-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transmit or tampered with,
perform the following two steps to cryptographically verify image integrity:

1. Verify the authenticity of this file by checking that it is signed with our
   GPG release key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/18.x/keys/tkl-bookworm-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint release-bookworm-images@turnkeylinux.org
      pub   rsa4096 2023-05-22 [SC] [expires: 2043-05-17]
            2614 7592 087C 0EDE 4214  3B63 7761 DEBA BBCF BA7C
      uid           [ unknown] TurnKey GNU/Linux Bookworm Images (GPG signing key for TurnKey Linux Bookworm Images) <release-bookworm-images@turnkeylinux.org>
      sub   rsa4096 2023-05-22 [S] [expires: 2043-05-17]
      
    $ gpg --verify turnkey-opencart-18.0-bookworm-amd64.iso.hash
      gpg: Signature made using RSA key ID 26147592087C0EDE42143B637761DEBABBCFBA7C
      gpg: Good signature from "0"

2. Recalculate the image hash and make sure it matches your choice of hash below.

    $ sha256sum turnkey-opencart-18.0-bookworm-amd64.iso
      10a88725c648875efcc003365f7ee34ba786a7118a946496eaf0643f893d2183  turnkey-opencart-18.0-bookworm-amd64.iso

    $ sha512sum turnkey-opencart-18.0-bookworm-amd64.iso
      1a3283184990930ff75629800b9ecf534750146e94f7a66441e1fb7b14e973e6ee8031d029f3d5438dd58ec23f8168971c9179ab5cfc80bf2c0a136c4dec133c  turnkey-opencart-18.0-bookworm-amd64.iso

   Note, you can compare hashes automatically::

    $ sha256sum -c turnkey-opencart-18.0-bookworm-amd64.iso.hash
      turnkey-opencart-18.0-bookworm-amd64.iso: OK

    $ sha512sum -c turnkey-opencart-18.0-bookworm-amd64.iso.hash
      turnkey-opencart-18.0-bookworm-amd64.iso: OK

    Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted.

-----BEGIN PGP SIGNATURE-----
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=hPK1
-----END PGP SIGNATURE-----