-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transmit or tampered with,
perform the following two steps to cryptographically verify image integrity:

1. Verify the authenticity of this file by checking that it is signed with our
   GPG release key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint release-trixie-images@turnkeylinux.org
      pub   rsa4096 2025-10-07 [SC] [expires: 2045-10-02]
            DEE9 0D99 70AE 35D5 5B7C  6C2D C6D2 54B7 6A9D 9430
      uid           [ unknown] TurnKey GNU/Linux Trixie Images (GPG signing key for TurnKey Linux Trixie Images) <release-trixie-images@turnkeylinux.org>
      sub   rsa4096 2025-10-07 [S] [expires: 2045-10-02]
      
    $ gpg --verify debian-13-turnkey-lapp_19.0-1_amd64.tar.gz.hash
      gpg: Signature made using RSA key ID DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430
      gpg: Good signature from "0"

2. Recalculate the image hash and make sure it matches your choice of hash below.

    $ sha256sum debian-13-turnkey-lapp_19.0-1_amd64.tar.gz
      4358f42c90a3f3c4d82dac83a5daf67833688f24bc0d624c559d6f96a161a9b3  debian-13-turnkey-lapp_19.0-1_amd64.tar.gz

    $ sha512sum debian-13-turnkey-lapp_19.0-1_amd64.tar.gz
      d7628320b65428b17d8d383b0abef9e98313e62f1bc015e211bd8b4abea85eba956aa6789c17a9a27f7a2cef6ce2c0bd55acdc02c5ae69ea726557a8e5d1d122  debian-13-turnkey-lapp_19.0-1_amd64.tar.gz

   Note, you can compare hashes automatically::

    $ sha256sum -c debian-13-turnkey-lapp_19.0-1_amd64.tar.gz.hash
      debian-13-turnkey-lapp_19.0-1_amd64.tar.gz: OK

    $ sha512sum -c debian-13-turnkey-lapp_19.0-1_amd64.tar.gz.hash
      debian-13-turnkey-lapp_19.0-1_amd64.tar.gz: OK

    Final note, when checking SHAs automatically, please ignore warning noting
    that some lines are improperly formatted.

-----BEGIN PGP SIGNATURE-----
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=VU8y
-----END PGP SIGNATURE-----