Download Mageia 7.1 Live Xfce 32bit

$ # You need both iso and checksum file in the same folder
$ sha512sum -c Mageia-7.1-Live-Xfce-i586.iso.sha512
Mageia-7.1-Live-Xfce-i586.iso: OK 

$ sha3-512sum -c Mageia-7.1-Live-Xfce-i586.iso.sha3
Mageia-7.1-Live-Xfce-i586.iso: OK 

$ # You can also compare checksum directly from this web page without checksum file
$ sha512sum Mageia-7.1-Live-Xfce-i586.iso
07b655e02f3de4a50f2cf9f4482c18abced8688482f8fecbd4ac14e2f106e23455b2a999237abfbda3e5c54bd39673e6ad92c23a70f8533a95fcec091774b556  Mageia-7.1-Live-Xfce-i586.iso 

$ sha3-512sum Mageia-7.1-Live-Xfce-i586.iso
5D011FE1751C30E5062EA7F81BA7E78E2E5F8F2339E4DAE29677547CE977064F7EA4DEC31708ABD0AEAA8D13D433BEB2AE497FD9B16F965A28C83A1353672C01  Mageia-7.1-Live-Xfce-i586.iso 

If checksums do not match, DO NOT use this ISO. Double-check and try to download again.

You can also verify the signature of an ISO. They are also available for download as files: Mageia-7.1-Live-Xfce-i586.iso.sha512.gpg and Mageia-7.1-Live-Xfce-i586.iso.sha3.gpg. First you need to import the "Mageia Release" key from a PGP Public Key Server:

$ gpg --keyserver keyserver.ubuntu.com --recv-keys EDCA7A90

In response there should be one of the following lines:

gpg: key EDCA7A90: public key "Mageia Release <release@mageia.org>" imported

or if you already imported the key before:

gpg: key EDCA7A90: "Mageia Release <release@mageia.org>" not changed

Then you need to verify the signature for the ISO.

$ gpg --verify Mageia-7.1-Live-Xfce-i586.iso.sha512.gpg Mageia-7.1-Live-Xfce-i586.iso.sha512

In response there should be lines like:

gpg: Good signature from "Mageia Release <release@mageia.org>"
gpg: WARNING: This key is not certified with a trusted signature!
gpg:          There is no indication that the signature belongs to the owner.
Primary key fingerprint: B210 76A0 CBE4 D93D 66A9  D08D 835E 41F4 EDCA 7A90

The warning about uncertified signature is expected.