-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transmit or tampered with,
perform the following two steps to cryptographically verify image integrity:

1. Verify the authenticity of this file by checking that it is signed with our
   GPG release key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/18.x/keys/tkl-bookworm-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint release-bookworm-images@turnkeylinux.org
      pub   rsa4096 2023-05-22 [SC] [expires: 2043-05-17]
            2614 7592 087C 0EDE 4214  3B63 7761 DEBA BBCF BA7C
      uid           [ unknown] TurnKey GNU/Linux Bookworm Images (GPG signing key for TurnKey Linux Bookworm Images) <release-bookworm-images@turnkeylinux.org>
      sub   rsa4096 2023-05-22 [S] [expires: 2043-05-17]
      
    $ gpg --verify turnkey-rails-18.0-bookworm-amd64.iso.hash
      gpg: Signature made using RSA key ID 26147592087C0EDE42143B637761DEBABBCFBA7C
      gpg: Good signature from "0"

2. Recalculate the image hash and make sure it matches your choice of hash below.

    $ sha256sum turnkey-rails-18.0-bookworm-amd64.iso
      993c297d20034e37e5d08dfe8da60f118a913481a8d56ac20aacc030f1b34b85  turnkey-rails-18.0-bookworm-amd64.iso

    $ sha512sum turnkey-rails-18.0-bookworm-amd64.iso
      c05b6ade0f840148a5ce4772bd79121f4be90d9f0ac452a733e61c6cce85c4b8436949a523ce5624567c2111552cc4e60d7094c38c0395be96f7b399cc8072bf  turnkey-rails-18.0-bookworm-amd64.iso

   Note, you can compare hashes automatically::

    $ sha256sum -c turnkey-rails-18.0-bookworm-amd64.iso.hash
      turnkey-rails-18.0-bookworm-amd64.iso: OK

    $ sha512sum -c turnkey-rails-18.0-bookworm-amd64.iso.hash
      turnkey-rails-18.0-bookworm-amd64.iso: OK

    Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted.

-----BEGIN PGP SIGNATURE-----
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=pYYu
-----END PGP SIGNATURE-----