-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transit or tampered with,
perform these two steps to cryptographically verify its integrity:

1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org

   The primary key fingerprint must be:

      DEE9 0D99 70AE 35D5 5B7C  6C2D C6D2 54B7 6A9D 9430

   The signing subkey fingerprint must be:

      21FC E5FF 2EC6 4131 8D9E  A8F7 D9FC 75C2 9D0A 033B

    $ gpg --verify turnkey-yiiframework-19.0-trixie-amd64.iso.hash

2. Recalculate either image checksum and confirm it matches:

    $ sha256sum turnkey-yiiframework-19.0-trixie-amd64.iso
      55604e0a467554c7831c193af0350dbe2d86b03709760460f143e73eb2725f2e  turnkey-yiiframework-19.0-trixie-amd64.iso

    $ sha512sum turnkey-yiiframework-19.0-trixie-amd64.iso
      703964fa3678932251ec7c34500beae190b715752c880fc35b9a08378dbf16466bede635852ffbd7a0e23e048df5f1a052e95b357c05642dfa98d9e2da7239a1  turnkey-yiiframework-19.0-trixie-amd64.iso

   Check either checksum automatically:

    $ sha256sum --ignore-missing -c turnkey-yiiframework-19.0-trixie-amd64.iso.hash
      turnkey-yiiframework-19.0-trixie-amd64.iso: OK

    $ sha512sum --ignore-missing -c turnkey-yiiframework-19.0-trixie-amd64.iso.hash
      turnkey-yiiframework-19.0-trixie-amd64.iso: OK

Key identifiers for audit use:

  Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430
  Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B
-----BEGIN PGP SIGNATURE-----
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=w6nD
-----END PGP SIGNATURE-----