-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transmit or tampered with,
perform the following two steps to cryptographically verify image integrity:

1. Verify the authenticity of this file by checking that it is signed with our
   GPG release key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint release-trixie-images@turnkeylinux.org
      pub   rsa4096 2025-10-07 [SC] [expires: 2045-10-02]
            DEE9 0D99 70AE 35D5 5B7C  6C2D C6D2 54B7 6A9D 9430
      uid           [ unknown] TurnKey GNU/Linux Trixie Images (GPG signing key for TurnKey Linux Trixie Images) <release-trixie-images@turnkeylinux.org>
      sub   rsa4096 2025-10-07 [S] [expires: 2045-10-02]
      
    $ gpg --verify debian-13-turnkey-ansible_19.0-1_amd64.tar.gz.hash
      gpg: Signature made using RSA key ID DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430
      gpg: Good signature from "0"

2. Recalculate the image hash and make sure it matches your choice of hash below.

    $ sha256sum debian-13-turnkey-ansible_19.0-1_amd64.tar.gz
      90ccda42bd7adfe400efd7c49a4f32234542eed047a04217cc3148d1d086eb8e  debian-13-turnkey-ansible_19.0-1_amd64.tar.gz

    $ sha512sum debian-13-turnkey-ansible_19.0-1_amd64.tar.gz
      15b40430008209312341370a0a144dfaff88b719da6e0dfe2767c586801b124e013b669db682cbfe04323b098a075cbd599e86bf7e8a43db7b4e6310f932c128  debian-13-turnkey-ansible_19.0-1_amd64.tar.gz

   Note, you can compare hashes automatically::

    $ sha256sum -c debian-13-turnkey-ansible_19.0-1_amd64.tar.gz.hash
      debian-13-turnkey-ansible_19.0-1_amd64.tar.gz: OK

    $ sha512sum -c debian-13-turnkey-ansible_19.0-1_amd64.tar.gz.hash
      debian-13-turnkey-ansible_19.0-1_amd64.tar.gz: OK

    Final note, when checking SHAs automatically, please ignore warning noting
    that some lines are improperly formatted.

-----BEGIN PGP SIGNATURE-----
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=Rr3s
-----END PGP SIGNATURE-----