Linux workstation

Debian 13 (Trixie) native package

flatpak

Application deployment framework for desktop apps

Packages / Debian 13 (Trixie) / admin / flatpak

Package: flatpak (1.16.6-1~deb13u1)

Maintainers:

Utopia Maintenance Team

External Resources:

Homepage: [flatpak.org]

Application deployment framework for desktop apps

Other Packages Related to flatpak:

  • dep: [adduser]

    add and remove users and groups

  • dep: [bubblewrap] (>= 0.10.0~)

    utility for unprivileged chroot and namespace manipulation

  • dep: [fuse3]

    Filesystem in Userspace (3.x version)

  • dep: [xdg-dbus-proxy] (>= 0.1.0)

    filtering D-Bus proxy

  • dep: [libappstream5] (>= 1.0.0)

    Library to access AppStream services

  • dep: [libarchive13t64] (>= 3.0.4)

    Multi-format archive and compression library (shared library)

  • dep: [libc6] (>= 2.38)

    GNU C Library: Shared libraries

  • dep: [libcurl3t64-gnutls] (>= 7.16.2)

    transitional package for libcurl4-gnutls

  • dep: [libdconf1] (>= 0.26.0)

    simple configuration storage system - runtime library

  • dep: [libfuse3-4] (>= 3.17.2)

    Filesystem in Userspace (library) (3.x version)

  • dep: [libgdk-pixbuf-2.0-0] (>= 2.22.0)

    GDK Pixbuf library

  • dep: [libglib2.0-0t64] (>= 2.83.0)

    GLib library of C routines

  • dep: [libgpgme11t64] (>= 1.23.2)

    GPGME - GnuPG Made Easy (library)

  • dep: [libjson-glib-1.0-0] (>= 1.5.2)

    GLib JSON manipulation library

  • dep: [libmalcontent-0-0] (>= 0.6.0)

    library for parental control of applications

  • dep: [libostree-1-1] (>= 2020.8)

    content-addressed filesystem for operating system binaries (library)

  • dep: [libpolkit-agent-1-0] (>= 0.105)

    polkit Authentication Agent API

  • dep: [libpolkit-gobject-1-0] (>= 0.101)

    polkit Authorization API

  • dep: [libseccomp2] (>= 2.5.2)

    high level interface to Linux seccomp filter

  • dep: [libsystemd0]

    systemd utility library

  • dep: [libwayland-client0] (>= 1.20.0)

    wayland compositor infrastructure - client library

  • dep: [libxau6] (>= 1:1.0.11)

    X11 authorisation library

  • dep: [libxml2] (>= 2.7.4)

    GNOME XML library

  • dep: [libzstd1] (>= 1.5.5)

    fast lossless compression algorithm

Download flatpak

ArchitecturePackage SizeInstalled SizeFiles
amd641.5 MiB8.1 MiB[list of files]
arm641.4 MiB8.4 MiB[list of files]

Chemins de fichiers du paquet (125)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

  • /etc/profile.d/flatpak.csh
  • /etc/profile.d/flatpak.sh
  • /etc/X11/Xsession.d/20flatpak
  • /usr/bin/flatpak
  • /usr/libexec/flatpak-oci-authenticator
  • /usr/libexec/flatpak-portal
  • /usr/libexec/flatpak-session-helper
  • /usr/libexec/flatpak-system-helper
  • /usr/libexec/flatpak-validate-icon
  • /usr/libexec/revokefs-fuse
  • /usr/lib/systemd/system-environment-generators/60-flatpak-system-only
  • /usr/lib/systemd/system/flatpak-system-helper.service
  • /usr/lib/systemd/user-environment-generators/60-flatpak
  • /usr/lib/systemd/user/flatpak-oci-authenticator.service
  • /usr/lib/systemd/user/flatpak-portal.service
  • /usr/lib/systemd/user/flatpak-session-helper.service
  • /usr/lib/sysusers.d/flatpak.conf
  • /usr/lib/tmpfiles.d/flatpak.conf
  • /usr/share/bash-completion/completions/flatpak
  • /usr/share/bug/flatpak/control
  • /usr/share/bug/flatpak/script
  • /usr/share/dbus-1/services/org.flatpak.Authenticator.Oci.service
  • /usr/share/dbus-1/services/org.freedesktop.Flatpak.service
  • /usr/share/dbus-1/services/org.freedesktop.portal.Flatpak.service
  • /usr/share/dbus-1/system.d/org.freedesktop.Flatpak.SystemHelper.conf
  • /usr/share/dbus-1/system-services/org.freedesktop.Flatpak.SystemHelper.service
  • /usr/share/doc-base/flatpak.flatpak-commands
  • /usr/share/doc/flatpak/changelog.Debian.gz
  • /usr/share/doc/flatpak/copyright
  • /usr/share/doc/flatpak/docbook.css
  • /usr/share/doc/flatpak/examples/etc/gdm3/env.d/flatpak.env
  • /usr/share/doc/flatpak/examples/flathub.flatpakrepo
  • /usr/share/doc/flatpak/examples/flatpak-docker-seccomp.json
  • /usr/share/doc/flatpak/flatpak-docs.html
  • /usr/share/doc/flatpak/NEWS.gz
  • /usr/share/doc/flatpak/README.Debian
  • /usr/share/doc/flatpak/README.md
  • /usr/share/fish/vendor_completions.d/flatpak.fish
  • /usr/share/fish/vendor_conf.d/flatpak.fish
  • /usr/share/flatpak/triggers/desktop-database.trigger
  • /usr/share/flatpak/triggers/gtk-icon-cache.trigger
  • /usr/share/flatpak/triggers/mime-database.trigger
  • /usr/share/lintian/overrides/flatpak
  • /usr/share/locale/bg/LC_MESSAGES/flatpak.mo
  • /usr/share/locale/cs/LC_MESSAGES/flatpak.mo
  • /usr/share/locale/da/LC_MESSAGES/flatpak.mo
  • /usr/share/locale/de/LC_MESSAGES/flatpak.mo
  • /usr/share/locale/en_GB/LC_MESSAGES/flatpak.mo
  • /usr/share/locale/es/LC_MESSAGES/flatpak.mo
  • /usr/share/locale/fr/LC_MESSAGES/flatpak.mo
  • /usr/share/locale/gl/LC_MESSAGES/flatpak.mo
  • /usr/share/locale/hi/LC_MESSAGES/flatpak.mo
  • /usr/share/locale/hr/LC_MESSAGES/flatpak.mo
  • /usr/share/locale/hu/LC_MESSAGES/flatpak.mo
  • /usr/share/locale/id/LC_MESSAGES/flatpak.mo
  • /usr/share/locale/ka/LC_MESSAGES/flatpak.mo
  • /usr/share/locale/nl/LC_MESSAGES/flatpak.mo
  • /usr/share/locale/oc/LC_MESSAGES/flatpak.mo
  • /usr/share/locale/pl/LC_MESSAGES/flatpak.mo
  • /usr/share/locale/pt_BR/LC_MESSAGES/flatpak.mo
  • /usr/share/locale/pt/LC_MESSAGES/flatpak.mo
  • /usr/share/locale/ro/LC_MESSAGES/flatpak.mo
  • /usr/share/locale/ru/LC_MESSAGES/flatpak.mo
  • /usr/share/locale/sk/LC_MESSAGES/flatpak.mo
  • /usr/share/locale/sl/LC_MESSAGES/flatpak.mo
  • /usr/share/locale/sv/LC_MESSAGES/flatpak.mo
  • /usr/share/locale/tr/LC_MESSAGES/flatpak.mo
  • /usr/share/locale/uk/LC_MESSAGES/flatpak.mo
  • /usr/share/locale/zh_CN/LC_MESSAGES/flatpak.mo
  • /usr/share/locale/zh_TW/LC_MESSAGES/flatpak.mo
  • /usr/share/man/man1/flatpak.1.gz
  • /usr/share/man/man1/flatpak-build.1.gz
  • /usr/share/man/man1/flatpak-build-bundle.1.gz
  • /usr/share/man/man1/flatpak-build-commit-from.1.gz
  • /usr/share/man/man1/flatpak-build-export.1.gz
  • /usr/share/man/man1/flatpak-build-finish.1.gz
  • /usr/share/man/man1/flatpak-build-import-bundle.1.gz
  • /usr/share/man/man1/flatpak-build-init.1.gz
  • /usr/share/man/man1/flatpak-build-sign.1.gz
  • /usr/share/man/man1/flatpak-build-update-repo.1.gz
  • /usr/share/man/man1/flatpak-config.1.gz
  • /usr/share/man/man1/flatpak-create-usb.1.gz
  • /usr/share/man/man1/flatpak-document-export.1.gz
  • /usr/share/man/man1/flatpak-document-info.1.gz
  • /usr/share/man/man1/flatpak-documents.1.gz
  • /usr/share/man/man1/flatpak-document-unexport.1.gz
  • /usr/share/man/man1/flatpak-enter.1.gz
  • /usr/share/man/man1/flatpak-history.1.gz
  • /usr/share/man/man1/flatpak-info.1.gz
  • /usr/share/man/man1/flatpak-install.1.gz
  • /usr/share/man/man1/flatpak-kill.1.gz
  • /usr/share/man/man1/flatpak-list.1.gz
  • /usr/share/man/man1/flatpak-make-current.1.gz
  • /usr/share/man/man1/flatpak-mask.1.gz
  • /usr/share/man/man1/flatpak-override.1.gz
  • /usr/share/man/man1/flatpak-permission-remove.1.gz
  • /usr/share/man/man1/flatpak-permission-reset.1.gz
  • /usr/share/man/man1/flatpak-permissions.1.gz
  • /usr/share/man/man1/flatpak-permission-set.1.gz
  • /usr/share/man/man1/flatpak-permission-show.1.gz
  • /usr/share/man/man1/flatpak-pin.1.gz
  • /usr/share/man/man1/flatpak-ps.1.gz
  • /usr/share/man/man1/flatpak-remote-add.1.gz
  • /usr/share/man/man1/flatpak-remote-delete.1.gz
  • /usr/share/man/man1/flatpak-remote-info.1.gz
  • /usr/share/man/man1/flatpak-remote-ls.1.gz
  • /usr/share/man/man1/flatpak-remote-modify.1.gz
  • /usr/share/man/man1/flatpak-remotes.1.gz
  • /usr/share/man/man1/flatpak-repair.1.gz
  • /usr/share/man/man1/flatpak-repo.1.gz
  • /usr/share/man/man1/flatpak-run.1.gz
  • /usr/share/man/man1/flatpak-search.1.gz
  • /usr/share/man/man1/flatpak-spawn.1.gz
  • /usr/share/man/man1/flatpak-uninstall.1.gz
  • /usr/share/man/man1/flatpak-update.1.gz
  • /usr/share/man/man5/flatpak-flatpakref.5.gz
  • /usr/share/man/man5/flatpak-flatpakrepo.5.gz
  • /usr/share/man/man5/flatpak-installation.5.gz
  • /usr/share/man/man5/flatpak-metadata.5.gz
  • /usr/share/man/man5/flatpakref.5.gz
  • /usr/share/man/man5/flatpak-remote.5.gz
  • /usr/share/man/man5/flatpakrepo.5.gz
  • /usr/share/polkit-1/actions/org.freedesktop.Flatpak.policy
  • /usr/share/polkit-1/rules.d/org.freedesktop.Flatpak.rules
  • /usr/share/zsh/vendor-completions/_flatpak

Field source: Debian 13 (Trixie) main amd64 revision trixie-main-amd64:3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3

Utiliser ce paquet

OpenFactory peut démarrer ce système d'exploitation dans une machine virtuelle du navigateur, ou lancer une construction qui inclut le nom natif du paquet de cet enregistrement.

Versions, suites et dépôts

Chaque ligne est une métadonnée d'index pour une version, une architecture, une suite et un dépôt. Noms, URL et tailles viennent de la source ; un lien est un emplacement de récupération mutable, pas une redistribution OpenFactory.

VersionReleaseArchitectureRepositoryPackage sizeInstalled sizePublisher repository artifact
1.16.6-1~deb13u1trixie / mainamd64Debian 13 · main · amd641.5 MiB8.1 MiBpool/main/f/flatpak/flatpak_1.16.6-1~deb13u1_amd64.deb
1.16.6-1~deb13u1trixie / mainarm64Debian 13 · main · arm641.4 MiB8.4 MiBpool/main/f/flatpak/flatpak_1.16.6-1~deb13u1_arm64.deb
1.16.6-1~deb13u2trixie-security / mainamd64Debian 13 security · main · amd641.5 MiB8.2 MiBpool/updates/main/f/flatpak/flatpak_1.16.6-1~deb13u2_amd64.deb
1.16.6-1~deb13u2trixie-security / mainarm64Debian 13 security · main · arm641.4 MiB8.4 MiBpool/updates/main/f/flatpak/flatpak_1.16.6-1~deb13u2_arm64.deb
1.16.6-1~deb13u1 (withdrawn)trixie-security / mainamd64Debian 13 security · main · amd641.5 MiB8.1 MiBpool/updates/main/f/flatpak/flatpak_1.16.6-1~deb13u1_amd64.deb

Field source: Debian 13 (Trixie) main amd64 revision trixie-main-amd64:3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3

Empreintes et dates d'observation

For an APT source, signature verification authenticates the repository metadata chain and the Packages index containing this source-reported artifact digest. It does not certify package safety.

1.16.6-1~deb13u1 / amd64Observed Sep 1, 2026 to Sep 1, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha256: b5db09caf661ebb3c273690431abfdb19c0f0075a8bdb89ba027bb951d900b55

After downloading that exact artifact, compare its bytes with the source-reported expected digest:

printf '%s %s\n' 'b5db09caf661ebb3c273690431abfdb19c0f0075a8bdb89ba027bb951d900b55' 'flatpak_1.16.6-1~deb13u1_amd64.deb' | sha256sum --check --strict -

A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.

Field source: Debian 13 (Trixie) main amd64 revision trixie-main-amd64:3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3

1.16.6-1~deb13u1 / arm64Observed Sep 1, 2026 to Sep 1, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha256: 6e3bc163719631c4b4e3b7542c9732cf5b81864c3aaad9773684d7efc6b45f68

After downloading that exact artifact, compare its bytes with the source-reported expected digest:

printf '%s %s\n' '6e3bc163719631c4b4e3b7542c9732cf5b81864c3aaad9773684d7efc6b45f68' 'flatpak_1.16.6-1~deb13u1_arm64.deb' | sha256sum --check --strict -

A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.

Field source: Debian 13 (Trixie) main arm64 revision trixie-main-arm64:753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908

1.16.6-1~deb13u2 / amd64Observed Aug 12, 2026 to Aug 30, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha256: 394685e73bb5c9ca59cdf630353f21f88290b4b3b26731a7dd1f2be5a2f87d0a

After downloading that exact artifact, compare its bytes with the source-reported expected digest:

printf '%s %s\n' '394685e73bb5c9ca59cdf630353f21f88290b4b3b26731a7dd1f2be5a2f87d0a' 'flatpak_1.16.6-1~deb13u2_amd64.deb' | sha256sum --check --strict -

A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.

Field source: Debian Security revision trixie-security-main-amd64:dc1fe8c451d5ad17fe1ab51a53a09aa339509450dccf3cc574b243af9d7bd45e

1.16.6-1~deb13u2 / arm64Observed Sep 1, 2026 to Sep 1, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha256: 1c7bac26a81712ea9a422a65fb1d1068820c06d2040cb4d85e6e162ea0220a7f

After downloading that exact artifact, compare its bytes with the source-reported expected digest:

printf '%s %s\n' '1c7bac26a81712ea9a422a65fb1d1068820c06d2040cb4d85e6e162ea0220a7f' 'flatpak_1.16.6-1~deb13u2_arm64.deb' | sha256sum --check --strict -

A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.

Field source: Debian 13 (Trixie) security main arm64 revision trixie-security-main-arm64:a1606cb4e67822be93a6484199cd3ca52e27a8be038314abcac98bbd484c43d8

1.16.6-1~deb13u1 / amd64Observed Aug 10, 2026 to Aug 11, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha256: b5db09caf661ebb3c273690431abfdb19c0f0075a8bdb89ba027bb951d900b55

After downloading that exact artifact, compare its bytes with the source-reported expected digest:

printf '%s %s\n' 'b5db09caf661ebb3c273690431abfdb19c0f0075a8bdb89ba027bb951d900b55' 'flatpak_1.16.6-1~deb13u1_amd64.deb' | sha256sum --check --strict -

A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.

Field source: Debian Security revision trixie-security-main-amd64:762294a6b7df705e65e8b5d711324c197e02fdbce9f18a1c01f0701a84e5ce9f

Complétude de la fiche

The completeness score measures metadata coverage, not software quality, security, compatibility, or suitability.

Summary and description
25/25
Artifact path and source digest
25/25
Dependency metadata
15/15
Package-file index
0/15
Homepage
5/5
License text
0/5
Source package or maintainer
10/10

Recorded total: 80/100

Field source: Debian 13 (Trixie) main amd64 revision trixie-main-amd64:3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3, Debian 13 (Trixie) main arm64 revision trixie-main-arm64:753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908, Debian 13 (Trixie) security main arm64 revision trixie-security-main-arm64:a1606cb4e67822be93a6484199cd3ca52e27a8be038314abcac98bbd484c43d8, Debian Security revision trixie-security-main-amd64:dc1fe8c451d5ad17fe1ab51a53a09aa339509450dccf3cc574b243af9d7bd45e. The cross-OS mapping is catalog-derived from the source-reported homepage; it does not establish authorship or publisher identity

Sources et provenance

Field-source links above resolve here. Each source entry names the metadata publisher, trust tier, exact snapshot revision, signature result, and observation time; catalog-derived mappings are labeled separately.

  • Authoritative source; repository metadata signature verified, revision trixie-main-amd64:3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3

    Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.

    Repository-signature verification record
    Signed-object SHA-256
    98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Signed Release → package-index hash linkage

    Path: main/binary-amd64/Packages.xz
    Expected SHA-256: 3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
    Observed SHA-256: 3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
    Result: match verified

  • Authoritative source; repository metadata signature verified, revision trixie-main-arm64:753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908

    Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.

    Repository-signature verification record
    Signed-object SHA-256
    98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Signed Release → package-index hash linkage

    Path: main/binary-arm64/Packages.xz
    Expected SHA-256: 753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
    Observed SHA-256: 753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
    Result: match verified

  • Authoritative source; repository metadata signature verified, revision trixie-security-main-arm64:a1606cb4e67822be93a6484199cd3ca52e27a8be038314abcac98bbd484c43d8

    Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.

    Repository-signature verification record
    Signed-object SHA-256
    fb4f5284b755510aafc1d8a39ef966c7ef714aaab3ecc24baae0a67c38518ab5
    Signer fingerprint
    B0CAB9266E8C3929798B3EEEBDE6D2B9216EC7A8
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Signed Release → package-index hash linkage

    Path: main/binary-arm64/Packages.xz
    Expected SHA-256: a1606cb4e67822be93a6484199cd3ca52e27a8be038314abcac98bbd484c43d8
    Observed SHA-256: a1606cb4e67822be93a6484199cd3ca52e27a8be038314abcac98bbd484c43d8
    Result: match verified

  • Debian SecurityAug 11, 2026

    Authoritative source; repository metadata signature verified, revision trixie-security-main-amd64:762294a6b7df705e65e8b5d711324c197e02fdbce9f18a1c01f0701a84e5ce9f

    Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.

    Repository-signature verification record
    Signed-object SHA-256
    531b5b764317121f5301d446ad02c7705226f0bb8e6dc3fcdc0701afb9192b8a
    Signer fingerprint
    B0CAB9266E8C3929798B3EEEBDE6D2B9216EC7A8
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Aug 12, 2026
    Signed Release → package-index hash linkage

    Path: main/binary-amd64/Packages.xz
    Expected SHA-256: 762294a6b7df705e65e8b5d711324c197e02fdbce9f18a1c01f0701a84e5ce9f
    Observed SHA-256: 762294a6b7df705e65e8b5d711324c197e02fdbce9f18a1c01f0701a84e5ce9f
    Result: match verified

  • Debian SecurityAug 30, 2026

    Authoritative source; repository metadata signature verified, revision trixie-security-main-amd64:dc1fe8c451d5ad17fe1ab51a53a09aa339509450dccf3cc574b243af9d7bd45e

    Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.

    Repository-signature verification record
    Signed-object SHA-256
    fb4f5284b755510aafc1d8a39ef966c7ef714aaab3ecc24baae0a67c38518ab5
    Signer fingerprint
    B0CAB9266E8C3929798B3EEEBDE6D2B9216EC7A8
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 3, 2026
    Signed Release → package-index hash linkage

    Path: main/binary-amd64/Packages.xz
    Expected SHA-256: dc1fe8c451d5ad17fe1ab51a53a09aa339509450dccf3cc574b243af9d7bd45e
    Observed SHA-256: dc1fe8c451d5ad17fe1ab51a53a09aa339509450dccf3cc574b243af9d7bd45e
    Result: match verified