-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transmit or tampered with,
perform the following two steps to cryptographically verify image integrity:

1. Verify the authenticity of this file by checking that it is signed with our
   GPG release key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint release-trixie-images@turnkeylinux.org
      pub   rsa4096 2025-10-07 [SC] [expires: 2045-10-02]
            DEE9 0D99 70AE 35D5 5B7C  6C2D C6D2 54B7 6A9D 9430
      uid           [ unknown] TurnKey GNU/Linux Trixie Images (GPG signing key for TurnKey Linux Trixie Images) <release-trixie-images@turnkeylinux.org>
      sub   rsa4096 2025-10-07 [S] [expires: 2045-10-02]
      
    $ gpg --verify debian-13-turnkey-espocrm_19.0-1_amd64.tar.gz.hash
      gpg: Signature made using RSA key ID DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430
      gpg: Good signature from "0"

2. Recalculate the image hash and make sure it matches your choice of hash below.

    $ sha256sum debian-13-turnkey-espocrm_19.0-1_amd64.tar.gz
      25b0b7d61d3d6c887af2e7caf22150bba3f2e215bee4b6f063e995a8e567f3d7  debian-13-turnkey-espocrm_19.0-1_amd64.tar.gz

    $ sha512sum debian-13-turnkey-espocrm_19.0-1_amd64.tar.gz
      4722dbb95df13a4622bab405d23dfe7f02deddccbbe43aea5e4160b5f9d88c448bf6a306ae8eaa76068451fe4bd9b86b7f1dc5a5478d8272dc00f4e7c9943fb3  debian-13-turnkey-espocrm_19.0-1_amd64.tar.gz

   Note, you can compare hashes automatically::

    $ sha256sum -c debian-13-turnkey-espocrm_19.0-1_amd64.tar.gz.hash
      debian-13-turnkey-espocrm_19.0-1_amd64.tar.gz: OK

    $ sha512sum -c debian-13-turnkey-espocrm_19.0-1_amd64.tar.gz.hash
      debian-13-turnkey-espocrm_19.0-1_amd64.tar.gz: OK

    Final note, when checking SHAs automatically, please ignore warning noting
    that some lines are improperly formatted.

-----BEGIN PGP SIGNATURE-----
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=c77j
-----END PGP SIGNATURE-----