-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl | gpg --import $ gpg --list-keys --with-fingerprint release-bullseye-images@turnkeylinux.org pub rsa4096 2021-08-04 [SC] [expires: 2041-07-30] E10F 6567 0C8E BE42 ED0C 3A49 CCA5 1174 468F 9073 uid [ unknown] TurnKey GNU/Linux Bullseye Images (GPG signing key for TurnKey Linux Bullseye Images) sub rsa4096 2021-08-04 [S] [expires: 2041-07-30] $ gpg --verify debian-11-turnkey-invoice-ninja_17.1-1_amd64.tar.gz.hash gpg: Signature made using RSA key ID E10F65670C8EBE42ED0C3A49CCA51174468F9073 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum debian-11-turnkey-invoice-ninja_17.1-1_amd64.tar.gz 62420c783307f6f3db7f0abb16baa7fcae6c8ef4b0baba311152333390fee8c4 debian-11-turnkey-invoice-ninja_17.1-1_amd64.tar.gz $ sha512sum debian-11-turnkey-invoice-ninja_17.1-1_amd64.tar.gz 9aadecb7025d8e69d3fab8694ce5d996ed389f063666c06cf9d28e722aae01f7ca83837ab4fa34537ffa2be9688d35dc6c0b89f71c127ea2d4b960e52c0006f7 debian-11-turnkey-invoice-ninja_17.1-1_amd64.tar.gz Note, you can compare hashes automatically:: $ sha256sum -c debian-11-turnkey-invoice-ninja_17.1-1_amd64.tar.gz.hash debian-11-turnkey-invoice-ninja_17.1-1_amd64.tar.gz: OK $ sha512sum -c debian-11-turnkey-invoice-ninja_17.1-1_amd64.tar.gz.hash debian-11-turnkey-invoice-ninja_17.1-1_amd64.tar.gz: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE3YP+u+JWuSop/BuCHkh6RjHW/rYFAmM0CTQACgkQHkh6RjHW /rau5A//UEeG9NReqQFYhlrDxD43DmYVdXjmsTaXfFtT9f2A5Zpg5A/Smm913xbq 4UR0g6hxPSH3niR/py/q5/XFMRymMXFXNL9IZ2p64GNZZPJo7/LvIfIK4rPhxmHn miDKyMOWPCMb3AFvAVLLdUi5kdd659qV+8SUTsUX6G47AedQC4bB55rfAqr44NIU xSG+UfpcVkf+WIPwhTWXXQhb/6aZzE0W7fKPwUZsdyAiQi+nvsmLdN5QOJFYMGX2 /erekSAMjTE+CNaGzaGJf1P7qAdj+5jtnJG+E5BR0S47Pim7niahczsL5TkJR+Ur 6oVQvfAGI/iidgBqjD5hmzo7P/MK4148KLG4aJIXfeCBZCJ0Di3o+QLQPo6T1xgv YTpb4xOQDXWr2f0DqrXpBtwd58OsrF8mak6Z47/RFeIdGl/IxlBMnB/qCQ/EKVrv pXqwXlvT55dqBJzp6X/vvqpZOTtgufTE9Z3u5U5/mhAZNLraHOhGoLorybOU/2eo MVyBIDmi/c9RKn+inJdywoRvFEaXv/Q2uBdpmPKviFoEggZptqh+cloaMUUhGJ/A qNMC9jxQXEmcPvvUJhgpjRH1qo+g77/ojWYxqXFW0fBQM8Vi2peHYeIK/llcdOht 363RmQTV5GZH6W1lCJ5dKbA6ITFezCDPKLTWu7cGXLSJ6wkmNKA= =xRXU -----END PGP SIGNATURE-----