708e178acb9f3426068a2d8b4bb56cd2ec19659f0b64493a23d9fabd53f088cfb436f9  turnkey-web2py-19.0-trixie-amd64.iso

   Check either checksum automatically:

    $ sha256sum --ignore-missing -c turnkey-web2py-19.0-trixie-amd64.iso.hash
      turnkey-web2py-19.0-trixie-amd64.iso: OK

    $ sha512sum --ignore-missing -c turnkey-web2py-19.0-trixie-amd64.iso.hash
      turnkey-web2py-19.0-trixie-amd64.iso: OK

Key identifiers for audit use:

  Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430
  Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B
-----BEGIN PGP SIGNATURE-----
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=ANxu
-----END PGP SIGNATURE-----