-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transit or tampered with,
perform these two steps to cryptographically verify its integrity:

1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org

   The primary key fingerprint must be:

      DEE9 0D99 70AE 35D5 5B7C  6C2D C6D2 54B7 6A9D 9430

   The signing subkey fingerprint must be:

      21FC E5FF 2EC6 4131 8D9E  A8F7 D9FC 75C2 9D0A 033B

    $ gpg --verify turnkey-zencart-19.0-trixie-amd64.iso.hash

2. Recalculate either image checksum and confirm it matches:

    $ sha256sum turnkey-zencart-19.0-trixie-amd64.iso
      c42c990d92571e144d384b33f467b639046f06b3738846daabaf74920ca55382  turnkey-zencart-19.0-trixie-amd64.iso

    $ sha512sum turnkey-zencart-19.0-trixie-amd64.iso
      9d05f41200218d8970fa9f14f1f14484bba8b6ab431a50c3ab22fa37f9be3433b226f6f8dca296faa343753cd343ba3bebc3d693b9f03a3f1d487859359131e0  turnkey-zencart-19.0-trixie-amd64.iso

   Check either checksum automatically:

    $ sha256sum --ignore-missing -c turnkey-zencart-19.0-trixie-amd64.iso.hash
      turnkey-zencart-19.0-trixie-amd64.iso: OK

    $ sha512sum --ignore-missing -c turnkey-zencart-19.0-trixie-amd64.iso.hash
      turnkey-zencart-19.0-trixie-amd64.iso: OK

Key identifiers for audit use:

  Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430
  Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B
-----BEGIN PGP SIGNATURE-----
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=gDQx
-----END PGP SIGNATURE-----