-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transmit or tampered with,
perform the following two steps to cryptographically verify image integrity:

1. Verify the authenticity of this file by checking that it is signed with our
   GPG release key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint release-trixie-images@turnkeylinux.org
      pub   rsa4096 2025-10-07 [SC] [expires: 2045-10-02]
            DEE9 0D99 70AE 35D5 5B7C  6C2D C6D2 54B7 6A9D 9430
      uid           [ unknown] TurnKey GNU/Linux Trixie Images (GPG signing key for TurnKey Linux Trixie Images) <release-trixie-images@turnkeylinux.org>
      sub   rsa4096 2025-10-07 [S] [expires: 2045-10-02]
      
    $ gpg --verify debian-13-turnkey-e107_19.0-1_amd64.tar.gz.hash
      gpg: Signature made using RSA key ID DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430
      gpg: Good signature from "0"

2. Recalculate the image hash and make sure it matches your choice of hash below.

    $ sha256sum debian-13-turnkey-e107_19.0-1_amd64.tar.gz
      a6d730283718e965728c4779d21e255e5a4af1e4ad08b35b42196c9675ea52e4  debian-13-turnkey-e107_19.0-1_amd64.tar.gz

    $ sha512sum debian-13-turnkey-e107_19.0-1_amd64.tar.gz
      8c0734eef0637d6f1e2c9df3b813ddd9f1309dc60ac1aab4656ccee2c93f22c20d82a2a73d547127bf620efb13e18732621f1c394d9d8f6fba47a25b134cf841  debian-13-turnkey-e107_19.0-1_amd64.tar.gz

   Note, you can compare hashes automatically::

    $ sha256sum -c debian-13-turnkey-e107_19.0-1_amd64.tar.gz.hash
      debian-13-turnkey-e107_19.0-1_amd64.tar.gz: OK

    $ sha512sum -c debian-13-turnkey-e107_19.0-1_amd64.tar.gz.hash
      debian-13-turnkey-e107_19.0-1_amd64.tar.gz: OK

    Final note, when checking SHAs automatically, please ignore warning noting
    that some lines are improperly formatted.

-----BEGIN PGP SIGNATURE-----
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=opiu
-----END PGP SIGNATURE-----