-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transmit or tampered with,
perform the following two steps to cryptographically verify image integrity:

1. Verify the authenticity of this file by checking that it is signed with our
   GPG release key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/master/keys/tkl-buster-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint release-buster-images@turnkeylinux.org
      pub   rsa4096 2020-02-05 [SC] [expires: 2040-01-31]
            A8B2 EF42 8781 9B03 D351  6CCA 7623 1C20 425E 9772
      uid           [ unknown] TurnKey GNU/Linux Buster Images (GPG signing key for TurnKey Linux Buster Images) <release-buster-images@turnkeylinux.org>
      sub   rsa4096 2020-02-05 [S] [expires: 2040-01-31]
      
    $ gpg --verify turnkey-etherpad-16.0-buster-amd64-vmdk.zip.hash
      gpg: Signature made using RSA key ID A8B2EF4287819B03D3516CCA76231C20425E9772
      gpg: Good signature from "0"

2. Recalculate the image hash and make sure it matches your choice of hash below.

    $ sha256sum turnkey-etherpad-16.0-buster-amd64-vmdk.zip
      61c0e68b6ff20e0275e1a6950f011947cd205aa8270dae8bf2ef35a1ad8b6539  turnkey-etherpad-16.0-buster-amd64-vmdk.zip

    $ sha512sum turnkey-etherpad-16.0-buster-amd64-vmdk.zip
      e9d619dabba2913a49e609a76869bd9c3129cb638f7ebce56869cc837bfc0002b35aa5d798fd65ad484ab7cbcd7e2d2a52beaf64dae9d5f37bebfb82c13ee79e  turnkey-etherpad-16.0-buster-amd64-vmdk.zip

   Note, you can compare hashes automatically::

    $ sha256sum -c turnkey-etherpad-16.0-buster-amd64-vmdk.zip.hash
      turnkey-etherpad-16.0-buster-amd64-vmdk.zip: OK

    $ sha512sum -c turnkey-etherpad-16.0-buster-amd64-vmdk.zip.hash
      turnkey-etherpad-16.0-buster-amd64-vmdk.zip: OK

    Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted.

-----BEGIN PGP SIGNATURE-----
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=3ETr
-----END PGP SIGNATURE-----