Packages / Debian 13 (Trixie) / localization / firefox-esr-l10n-son

[Source: firefox-esr]

Package: firefox-esr-l10n-son (140.12.0esr-1~deb13u1)

Songhai languages language package for Firefox ESR

Other Packages Related to firefox-esr-l10n-son:

  • dep: [firefox-esr] (>= 140.12.0esr-1~deb13u1)

    Mozilla Firefox web browser - Extended Support Release (ESR)

  • dep: [firefox-esr] (<< 140.12.0esr-1~deb13u1.1~)

    Mozilla Firefox web browser - Extended Support Release (ESR)

Download firefox-esr-l10n-son

ArchitecturePackage sizeInstalled sizeFilesPackage
all283 KiB409 KiBlist of filesDownload

Package file paths (0)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

No package-associated file paths were observed for the displayed build metadata.

Field source: Debian 13 (Trixie) main amd64 revision trixie-main-amd64:3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3

Use this package

OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.

Try Debian 13 (Trixie) in the browserBuild an image that includes firefox-esr-l10n-son

Versions, suites, and repositories

Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.

VersionReleaseArchitectureRepositoryPackage sizeInstalled sizePublisher repository artifact
140.12.0esr-1~deb13u1trixie / mainallDebian 13 · main · amd64208 KiB332 KiBpool/main/f/firefox-esr/firefox-esr-l10n-son_140.12.0esr-1~deb13u1_all.deb
140.12.0esr-1~deb13u1trixie / mainallDebian 13 · main · arm64208 KiB332 KiBpool/main/f/firefox-esr/firefox-esr-l10n-son_140.12.0esr-1~deb13u1_all.deb
153.5.1esr-1~deb13u1trixie-security / mainallDebian 13 security · main · amd64283 KiB409 KiBpool/updates/main/f/firefox-esr/firefox-esr-l10n-son_153.5.1esr-1~deb13u1_all.deb
140.14.0esr-1~deb13u1trixie-security / mainallDebian 13 security · main · arm64208 KiB333 KiBpool/updates/main/f/firefox-esr/firefox-esr-l10n-son_140.14.0esr-1~deb13u1_all.deb
153.5.0esr-1~deb13u1 (withdrawn)trixie-security / mainallDebian 13 security · main · amd64283 KiB409 KiBpool/updates/main/f/firefox-esr/firefox-esr-l10n-son_153.5.0esr-1~deb13u1_all.deb
153.4.0esr-1~deb13u1 (withdrawn)trixie-security / mainallDebian 13 security · main · amd64283 KiB409 KiBpool/updates/main/f/firefox-esr/firefox-esr-l10n-son_153.4.0esr-1~deb13u1_all.deb
140.16.0esr-1~deb13u1 (withdrawn)trixie-security / mainallDebian 13 security · main · amd64209 KiB333 KiBpool/updates/main/f/firefox-esr/firefox-esr-l10n-son_140.16.0esr-1~deb13u1_all.deb
140.15.0esr-1~deb13u1 (withdrawn)trixie-security / mainallDebian 13 security · main · amd64209 KiB333 KiBpool/updates/main/f/firefox-esr/firefox-esr-l10n-son_140.15.0esr-1~deb13u1_all.deb
140.14.0esr-1~deb13u1 (withdrawn)trixie-security / mainallDebian 13 security · main · amd64208 KiB333 KiBpool/updates/main/f/firefox-esr/firefox-esr-l10n-son_140.14.0esr-1~deb13u1_all.deb
140.13.0esr-1~deb13u1 (withdrawn)trixie-security / mainallDebian 13 security · main · amd64208 KiB333 KiBpool/updates/main/f/firefox-esr/firefox-esr-l10n-son_140.13.0esr-1~deb13u1_all.deb

Field source: Debian 13 (Trixie) main amd64 revision trixie-main-amd64:3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3

Checksums and observation dates

For an APT source, signature verification authenticates the repository metadata chain and the Packages index containing this source-reported artifact digest. It does not certify package safety.

140.12.0esr-1~deb13u1 / allObserved Sep 1, 2026 to Sep 1, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha256: 68b2406321c57195924e9dc12312103547264166aaff28c186d0a6d07ec1ced7

After downloading that exact artifact, compare its bytes with the source-reported expected digest:

printf '%s %s\n' '68b2406321c57195924e9dc12312103547264166aaff28c186d0a6d07ec1ced7' 'firefox-esr-l10n-son_140.12.0esr-1~deb13u1_all.deb' | sha256sum --check --strict -

A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.

Field source: Debian 13 (Trixie) main amd64 revision trixie-main-amd64:3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3

140.12.0esr-1~deb13u1 / allObserved Sep 1, 2026 to Sep 1, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha256: 68b2406321c57195924e9dc12312103547264166aaff28c186d0a6d07ec1ced7

After downloading that exact artifact, compare its bytes with the source-reported expected digest:

printf '%s %s\n' '68b2406321c57195924e9dc12312103547264166aaff28c186d0a6d07ec1ced7' 'firefox-esr-l10n-son_140.12.0esr-1~deb13u1_all.deb' | sha256sum --check --strict -

A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.

Field source: Debian 13 (Trixie) main arm64 revision trixie-main-arm64:753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908

153.5.1esr-1~deb13u1 / allObserved Oct 21, 2026 to Oct 21, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha256: 0075841f8e70ebb27d41480c1f422770502e5a3d29330a7301a46fb42c5b6c63

After downloading that exact artifact, compare its bytes with the source-reported expected digest:

printf '%s %s\n' '0075841f8e70ebb27d41480c1f422770502e5a3d29330a7301a46fb42c5b6c63' 'firefox-esr-l10n-son_153.5.1esr-1~deb13u1_all.deb' | sha256sum --check --strict -

A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.

Field source: Debian Security revision trixie-security-main-amd64:33fd812503c0c28c99916d31bfac44f4f4476e4cdad8afb6aef5644c0376f8e2

140.14.0esr-1~deb13u1 / allObserved Sep 1, 2026 to Sep 1, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha256: d8300ae226a65bce9ffbb5baac7327b196bcb15c1deb86b56e6cab3b3557fa98

After downloading that exact artifact, compare its bytes with the source-reported expected digest:

printf '%s %s\n' 'd8300ae226a65bce9ffbb5baac7327b196bcb15c1deb86b56e6cab3b3557fa98' 'firefox-esr-l10n-son_140.14.0esr-1~deb13u1_all.deb' | sha256sum --check --strict -

A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.

Field source: Debian 13 (Trixie) security main arm64 revision trixie-security-main-arm64:a1606cb4e67822be93a6484199cd3ca52e27a8be038314abcac98bbd484c43d8

153.5.0esr-1~deb13u1 / allObserved Oct 14, 2026 to Oct 20, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha256: 5c577ff970eabcdbddf12e630894528b3ec12bfc623d5584d452d58b67089751

After downloading that exact artifact, compare its bytes with the source-reported expected digest:

printf '%s %s\n' '5c577ff970eabcdbddf12e630894528b3ec12bfc623d5584d452d58b67089751' 'firefox-esr-l10n-son_153.5.0esr-1~deb13u1_all.deb' | sha256sum --check --strict -

A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.

Field source: Debian Security revision trixie-security-main-amd64:bcf7a4c2f26bd396d8b91f85d00984bdfc3e40452bdc22ca7b2877c8fadf9cc1

153.4.0esr-1~deb13u1 / allObserved Sep 30, 2026 to Oct 14, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha256: d5c09dce43d10d683bf928805ece4458483b564d22d35d301d265f9d9e7a3d6b

After downloading that exact artifact, compare its bytes with the source-reported expected digest:

printf '%s %s\n' 'd5c09dce43d10d683bf928805ece4458483b564d22d35d301d265f9d9e7a3d6b' 'firefox-esr-l10n-son_153.4.0esr-1~deb13u1_all.deb' | sha256sum --check --strict -

A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.

Field source: Debian Security revision trixie-security-main-amd64:432eaec5cad3855486d7b9eacef49f227017061c049eb9bbcf913b002ffb23ad

140.16.0esr-1~deb13u1 / allObserved Sep 16, 2026 to Sep 30, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha256: 2331209db0fcbe1cd1a134c02ab6e5f8b6460aa1ae11a9f0298760790d26130e

After downloading that exact artifact, compare its bytes with the source-reported expected digest:

printf '%s %s\n' '2331209db0fcbe1cd1a134c02ab6e5f8b6460aa1ae11a9f0298760790d26130e' 'firefox-esr-l10n-son_140.16.0esr-1~deb13u1_all.deb' | sha256sum --check --strict -

A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.

Field source: Debian Security revision trixie-security-main-amd64:8c4dff07c1346dc3576aa6bbd92cefbad9f169879e43a20068913482d12f145e

140.15.0esr-1~deb13u1 / allObserved Sep 4, 2026 to Sep 16, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha256: 1ff82254996be81e11c832f17c712a54bea989affd31f5a11a2e63e442ea4afd

After downloading that exact artifact, compare its bytes with the source-reported expected digest:

printf '%s %s\n' '1ff82254996be81e11c832f17c712a54bea989affd31f5a11a2e63e442ea4afd' 'firefox-esr-l10n-son_140.15.0esr-1~deb13u1_all.deb' | sha256sum --check --strict -

A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.

Field source: Debian Security revision trixie-security-main-amd64:17ef3706a37825256e84ec704a0570abdd740c8519bd94afa53b730d4b653f7e

140.14.0esr-1~deb13u1 / allObserved Aug 19, 2026 to Aug 30, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha256: d8300ae226a65bce9ffbb5baac7327b196bcb15c1deb86b56e6cab3b3557fa98

After downloading that exact artifact, compare its bytes with the source-reported expected digest:

printf '%s %s\n' 'd8300ae226a65bce9ffbb5baac7327b196bcb15c1deb86b56e6cab3b3557fa98' 'firefox-esr-l10n-son_140.14.0esr-1~deb13u1_all.deb' | sha256sum --check --strict -

A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.

Field source: Debian Security revision trixie-security-main-amd64:dc1fe8c451d5ad17fe1ab51a53a09aa339509450dccf3cc574b243af9d7bd45e

140.13.0esr-1~deb13u1 / allObserved Aug 10, 2026 to Aug 18, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha256: 4b0ba291e62f5c367d29b01fb72bd836ec415c48e34d412fe8c2c795b9c69e7f

After downloading that exact artifact, compare its bytes with the source-reported expected digest:

printf '%s %s\n' '4b0ba291e62f5c367d29b01fb72bd836ec415c48e34d412fe8c2c795b9c69e7f' 'firefox-esr-l10n-son_140.13.0esr-1~deb13u1_all.deb' | sha256sum --check --strict -

A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.

Field source: Debian Security revision trixie-security-main-amd64:943da2fdad17a26c55b0c806868d734ed0368cf37fa7eeed8bf62712f29a501b

Sources and provenance

Field-source links above resolve here. Each source entry names the metadata publisher, trust tier, exact snapshot revision, signature result, and observation time; catalog-derived mappings are labeled separately.

  • Debian 13 (Trixie) main amd64Sep 1, 2026

    Authoritative source; repository metadata signature verified, revision trixie-main-amd64:3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3

    Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.

    Repository-signature verification record
    Signed-object SHA-256
    98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Signed Release → package-index hash linkage

    Path: main/binary-amd64/Packages.xz
    Expected SHA-256: 3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
    Observed SHA-256: 3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
    Result: match verified

  • Debian 13 (Trixie) main arm64Sep 1, 2026

    Authoritative source; repository metadata signature verified, revision trixie-main-arm64:753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908

    Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.

    Repository-signature verification record
    Signed-object SHA-256
    98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Signed Release → package-index hash linkage

    Path: main/binary-arm64/Packages.xz
    Expected SHA-256: 753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
    Observed SHA-256: 753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
    Result: match verified

  • Debian 13 (Trixie) security main arm64Sep 1, 2026

    Authoritative source; repository metadata signature verified, revision trixie-security-main-arm64:a1606cb4e67822be93a6484199cd3ca52e27a8be038314abcac98bbd484c43d8

    Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.

    Repository-signature verification record
    Signed-object SHA-256
    fb4f5284b755510aafc1d8a39ef966c7ef714aaab3ecc24baae0a67c38518ab5
    Signer fingerprint
    B0CAB9266E8C3929798B3EEEBDE6D2B9216EC7A8
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Signed Release → package-index hash linkage

    Path: main/binary-arm64/Packages.xz
    Expected SHA-256: a1606cb4e67822be93a6484199cd3ca52e27a8be038314abcac98bbd484c43d8
    Observed SHA-256: a1606cb4e67822be93a6484199cd3ca52e27a8be038314abcac98bbd484c43d8
    Result: match verified

  • Debian SecuritySep 16, 2026

    Authoritative source; repository metadata signature verified, revision trixie-security-main-amd64:17ef3706a37825256e84ec704a0570abdd740c8519bd94afa53b730d4b653f7e

    Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.

    Repository-signature verification record
    Signed-object SHA-256
    7b5ca14fa6cee2a22a7c68553933b211d398b14727679631c75ff6b122ae52f0
    Signer fingerprint
    B0CAB9266E8C3929798B3EEEBDE6D2B9216EC7A8
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 16, 2026
    Signed Release → package-index hash linkage

    Path: main/binary-amd64/Packages.xz
    Expected SHA-256: 17ef3706a37825256e84ec704a0570abdd740c8519bd94afa53b730d4b653f7e
    Observed SHA-256: 17ef3706a37825256e84ec704a0570abdd740c8519bd94afa53b730d4b653f7e
    Result: match verified

  • Debian SecurityOct 21, 2026

    Authoritative source; repository metadata signature verified, revision trixie-security-main-amd64:33fd812503c0c28c99916d31bfac44f4f4476e4cdad8afb6aef5644c0376f8e2

    Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.

    Repository-signature verification record
    Signed-object SHA-256
    85977a6f7c9974208afcb6e987b20f8d727a06615cfc5fb65a5d7a601ffdf727
    Signer fingerprint
    B0CAB9266E8C3929798B3EEEBDE6D2B9216EC7A8
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Oct 22, 2026
    Signed Release → package-index hash linkage

    Path: main/binary-amd64/Packages.xz
    Expected SHA-256: 33fd812503c0c28c99916d31bfac44f4f4476e4cdad8afb6aef5644c0376f8e2
    Observed SHA-256: 33fd812503c0c28c99916d31bfac44f4f4476e4cdad8afb6aef5644c0376f8e2
    Result: match verified

  • Debian SecurityOct 14, 2026

    Authoritative source; repository metadata signature verified, revision trixie-security-main-amd64:432eaec5cad3855486d7b9eacef49f227017061c049eb9bbcf913b002ffb23ad

    Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.

    Repository-signature verification record
    Signed-object SHA-256
    c8c6cebde6131a316e7f376bb7f672b854d5a6c553db1b77b48222bed5392c7f
    Signer fingerprint
    B0CAB9266E8C3929798B3EEEBDE6D2B9216EC7A8
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Oct 14, 2026
    Signed Release → package-index hash linkage

    Path: main/binary-amd64/Packages.xz
    Expected SHA-256: 432eaec5cad3855486d7b9eacef49f227017061c049eb9bbcf913b002ffb23ad
    Observed SHA-256: 432eaec5cad3855486d7b9eacef49f227017061c049eb9bbcf913b002ffb23ad
    Result: match verified

  • Debian SecuritySep 30, 2026

    Authoritative source; repository metadata signature verified, revision trixie-security-main-amd64:8c4dff07c1346dc3576aa6bbd92cefbad9f169879e43a20068913482d12f145e

    Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.

    Repository-signature verification record
    Signed-object SHA-256
    c6c36487c03afbba9db1011f880f64abddac625df9c7ecea842e4b4008b34982
    Signer fingerprint
    B0CAB9266E8C3929798B3EEEBDE6D2B9216EC7A8
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 30, 2026
    Signed Release → package-index hash linkage

    Path: main/binary-amd64/Packages.xz
    Expected SHA-256: 8c4dff07c1346dc3576aa6bbd92cefbad9f169879e43a20068913482d12f145e
    Observed SHA-256: 8c4dff07c1346dc3576aa6bbd92cefbad9f169879e43a20068913482d12f145e
    Result: match verified

  • Debian SecurityAug 18, 2026

    Authoritative source; repository metadata signature verified, revision trixie-security-main-amd64:943da2fdad17a26c55b0c806868d734ed0368cf37fa7eeed8bf62712f29a501b

    Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.

    Repository-signature verification record
    Signed-object SHA-256
    91f170b649b2b5e61351078eea68247d742f55ff512dd97c54b67f262265eb20
    Signer fingerprint
    B0CAB9266E8C3929798B3EEEBDE6D2B9216EC7A8
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Aug 19, 2026
    Signed Release → package-index hash linkage

    Path: main/binary-amd64/Packages.xz
    Expected SHA-256: 943da2fdad17a26c55b0c806868d734ed0368cf37fa7eeed8bf62712f29a501b
    Observed SHA-256: 943da2fdad17a26c55b0c806868d734ed0368cf37fa7eeed8bf62712f29a501b
    Result: match verified

  • Debian SecurityOct 20, 2026

    Authoritative source; repository metadata signature verified, revision trixie-security-main-amd64:bcf7a4c2f26bd396d8b91f85d00984bdfc3e40452bdc22ca7b2877c8fadf9cc1

    Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.

    Repository-signature verification record
    Signed-object SHA-256
    dcdf74c5e10bdb5b3b1c5a24157801cf4819ed12453534a7495732d289b4fb99
    Signer fingerprint
    B0CAB9266E8C3929798B3EEEBDE6D2B9216EC7A8
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Oct 21, 2026
    Signed Release → package-index hash linkage

    Path: main/binary-amd64/Packages.xz
    Expected SHA-256: bcf7a4c2f26bd396d8b91f85d00984bdfc3e40452bdc22ca7b2877c8fadf9cc1
    Observed SHA-256: bcf7a4c2f26bd396d8b91f85d00984bdfc3e40452bdc22ca7b2877c8fadf9cc1
    Result: match verified

  • Debian SecurityAug 30, 2026

    Authoritative source; repository metadata signature verified, revision trixie-security-main-amd64:dc1fe8c451d5ad17fe1ab51a53a09aa339509450dccf3cc574b243af9d7bd45e

    Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.

    Repository-signature verification record
    Signed-object SHA-256
    fb4f5284b755510aafc1d8a39ef966c7ef714aaab3ecc24baae0a67c38518ab5
    Signer fingerprint
    B0CAB9266E8C3929798B3EEEBDE6D2B9216EC7A8
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 3, 2026
    Signed Release → package-index hash linkage

    Path: main/binary-amd64/Packages.xz
    Expected SHA-256: dc1fe8c451d5ad17fe1ab51a53a09aa339509450dccf3cc574b243af9d7bd45e
    Observed SHA-256: dc1fe8c451d5ad17fe1ab51a53a09aa339509450dccf3cc574b243af9d7bd45e
    Result: match verified