-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transmit or tampered with,
perform the following two steps to cryptographically verify image integrity:

1. Verify the authenticity of this file by checking that it is signed with our
   GPG release key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/master/keys/tkl-buster-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint release-buster-images@turnkeylinux.org
      pub   rsa4096 2020-02-05 [SC] [expires: 2040-01-31]
            A8B2 EF42 8781 9B03 D351  6CCA 7623 1C20 425E 9772
      uid           [ unknown] TurnKey GNU/Linux Buster Images (GPG signing key for TurnKey Linux Buster Images) <release-buster-images@turnkeylinux.org>
      sub   rsa4096 2020-02-05 [S] [expires: 2040-01-31]
      
    $ gpg --verify turnkey-typo3-16.0-buster-amd64.iso.hash
      gpg: Signature made using RSA key ID A8B2EF4287819B03D3516CCA76231C20425E9772
      gpg: Good signature from "0"

2. Recalculate the image hash and make sure it matches your choice of hash below.

    $ sha256sum turnkey-typo3-16.0-buster-amd64.iso
      ec7778da3f183fc93b49b433938f2c47d2e48d9f41e2c7fc8713cb86157c1045  turnkey-typo3-16.0-buster-amd64.iso

    $ sha512sum turnkey-typo3-16.0-buster-amd64.iso
      cebfba7e356cb1186e4d18e80f1b1621c1b067d9a87603928501169a451c04c57bde3a371c7e2aa5ea1193ab5e7c5d2d04458307b84ae0c632e012eeca6ad843  turnkey-typo3-16.0-buster-amd64.iso

   Note, you can compare hashes automatically::

    $ sha256sum -c turnkey-typo3-16.0-buster-amd64.iso.hash
      turnkey-typo3-16.0-buster-amd64.iso: OK

    $ sha512sum -c turnkey-typo3-16.0-buster-amd64.iso.hash
      turnkey-typo3-16.0-buster-amd64.iso: OK

    Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted.

-----BEGIN PGP SIGNATURE-----
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=Jh4C
-----END PGP SIGNATURE-----