-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transmit or tampered with,
perform the following two steps to cryptographically verify image integrity:

1. Verify the authenticity of this file by checking that it is signed with our
   GPG release key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint release-trixie-images@turnkeylinux.org
      pub   rsa4096 2025-10-07 [SC] [expires: 2045-10-02]
            DEE9 0D99 70AE 35D5 5B7C  6C2D C6D2 54B7 6A9D 9430
      uid           [ unknown] TurnKey GNU/Linux Trixie Images (GPG signing key for TurnKey Linux Trixie Images) <release-trixie-images@turnkeylinux.org>
      sub   rsa4096 2025-10-07 [S] [expires: 2045-10-02]
      
    $ gpg --verify debian-13-turnkey-phplist_19.0-1_amd64.tar.gz.hash
      gpg: Signature made using RSA key ID DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430
      gpg: Good signature from "0"

2. Recalculate the image hash and make sure it matches your choice of hash below.

    $ sha256sum debian-13-turnkey-phplist_19.0-1_amd64.tar.gz
      0f567f783407541c901d0308543149643211cc6b931530c0d0ffaea666cb65ee  debian-13-turnkey-phplist_19.0-1_amd64.tar.gz

    $ sha512sum debian-13-turnkey-phplist_19.0-1_amd64.tar.gz
      19301eca6190c94edc6b8309c1e4a0b4b2a4efbb1141f120108198c1add476fa841a4b58b3223263852fdf9dffcf02837c41cc91c0231c6f1678de6ad0d52fe7  debian-13-turnkey-phplist_19.0-1_amd64.tar.gz

   Note, you can compare hashes automatically::

    $ sha256sum -c debian-13-turnkey-phplist_19.0-1_amd64.tar.gz.hash
      debian-13-turnkey-phplist_19.0-1_amd64.tar.gz: OK

    $ sha512sum -c debian-13-turnkey-phplist_19.0-1_amd64.tar.gz.hash
      debian-13-turnkey-phplist_19.0-1_amd64.tar.gz: OK

    Final note, when checking SHAs automatically, please ignore warning noting
    that some lines are improperly formatted.

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmre60YACgkQ2fx1wp0K
AzsR/g//TEoXtJLEpZCnCOM5uqfw65CYseGWez9pyxvnQ9iemCrEFmBqYvf/X/7X
FYhTWNPlpSbIhaAJ5gpSebhoN+a3o1pMeBa8YjYqNiuPEE0NvBrKhxH/KmoBQ8/F
4DzGWGy6RQI4ZapwQGXSX+QkdHFkPvcoKGaEBoqa3g7oZqYOXv572TvDY1ze+t3q
SC1vGSjkHuCSWo6W6AKBe7A1aHTtZk+EsET7c9H5d7drAZxMdjIHviUYuy4qSXiw
0NzXJYnekdD3dqkz5dHsTHTfuNiFKe4nbKxjoEAAi553afp2Kqn93GpLyxwY0v6Q
tex9ff+EJX1aLxwbszbFHh0RcK1YRGVTYeKgTgXVZSbDsdWJsGmLVs+VwXR18D2h
HT9TrPJ83F7GRpWOTXyuM5PrlMPXS5h6b8E4RCoR7jNl3bRyg0VjO6fF9whKMmg0
EPvoYpKdQvBSfeHipTyG4psvWfl2jOzAm4juLdoJoEeqjv+fYuoiqR4GjRK/BRr3
q49yyAZI2PFvmVvMoP1d5DjN1e95h/5h94Yc/Hm9MD0T81k8LxT98rLjh1ikiJkX
B2IQFf2aTJS+5U1P8/To/HgXMxxHKKs3jAasyzKHQj04L+r91hX0X0/fOPp2yJet
Hpru8XQ0WTO0vRrM17+yL6teO2pm6zC6La9/ACloa2fTGB0+fLs=
=TtcC
-----END PGP SIGNATURE-----