-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transmit or tampered with,
perform the following two steps to cryptographically verify image integrity:

1. Verify the authenticity of this file by checking that it is signed with our
   GPG release key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/master/keys/tkl-buster-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint release-buster-images@turnkeylinux.org
      pub   rsa4096 2020-02-05 [SC] [expires: 2040-01-31]
            A8B2 EF42 8781 9B03 D351  6CCA 7623 1C20 425E 9772
      uid           [ unknown] TurnKey GNU/Linux Buster Images (GPG signing key for TurnKey Linux Buster Images) <release-buster-images@turnkeylinux.org>
      sub   rsa4096 2020-02-05 [S] [expires: 2040-01-31]
      
    $ gpg --verify turnkey-etherpad-16.1-buster-amd64-vmdk.zip.hash
      gpg: Signature made using RSA key ID A8B2EF4287819B03D3516CCA76231C20425E9772
      gpg: Good signature from "0"

2. Recalculate the image hash and make sure it matches your choice of hash below.

    $ sha256sum turnkey-etherpad-16.1-buster-amd64-vmdk.zip
      295bf3c1871d2746120dbac158c875f9501e812c98c398a2679699f2311c1b37  turnkey-etherpad-16.1-buster-amd64-vmdk.zip

    $ sha512sum turnkey-etherpad-16.1-buster-amd64-vmdk.zip
      25c8191a444af2f97156b2b90b9c3a5dc872c6c8d342a3d5d1a19b15a2774af5c9f4c0187b0c34cda409fb9325ab6f78a11d34ce8757233aff65fe21087c48e7  turnkey-etherpad-16.1-buster-amd64-vmdk.zip

   Note, you can compare hashes automatically::

    $ sha256sum -c turnkey-etherpad-16.1-buster-amd64-vmdk.zip.hash
      turnkey-etherpad-16.1-buster-amd64-vmdk.zip: OK

    $ sha512sum -c turnkey-etherpad-16.1-buster-amd64-vmdk.zip.hash
      turnkey-etherpad-16.1-buster-amd64-vmdk.zip: OK

    Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted.

-----BEGIN PGP SIGNATURE-----
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=ztiE
-----END PGP SIGNATURE-----