-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transmit or tampered with,
perform the following two steps to cryptographically verify image integrity:

1. Verify the authenticity of this file by checking that it is signed with our
   GPG release key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint release-trixie-images@turnkeylinux.org
      pub   rsa4096 2025-10-07 [SC] [expires: 2045-10-02]
            DEE9 0D99 70AE 35D5 5B7C  6C2D C6D2 54B7 6A9D 9430
      uid           [ unknown] TurnKey GNU/Linux Trixie Images (GPG signing key for TurnKey Linux Trixie Images) <release-trixie-images@turnkeylinux.org>
      sub   rsa4096 2025-10-07 [S] [expires: 2045-10-02]
      
    $ gpg --verify debian-13-turnkey-drupal10_19.0-1_amd64.tar.gz.hash
      gpg: Signature made using RSA key ID DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430
      gpg: Good signature from "0"

2. Recalculate the image hash and make sure it matches your choice of hash below.

    $ sha256sum debian-13-turnkey-drupal10_19.0-1_amd64.tar.gz
      dd55acb4072450c74c7ebee4271cf2aeb0db9795bcca9baf212b1e36fc02568b  debian-13-turnkey-drupal10_19.0-1_amd64.tar.gz

    $ sha512sum debian-13-turnkey-drupal10_19.0-1_amd64.tar.gz
      931567323d3c6e22166edef6a321e9e16fb88f0350005738f0cc6dbb9939d08d5ce1b9413c8e1d8cc6130d52061d8409d7bf2a5dc47c79ed1e2627ec98c8ba00  debian-13-turnkey-drupal10_19.0-1_amd64.tar.gz

   Note, you can compare hashes automatically::

    $ sha256sum -c debian-13-turnkey-drupal10_19.0-1_amd64.tar.gz.hash
      debian-13-turnkey-drupal10_19.0-1_amd64.tar.gz: OK

    $ sha512sum -c debian-13-turnkey-drupal10_19.0-1_amd64.tar.gz.hash
      debian-13-turnkey-drupal10_19.0-1_amd64.tar.gz: OK

    Final note, when checking SHAs automatically, please ignore warning noting
    that some lines are improperly formatted.

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmre6DgACgkQ2fx1wp0K
AztkYA/8Cz+/f6dLpPh9BQx1H/OK3cbEXm1bnmzn8ejfISCoIv+plUyhbmLAZ6ht
+1ZSh3epNcdvsCNvhXkJKDpS1w/cx4YgxRGH4bBY4TIdnyT6QlqI0qdEMAT3bNxi
WiEsn+tdw7KeVktvuMG4DGm0Wx0IXqoQjTF6shYyg/DoQ6L0SUrYRSVW9kjUbmlZ
tTBqECOCkuHw1sLSGp+2tPJnmI/3u/k6wXaIDsoQWP6mlDpGqIap5VxBqKDrh/ac
2PlPdeK1wAeZ4LXeoR6FqIm2OAGra3Z3iai8Vcl7e/OA00IvZ0S8CW3fSvfjYuck
Ln+PkwGiBPvV66DoTLWQ4Kggx6rdsalCoqxmObxA/i2WRm3/vNJNcIZLcZgtorV/
sA8r2BO+v9+0J7724iGCixYQ/7z5COOF/yl7uSQEL3Huy2isYkFkaaw/p+TMfFmh
vbqyuXy28/A/W263wT++ECQTXbosF5+EspgBXRLVGV+Tk82FHJt/IJrVb4D+JlRO
vMdoiDTpSK6qKpo0Me6sIHwMI35m8VD0H2WMQk2XFFWp2/XgtLS6umjbwoJQO3b/
53W8uledbMXaOyr0TToPxqTajN9C9BI4rEbTdPD7gMdXt65Or9yigS8o+vLmXEnW
6Z413uQaKZArhYv4zLXyLfKrks0UqexQ2+zL3Lwge17trQntO68=
=baoZ
-----END PGP SIGNATURE-----