-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transmit or tampered with,
perform the following two steps to cryptographically verify image integrity:

1. Verify the authenticity of this file by checking that it is signed with our
   GPG release key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint release-trixie-images@turnkeylinux.org
      pub   rsa4096 2025-10-07 [SC] [expires: 2045-10-02]
            DEE9 0D99 70AE 35D5 5B7C  6C2D C6D2 54B7 6A9D 9430
      uid           [ unknown] TurnKey GNU/Linux Trixie Images (GPG signing key for TurnKey Linux Trixie Images) <release-trixie-images@turnkeylinux.org>
      sub   rsa4096 2025-10-07 [S] [expires: 2045-10-02]
      
    $ gpg --verify debian-13-turnkey-syncthing_19.0-1_amd64.tar.gz.hash
      gpg: Signature made using RSA key ID DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430
      gpg: Good signature from "0"

2. Recalculate the image hash and make sure it matches your choice of hash below.

    $ sha256sum debian-13-turnkey-syncthing_19.0-1_amd64.tar.gz
      cbdf7c8f284e9dd1146a363a96fa8c1e4a3d77347a59f76234c1639e7476bf37  debian-13-turnkey-syncthing_19.0-1_amd64.tar.gz

    $ sha512sum debian-13-turnkey-syncthing_19.0-1_amd64.tar.gz
      abeafc9f5aab7b297a7475c2ef7ffca96929a8875fe947e78167d52c7b8e9da4e6879f247338db9b1fd50e46d4148f1c5ab0d42f8baa322e26fa0caee267e783  debian-13-turnkey-syncthing_19.0-1_amd64.tar.gz

   Note, you can compare hashes automatically::

    $ sha256sum -c debian-13-turnkey-syncthing_19.0-1_amd64.tar.gz.hash
      debian-13-turnkey-syncthing_19.0-1_amd64.tar.gz: OK

    $ sha512sum -c debian-13-turnkey-syncthing_19.0-1_amd64.tar.gz.hash
      debian-13-turnkey-syncthing_19.0-1_amd64.tar.gz: OK

    Final note, when checking SHAs automatically, please ignore warning noting
    that some lines are improperly formatted.

-----BEGIN PGP SIGNATURE-----
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=5sQ1
-----END PGP SIGNATURE-----