-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transit or tampered with,
perform these two steps to cryptographically verify its integrity:

1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org

   The primary key fingerprint must be:

      DEE9 0D99 70AE 35D5 5B7C  6C2D C6D2 54B7 6A9D 9430

   The signing subkey fingerprint must be:

      21FC E5FF 2EC6 4131 8D9E  A8F7 D9FC 75C2 9D0A 033B

    $ gpg --verify turnkey-wordpress-19.0-trixie-amd64.iso.hash

2. Recalculate either image checksum and confirm it matches:

    $ sha256sum turnkey-wordpress-19.0-trixie-amd64.iso
      93444ac099bdb1a0b1aecf9118117f8e00f21e22befce2c8e1c47dd371f1fd9e  turnkey-wordpress-19.0-trixie-amd64.iso

    $ sha512sum turnkey-wordpress-19.0-trixie-amd64.iso
      9d8317618ee38a8c0bf51b5db375143ad5d669d1e8e4430bff19ed18b8386c1187d0228b214375e127998d3add616b60ec8db592b92d0ca20a9846ff41072b85  turnkey-wordpress-19.0-trixie-amd64.iso

   Check either checksum automatically:

    $ sha256sum --ignore-missing -c turnkey-wordpress-19.0-trixie-amd64.iso.hash
      turnkey-wordpress-19.0-trixie-amd64.iso: OK

    $ sha512sum --ignore-missing -c turnkey-wordpress-19.0-trixie-amd64.iso.hash
      turnkey-wordpress-19.0-trixie-amd64.iso: OK

Key identifiers for audit use:

  Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430
  Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B
-----BEGIN PGP SIGNATURE-----
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=C1xs
-----END PGP SIGNATURE-----