-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transit or tampered with,
perform these two steps to cryptographically verify its integrity:

1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org

   The primary key fingerprint must be:

      DEE9 0D99 70AE 35D5 5B7C  6C2D C6D2 54B7 6A9D 9430

   The signing subkey fingerprint must be:

      21FC E5FF 2EC6 4131 8D9E  A8F7 D9FC 75C2 9D0A 033B

    $ gpg --verify turnkey-znuny-19.0-trixie-amd64.iso.hash

2. Recalculate either image checksum and confirm it matches:

    $ sha256sum turnkey-znuny-19.0-trixie-amd64.iso
      34fa59642ce358fb6929b5c7a7809a476908a8282d453f64122957caebaeec9e  turnkey-znuny-19.0-trixie-amd64.iso

    $ sha512sum turnkey-znuny-19.0-trixie-amd64.iso
      79fed79e3d6ec23f521a9a1649feb10a15c71f166f92ab73b2bf7dcce8a693ef62c2c8d2d2a39c6a6cabf0362bb99a4b8f7a8e0200d96f8d28c3ac656396afe5  turnkey-znuny-19.0-trixie-amd64.iso

   Check either checksum automatically:

    $ sha256sum --ignore-missing -c turnkey-znuny-19.0-trixie-amd64.iso.hash
      turnkey-znuny-19.0-trixie-amd64.iso: OK

    $ sha512sum --ignore-missing -c turnkey-znuny-19.0-trixie-amd64.iso.hash
      turnkey-znuny-19.0-trixie-amd64.iso: OK

Key identifiers for audit use:

  Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430
  Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmqYjD8ACgkQ2fx1wp0K
Azuo6g//Uv1C6cFLFzgivvLWMrRP0KcDV2A8qqrfI9mWk+eDYG3ifUAEiiP7+aZq
Vp6rDay6C1/tpPWy3eXFFgXXHjRQdQorR+FlQn2+YSWwRsnmbq+ef9/v7tBPX4xo
Sk5lRef7MKTc5pyNOsm4diWSnENE60K31WqfAld/wblmfeOdNNggfuwftWGGjfyA
IMAbx1HEifDSB4vwtm45MGlLeQWqwd0ehKCoJKLA6FYb1VGFGSmuCY8QstmUAARo
2Kmqs4+d+FM0gYyY4GlvYSgq9ko2NCpdYJ2Tmrus9M/RulacGkcQ/aZBzITjK+Sy
2zF60xQINlcfWfQHYNz3p4r0LWL/7TxQo+woLB9mr9xmnen9PqTfCnayzcTmHPJS
d7Oa/AubHS8ip8tAWTs59jG+okXcaVypNrK7qFeb73ZbXc/1X+7WzPLKPAXgaVOF
r8sMzlAPPMYToRoRDd1Yb2zLMszQG4APhBYPypDq2YivgqesfhAMZT6gBVW9AXGl
Fkk+MXDbNSRUwLCImdHrohadJgvLIrLbl4JQdJpnmqAZGDgtWJWn26Z/tQi6Dly7
Xv5cgoShHWsMh9d3AMRPhPbbk6FUrK5XSPY7hMiN7eJZMaOLFT3EkP0IBBsgjdAL
RH6fr+FvMQHahAFWtSVnbswhCKW2E/VehvwXRSuXqv7R7pwm1rk=
=y3D8
-----END PGP SIGNATURE-----