-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transmit or tampered with,
perform the following two steps to cryptographically verify image integrity:

1. Verify the authenticity of this file by checking that it is signed with our
   GPG release key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint release-trixie-images@turnkeylinux.org
      pub   rsa4096 2025-10-07 [SC] [expires: 2045-10-02]
            DEE9 0D99 70AE 35D5 5B7C  6C2D C6D2 54B7 6A9D 9430
      uid           [ unknown] TurnKey GNU/Linux Trixie Images (GPG signing key for TurnKey Linux Trixie Images) <release-trixie-images@turnkeylinux.org>
      sub   rsa4096 2025-10-07 [S] [expires: 2045-10-02]
      
    $ gpg --verify debian-13-turnkey-mattermost_19.0-1_amd64.tar.gz.hash
      gpg: Signature made using RSA key ID DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430
      gpg: Good signature from "0"

2. Recalculate the image hash and make sure it matches your choice of hash below.

    $ sha256sum debian-13-turnkey-mattermost_19.0-1_amd64.tar.gz
      3cdb727053431a109f0f6b4e1fe27e6faaeba78cfad995a0d5c600c88da37592  debian-13-turnkey-mattermost_19.0-1_amd64.tar.gz

    $ sha512sum debian-13-turnkey-mattermost_19.0-1_amd64.tar.gz
      d03fb66f24925cc009944a4b73e6a10f71caa856703ba2aa5be10141e6d6f051f98bf5d3a46121e1722a88d4bd4df0c6a31543e22e7a118e05e674fbac841f49  debian-13-turnkey-mattermost_19.0-1_amd64.tar.gz

   Note, you can compare hashes automatically::

    $ sha256sum -c debian-13-turnkey-mattermost_19.0-1_amd64.tar.gz.hash
      debian-13-turnkey-mattermost_19.0-1_amd64.tar.gz: OK

    $ sha512sum -c debian-13-turnkey-mattermost_19.0-1_amd64.tar.gz.hash
      debian-13-turnkey-mattermost_19.0-1_amd64.tar.gz: OK

    Final note, when checking SHAs automatically, please ignore warning noting
    that some lines are improperly formatted.

-----BEGIN PGP SIGNATURE-----
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=UbcC
-----END PGP SIGNATURE-----