-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transmit or tampered with,
perform the following two steps to cryptographically verify image integrity:

1. Verify the authenticity of this file by checking that it is signed with our
   GPG release key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint release-trixie-images@turnkeylinux.org
      pub   rsa4096 2025-10-07 [SC] [expires: 2045-10-02]
            DEE9 0D99 70AE 35D5 5B7C  6C2D C6D2 54B7 6A9D 9430
      uid           [ unknown] TurnKey GNU/Linux Trixie Images (GPG signing key for TurnKey Linux Trixie Images) <release-trixie-images@turnkeylinux.org>
      sub   rsa4096 2025-10-07 [S] [expires: 2045-10-02]
      
    $ gpg --verify debian-13-turnkey-invoice-ninja_19.0-1_amd64.tar.gz.hash
      gpg: Signature made using RSA key ID DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430
      gpg: Good signature from "0"

2. Recalculate the image hash and make sure it matches your choice of hash below.

    $ sha256sum debian-13-turnkey-invoice-ninja_19.0-1_amd64.tar.gz
      9eda42cde64e8e70ce118dc466967a1b5f3f980c5b355573664f431334baf0f7  debian-13-turnkey-invoice-ninja_19.0-1_amd64.tar.gz

    $ sha512sum debian-13-turnkey-invoice-ninja_19.0-1_amd64.tar.gz
      b0c85d0314fe3f51538960900b0bd9832b9fc24130e617e3b1fd0184c8a4f699e9ffda9d953a0d5352949dc845c38e4b8edb3ed9d1a2f7a20653eadb449a8587  debian-13-turnkey-invoice-ninja_19.0-1_amd64.tar.gz

   Note, you can compare hashes automatically::

    $ sha256sum -c debian-13-turnkey-invoice-ninja_19.0-1_amd64.tar.gz.hash
      debian-13-turnkey-invoice-ninja_19.0-1_amd64.tar.gz: OK

    $ sha512sum -c debian-13-turnkey-invoice-ninja_19.0-1_amd64.tar.gz.hash
      debian-13-turnkey-invoice-ninja_19.0-1_amd64.tar.gz: OK

    Final note, when checking SHAs automatically, please ignore warning noting
    that some lines are improperly formatted.

-----BEGIN PGP SIGNATURE-----
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=+eLi
-----END PGP SIGNATURE-----