-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl | gpg --import $ gpg --list-keys --with-fingerprint release-bookworm-images@turnkeylinux.org pub rsa4096 2023-05-22 [SC] [expires: 2043-05-17] 2614 7592 087C 0EDE 4214 3B63 7761 DEBA BBCF BA7C uid [ unknown] TurnKey GNU/Linux Bookworm Images (GPG signing key for TurnKey Linux Bookworm Images) sub rsa4096 2023-05-22 [S] [expires: 2043-05-17] $ gpg --verify debian-12-turnkey-invoice-ninja_18.0-1_amd64.tar.gz.hash gpg: Signature made using RSA key ID 26147592087C0EDE42143B637761DEBABBCFBA7C gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum debian-12-turnkey-invoice-ninja_18.0-1_amd64.tar.gz e098cf10ec811887e9a19fb96d8fd6932341ac8e738f02bd6159ba591261c673 debian-12-turnkey-invoice-ninja_18.0-1_amd64.tar.gz $ sha512sum debian-12-turnkey-invoice-ninja_18.0-1_amd64.tar.gz 8d6fc1f34ae1896eb1c97754ebc10810dc78fa6df3aba007c3cbe4c445d827b12c663ac4bf28c406aa97dd00a45b9fafbb712da5b4c4fcb130cefa3e41a937f6 debian-12-turnkey-invoice-ninja_18.0-1_amd64.tar.gz Note, you can compare hashes automatically:: $ sha256sum -c debian-12-turnkey-invoice-ninja_18.0-1_amd64.tar.gz.hash debian-12-turnkey-invoice-ninja_18.0-1_amd64.tar.gz: OK $ sha512sum -c debian-12-turnkey-invoice-ninja_18.0-1_amd64.tar.gz.hash debian-12-turnkey-invoice-ninja_18.0-1_amd64.tar.gz: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE0achB3UVKiMsY4ckkPLGHN5q3jcFAmX2s+AACgkQkPLGHN5q 3jceaw//TlSWhqVI3XI4nlKUdB+cxvbYu8WaoZ3tNJSOiuO2/GhF6Or5PIG7Yg4J xXX5aRHBw2ojwlvB3wnAW4rY8VyotGBRjnrFBPfAF9muvHp2UQ+xMxTyladsyKx5 D3k544C8Oijx2pZRUZwt03Ou2v8dk+58qyEj3jpG3g6Qr1yZrKK9bdZP3rFkGpHI r+dNXjyMeSyRVnsYTwJMO/isjqizA3zijzknmztoRqDTSm9KJBIRXclcJ38nIezj x0efCH4CUYYV6EsfX1KUkSr2HprIsjcOfG6IdNHybwqFFfPo9EFHpSJa3O7I31Em sQdStUObT44pU2eTRGO7eZeZp9SJYstIu8FSmsJTTwfSgS/pdj+jHVMLo5TJZaXQ JmUulvezDTIL7744PYwKgUPqli3lCmF5uMjKSiTescyYb0U7Q7D2QvDj7ziowQ9v MXETvmtvaW2v9pkxbB8kuRsH4hKLYGlQIdCs38Wpp2+zT9TIlFmdpb4nEF6vgLPb RzlG+B1RDw/iLzZ7nWjRRIbwWCjKsgvtafLFUGC3LNEdlFZfFZ/Y0pVu5sUm4L+H 6piPIlVhBYuBBEtmoX+2oJ2hfcKN6BQRsP/aF3NQOOizvWhv8LRBuTBQnMnL546i 5NBomwKQJi5Vr3H93Ogxs+u5v4xHeLyRAx8lLcAI+AWBO1Gg/uk= =4A1c -----END PGP SIGNATURE-----