-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transmit or tampered with,
perform the following two steps to cryptographically verify image integrity:

1. Verify the authenticity of this file by checking that it is signed with our
   GPG release key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/master/keys/tkl-buster-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint release-buster-images@turnkeylinux.org
      pub   rsa4096 2020-02-05 [SC] [expires: 2040-01-31]
            A8B2 EF42 8781 9B03 D351  6CCA 7623 1C20 425E 9772
      uid           [ unknown] TurnKey GNU/Linux Buster Images (GPG signing key for TurnKey Linux Buster Images) <release-buster-images@turnkeylinux.org>
      sub   rsa4096 2020-02-05 [S] [expires: 2040-01-31]
      
    $ gpg --verify turnkey-foswiki-16.0-buster-amd64-vmdk.zip.hash
      gpg: Signature made using RSA key ID A8B2EF4287819B03D3516CCA76231C20425E9772
      gpg: Good signature from "0"

2. Recalculate the image hash and make sure it matches your choice of hash below.

    $ sha256sum turnkey-foswiki-16.0-buster-amd64-vmdk.zip
      f703cf482893022b49860403e48c60bc35ac23de2c7382977b219c429a4168e5  turnkey-foswiki-16.0-buster-amd64-vmdk.zip

    $ sha512sum turnkey-foswiki-16.0-buster-amd64-vmdk.zip
      ed6acc72a729f7aece3378ffcd43f0f236c57a1fbbc1c9e1ec7ffa7422ce17eb729a281bed2c0c4f2d482c2aa76a891460426742ff2feea2f4c5efc6f612ef93  turnkey-foswiki-16.0-buster-amd64-vmdk.zip

   Note, you can compare hashes automatically::

    $ sha256sum -c turnkey-foswiki-16.0-buster-amd64-vmdk.zip.hash
      turnkey-foswiki-16.0-buster-amd64-vmdk.zip: OK

    $ sha512sum -c turnkey-foswiki-16.0-buster-amd64-vmdk.zip.hash
      turnkey-foswiki-16.0-buster-amd64-vmdk.zip: OK

    Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted.

-----BEGIN PGP SIGNATURE-----
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=fde8
-----END PGP SIGNATURE-----