-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transmit or tampered with,
perform the following two steps to cryptographically verify image integrity:

1. Verify the authenticity of this file by checking that it is signed with our
   GPG release key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint release-trixie-images@turnkeylinux.org
      pub   rsa4096 2025-10-07 [SC] [expires: 2045-10-02]
            DEE9 0D99 70AE 35D5 5B7C  6C2D C6D2 54B7 6A9D 9430
      uid           [ unknown] TurnKey GNU/Linux Trixie Images (GPG signing key for TurnKey Linux Trixie Images) <release-trixie-images@turnkeylinux.org>
      sub   rsa4096 2025-10-07 [S] [expires: 2045-10-02]
      
    $ gpg --verify debian-13-turnkey-xoops_19.0-1_amd64.tar.gz.hash
      gpg: Signature made using RSA key ID DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430
      gpg: Good signature from "0"

2. Recalculate the image hash and make sure it matches your choice of hash below.

    $ sha256sum debian-13-turnkey-xoops_19.0-1_amd64.tar.gz
      59eb49451c6dc40e351e4a4880988826b6afa660e6ee6988207d33bef3da1b35  debian-13-turnkey-xoops_19.0-1_amd64.tar.gz

    $ sha512sum debian-13-turnkey-xoops_19.0-1_amd64.tar.gz
      9447fd9cd2defce09162ca1b22ede3df69d38d54f467c4c316acf491ddfc80e294d34444429142fdc2d495ae68c3342b0c0098a83b9dd4899189e496e78e6b7a  debian-13-turnkey-xoops_19.0-1_amd64.tar.gz

   Note, you can compare hashes automatically::

    $ sha256sum -c debian-13-turnkey-xoops_19.0-1_amd64.tar.gz.hash
      debian-13-turnkey-xoops_19.0-1_amd64.tar.gz: OK

    $ sha512sum -c debian-13-turnkey-xoops_19.0-1_amd64.tar.gz.hash
      debian-13-turnkey-xoops_19.0-1_amd64.tar.gz: OK

    Final note, when checking SHAs automatically, please ignore warning noting
    that some lines are improperly formatted.

-----BEGIN PGP SIGNATURE-----
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=XAju
-----END PGP SIGNATURE-----