-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transit or tampered with,
perform these two steps to cryptographically verify its integrity:

1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org

   The primary key fingerprint must be:

      DEE9 0D99 70AE 35D5 5B7C  6C2D C6D2 54B7 6A9D 9430

   The signing subkey fingerprint must be:

      21FC E5FF 2EC6 4131 8D9E  A8F7 D9FC 75C2 9D0A 033B

    $ gpg --verify turnkey-xoops-19.0-trixie-amd64.iso.hash

2. Recalculate either image checksum and confirm it matches:

    $ sha256sum turnkey-xoops-19.0-trixie-amd64.iso
      42b63765ce269fcf1cbbef2924e9b35511e69fce77ea8050313a860fdef25a11  turnkey-xoops-19.0-trixie-amd64.iso

    $ sha512sum turnkey-xoops-19.0-trixie-amd64.iso
      7157fc416002b1c27a122b9c6aaf1b5426a39cdd6cdd3e73257945ae59e894830b56a39db623b19cdb5fa6543145b7cf79c779ea99b522aa24febaeaf34d6193  turnkey-xoops-19.0-trixie-amd64.iso

   Check either checksum automatically:

    $ sha256sum --ignore-missing -c turnkey-xoops-19.0-trixie-amd64.iso.hash
      turnkey-xoops-19.0-trixie-amd64.iso: OK

    $ sha512sum --ignore-missing -c turnkey-xoops-19.0-trixie-amd64.iso.hash
      turnkey-xoops-19.0-trixie-amd64.iso: OK

Key identifiers for audit use:

  Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430
  Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B
-----BEGIN PGP SIGNATURE-----
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=GkE9
-----END PGP SIGNATURE-----