-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transmit or tampered with,
perform the following two steps to cryptographically verify image integrity:

1. Verify the authenticity of this file by checking that it is signed with our
   GPG release key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint release-trixie-images@turnkeylinux.org
      pub   rsa4096 2025-10-07 [SC] [expires: 2045-10-02]
            DEE9 0D99 70AE 35D5 5B7C  6C2D C6D2 54B7 6A9D 9430
      uid           [ unknown] TurnKey GNU/Linux Trixie Images (GPG signing key for TurnKey Linux Trixie Images) <release-trixie-images@turnkeylinux.org>
      sub   rsa4096 2025-10-07 [S] [expires: 2045-10-02]
      
    $ gpg --verify debian-13-turnkey-core_19.0-1_amd64.tar.gz.hash
      gpg: Signature made using RSA key ID DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430
      gpg: Good signature from "0"

2. Recalculate the image hash and make sure it matches your choice of hash below.

    $ sha256sum debian-13-turnkey-core_19.0-1_amd64.tar.gz
      41737fe1e25d8186e665e00626cec32b9849576f989e42083c7fc1a1f6bab794  debian-13-turnkey-core_19.0-1_amd64.tar.gz

    $ sha512sum debian-13-turnkey-core_19.0-1_amd64.tar.gz
      2cccaf1d86c54bc7ff098d3984b5d73f3b51da3c628c3c655e1c85371db99c3d4802b08a908a083a14bc14abc83fd9d25085a20fac8fa30d662d52486c5ab78c  debian-13-turnkey-core_19.0-1_amd64.tar.gz

   Note, you can compare hashes automatically::

    $ sha256sum -c debian-13-turnkey-core_19.0-1_amd64.tar.gz.hash
      debian-13-turnkey-core_19.0-1_amd64.tar.gz: OK

    $ sha512sum -c debian-13-turnkey-core_19.0-1_amd64.tar.gz.hash
      debian-13-turnkey-core_19.0-1_amd64.tar.gz: OK

    Final note, when checking SHAs automatically, please ignore warning noting
    that some lines are improperly formatted.

-----BEGIN PGP SIGNATURE-----
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=20n/
-----END PGP SIGNATURE-----