-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transmit or tampered with,
perform the following two steps to cryptographically verify image integrity:

1. Verify the authenticity of this file by checking that it is signed with our
   GPG release key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint release-trixie-images@turnkeylinux.org
      pub   rsa4096 2025-10-07 [SC] [expires: 2045-10-02]
            DEE9 0D99 70AE 35D5 5B7C  6C2D C6D2 54B7 6A9D 9430
      uid           [ unknown] TurnKey GNU/Linux Trixie Images (GPG signing key for TurnKey Linux Trixie Images) <release-trixie-images@turnkeylinux.org>
      sub   rsa4096 2025-10-07 [S] [expires: 2045-10-02]
      
    $ gpg --verify debian-13-turnkey-silverstripe_19.0-1_amd64.tar.gz.hash
      gpg: Signature made using RSA key ID DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430
      gpg: Good signature from "0"

2. Recalculate the image hash and make sure it matches your choice of hash below.

    $ sha256sum debian-13-turnkey-silverstripe_19.0-1_amd64.tar.gz
      4d2fbc2e5f672fd5fbbcaa6dc166412eae7a95f36b33ebdb3e6610474e386620  debian-13-turnkey-silverstripe_19.0-1_amd64.tar.gz

    $ sha512sum debian-13-turnkey-silverstripe_19.0-1_amd64.tar.gz
      f3525b677d7c66604e3640a7f80ac94b5933eca0149bade75530d58bca15235018e87620612ebdbb5bffdb973736da4dccc8a0916f14b76846d1a648d4329a94  debian-13-turnkey-silverstripe_19.0-1_amd64.tar.gz

   Note, you can compare hashes automatically::

    $ sha256sum -c debian-13-turnkey-silverstripe_19.0-1_amd64.tar.gz.hash
      debian-13-turnkey-silverstripe_19.0-1_amd64.tar.gz: OK

    $ sha512sum -c debian-13-turnkey-silverstripe_19.0-1_amd64.tar.gz.hash
      debian-13-turnkey-silverstripe_19.0-1_amd64.tar.gz: OK

    Final note, when checking SHAs automatically, please ignore warning noting
    that some lines are improperly formatted.

-----BEGIN PGP SIGNATURE-----
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=r4Gl
-----END PGP SIGNATURE-----