-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transmit or tampered with,
perform the following two steps to cryptographically verify image integrity:

1. Verify the authenticity of this file by checking that it is signed with our
   GPG release key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/master/keys/tkl-buster-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint release-buster-images@turnkeylinux.org
      pub   rsa4096 2020-02-05 [SC] [expires: 2040-01-31]
            A8B2 EF42 8781 9B03 D351  6CCA 7623 1C20 425E 9772
      uid           [ unknown] TurnKey GNU/Linux Buster Images (GPG signing key for TurnKey Linux Buster Images) <release-buster-images@turnkeylinux.org>
      sub   rsa4096 2020-02-05 [S] [expires: 2040-01-31]
      
    $ gpg --verify turnkey-omeka-16.0-buster-amd64.iso.hash
      gpg: Signature made using RSA key ID A8B2EF4287819B03D3516CCA76231C20425E9772
      gpg: Good signature from "0"

2. Recalculate the image hash and make sure it matches your choice of hash below.

    $ sha256sum turnkey-omeka-16.0-buster-amd64.iso
      507ef3aa2ec2bc2b777c598355c8bdf8930ff80447506970d8db896414389cf8  turnkey-omeka-16.0-buster-amd64.iso

    $ sha512sum turnkey-omeka-16.0-buster-amd64.iso
      f2a5bad82107dd54e6cb484074fef0c4d9b2bf5ea000f8340cd697e8a06b474018f0566b1cf4c8ecf92387a8360402ed60b98fa54234c27a6b347f18ba5d9ec5  turnkey-omeka-16.0-buster-amd64.iso

   Note, you can compare hashes automatically::

    $ sha256sum -c turnkey-omeka-16.0-buster-amd64.iso.hash
      turnkey-omeka-16.0-buster-amd64.iso: OK

    $ sha512sum -c turnkey-omeka-16.0-buster-amd64.iso.hash
      turnkey-omeka-16.0-buster-amd64.iso: OK

    Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted.

-----BEGIN PGP SIGNATURE-----
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=ZHir
-----END PGP SIGNATURE-----