-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transmit or tampered with,
perform the following two steps to cryptographically verify image integrity:

1. Verify the authenticity of this file by checking that it is signed with our
   GPG release key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/master/keys/tkl-buster-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint release-buster-images@turnkeylinux.org
      pub   rsa4096 2020-02-05 [SC] [expires: 2040-01-31]
            A8B2 EF42 8781 9B03 D351  6CCA 7623 1C20 425E 9772
      uid           [ unknown] TurnKey GNU/Linux Buster Images (GPG signing key for TurnKey Linux Buster Images) <release-buster-images@turnkeylinux.org>
      sub   rsa4096 2020-02-05 [S] [expires: 2040-01-31]
      
    $ gpg --verify turnkey-bagisto-16.1-buster-amd64-vmdk.zip.hash
      gpg: Signature made using RSA key ID A8B2EF4287819B03D3516CCA76231C20425E9772
      gpg: Good signature from "0"

2. Recalculate the image hash and make sure it matches your choice of hash below.

    $ sha256sum turnkey-bagisto-16.1-buster-amd64-vmdk.zip
      1bc3b80a75016e7eb3d75f1a75edca47546a69ed29f2356ed376fa9d7367ad67  turnkey-bagisto-16.1-buster-amd64-vmdk.zip

    $ sha512sum turnkey-bagisto-16.1-buster-amd64-vmdk.zip
      28059bc9d837a4c45175c51fab9cff09abea135f50cc9dc878a6b7fe4bcde208144de6a66ac45573852a60d75a1840ad09ddf921b3af3b87e144734d08199ae7  turnkey-bagisto-16.1-buster-amd64-vmdk.zip

   Note, you can compare hashes automatically::

    $ sha256sum -c turnkey-bagisto-16.1-buster-amd64-vmdk.zip.hash
      turnkey-bagisto-16.1-buster-amd64-vmdk.zip: OK

    $ sha512sum -c turnkey-bagisto-16.1-buster-amd64-vmdk.zip.hash
      turnkey-bagisto-16.1-buster-amd64-vmdk.zip: OK

    Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted.

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEE8ZCki1TcVrLH8k3LrF6wBJPlvBwFAmB728wACgkQrF6wBJPl
vBw/WA//bwY3muE+61lOK/rzxAPAAn5KozrO2w/6bRPbY0MPKVMcX0SN0aC8CAtq
Wd0OTERkBFXhCAAtGx8RksJt8Fmc7ve1vS11HTjIECjrL6mln+fp+wbemjek+Mki
vHAbDaDOFAHK7UoFIpc35OGzmb4OfJHB+hrJdujyRAJ9QuMdDSvXmrOwJwtVNTUj
jruGe5nHmDYEFxH+LsuiX6spo8OmZ4b+OTp4jhp6E2pzBKScfIXEN8HQwkjXPmCJ
dyW2ERm5vS4z3osVq5jMV+h5yLV/LzDZyA4h3Y/PWxISu5vyYZxcsXe48DpP4uuL
wHbkVMD5rLb0m3J0sAGeOp0XJxhoNnK49dblziBvJmSEo+Krt0Kl/Uh0B+gHdr64
2LKbm7diX4sbdseVQmlErT8j6chKyyRjNkg2E2/3P7ZqyfeoFdIlJy+T/MddxqKk
F9RsKRKZThancdr9hd28ck6dg+PoMKfp8KBnSjSlIEkSwhfoLLUvljpSxjwZaDxk
KsPqJ8e1LgoRR+1mev0LeqjG0TSSp/W0hmAFmD9pPim5chCVoEGpZR783aqRtQFm
ICt7cd2pH6HC9AJWUv9boibhJY031xBzrY/wuIIYO1gyRBQoWmy9LCLcgn+Jb3VR
z0yDPoSzkhsjYieaar0JAinrMtL6yRkm/VdBBpVL5iUdApL+ytI=
=Huel
-----END PGP SIGNATURE-----