-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transmit or tampered with,
perform the following two steps to cryptographically verify image integrity:

1. Verify the authenticity of this file by checking that it is signed with our
   GPG release key:

    $ curl  | gpg --import
    $ gpg --list-keys --with-fingerprint release-bookworm-images@turnkeylinux.org
      pub   rsa4096 2023-05-22 [SC] [expires: 2043-05-17]
            2614 7592 087C 0EDE 4214  3B63 7761 DEBA BBCF BA7C
      uid           [ unknown] TurnKey GNU/Linux Bookworm Images (GPG signing key for TurnKey Linux Bookworm Images) <release-bookworm-images@turnkeylinux.org>
      sub   rsa4096 2023-05-22 [S] [expires: 2043-05-17]
      
    $ gpg --verify debian-12-turnkey-lighttpd-php-fastcgi_18.0-1_amd64.tar.gz.hash
      gpg: Signature made using RSA key ID 26147592087C0EDE42143B637761DEBABBCFBA7C
      gpg: Good signature from "0"

2. Recalculate the image hash and make sure it matches your choice of hash below.

    $ sha256sum debian-12-turnkey-lighttpd-php-fastcgi_18.0-1_amd64.tar.gz
      22e30feded508e9b9c7b126b0d37ee51aa3b1d827e1b26fdda561848b4eef611  debian-12-turnkey-lighttpd-php-fastcgi_18.0-1_amd64.tar.gz

    $ sha512sum debian-12-turnkey-lighttpd-php-fastcgi_18.0-1_amd64.tar.gz
      378e0ba596c42885f1529c26ae12e425385c6c7a7fe6aed8c8a6a23de4616e9c1f3022521575ecfdb5824ed130a3828c95c3cbecbd69bdecaae34f43f3861a34  debian-12-turnkey-lighttpd-php-fastcgi_18.0-1_amd64.tar.gz

   Note, you can compare hashes automatically::

    $ sha256sum -c debian-12-turnkey-lighttpd-php-fastcgi_18.0-1_amd64.tar.gz.hash
      debian-12-turnkey-lighttpd-php-fastcgi_18.0-1_amd64.tar.gz: OK

    $ sha512sum -c debian-12-turnkey-lighttpd-php-fastcgi_18.0-1_amd64.tar.gz.hash
      debian-12-turnkey-lighttpd-php-fastcgi_18.0-1_amd64.tar.gz: OK

    Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted.

-----BEGIN PGP SIGNATURE-----
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=72HG
-----END PGP SIGNATURE-----