-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transmit or tampered with,
perform the following two steps to cryptographically verify image integrity:

1. Verify the authenticity of this file by checking that it is signed with our
   GPG release key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint release-trixie-images@turnkeylinux.org
      pub   rsa4096 2025-10-07 [SC] [expires: 2045-10-02]
            DEE9 0D99 70AE 35D5 5B7C  6C2D C6D2 54B7 6A9D 9430
      uid           [ unknown] TurnKey GNU/Linux Trixie Images (GPG signing key for TurnKey Linux Trixie Images) <release-trixie-images@turnkeylinux.org>
      sub   rsa4096 2025-10-07 [S] [expires: 2045-10-02]
      
    $ gpg --verify debian-13-turnkey-bookstack_19.0-1_amd64.tar.gz.hash
      gpg: Signature made using RSA key ID DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430
      gpg: Good signature from "0"

2. Recalculate the image hash and make sure it matches your choice of hash below.

    $ sha256sum debian-13-turnkey-bookstack_19.0-1_amd64.tar.gz
      d7ac645e992b066821d471e1bd66e2fa82b1c71e331f3eea82377e45af585d29  debian-13-turnkey-bookstack_19.0-1_amd64.tar.gz

    $ sha512sum debian-13-turnkey-bookstack_19.0-1_amd64.tar.gz
      cc64dd2fbaf3ab6a4de33dc136b01fd3db05e631366f85e75c38bb427ae73281008ab8a29e313d60a92a9fd1af29af1c0af766df31ec1b3d2466fc20067d8730  debian-13-turnkey-bookstack_19.0-1_amd64.tar.gz

   Note, you can compare hashes automatically::

    $ sha256sum -c debian-13-turnkey-bookstack_19.0-1_amd64.tar.gz.hash
      debian-13-turnkey-bookstack_19.0-1_amd64.tar.gz: OK

    $ sha512sum -c debian-13-turnkey-bookstack_19.0-1_amd64.tar.gz.hash
      debian-13-turnkey-bookstack_19.0-1_amd64.tar.gz: OK

    Final note, when checking SHAs automatically, please ignore warning noting
    that some lines are improperly formatted.

-----BEGIN PGP SIGNATURE-----
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=3eRW
-----END PGP SIGNATURE-----