-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transmit or tampered with,
perform the following two steps to cryptographically verify image integrity:

1. Verify the authenticity of this file by checking that it is signed with our
   GPG release key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/master/keys/tkl-buster-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint release-buster-images@turnkeylinux.org
      pub   rsa4096 2020-02-05 [SC] [expires: 2040-01-31]
            A8B2 EF42 8781 9B03 D351  6CCA 7623 1C20 425E 9772
      uid           [ unknown] TurnKey GNU/Linux Buster Images (GPG signing key for TurnKey Linux Buster Images) <release-buster-images@turnkeylinux.org>
      sub   rsa4096 2020-02-05 [S] [expires: 2040-01-31]
      
    $ gpg --verify turnkey-laravel-16.0-buster-amd64-vmdk.zip.hash
      gpg: Signature made using RSA key ID A8B2EF4287819B03D3516CCA76231C20425E9772
      gpg: Good signature from "0"

2. Recalculate the image hash and make sure it matches your choice of hash below.

    $ sha256sum turnkey-laravel-16.0-buster-amd64-vmdk.zip
      5c4a8a5fd3107cd0c673b70c7c40ec220d4cdd194e20337b12393c1275d29da4  turnkey-laravel-16.0-buster-amd64-vmdk.zip

    $ sha512sum turnkey-laravel-16.0-buster-amd64-vmdk.zip
      de612a93ab272b72a6d57ac60930f68b9a91a0e2096499e13fc073885fae08db3b8f7a70f4398196d3f6ffc77463a370753309d46ad32d0abe95a4a7622381be  turnkey-laravel-16.0-buster-amd64-vmdk.zip

   Note, you can compare hashes automatically::

    $ sha256sum -c turnkey-laravel-16.0-buster-amd64-vmdk.zip.hash
      turnkey-laravel-16.0-buster-amd64-vmdk.zip: OK

    $ sha512sum -c turnkey-laravel-16.0-buster-amd64-vmdk.zip.hash
      turnkey-laravel-16.0-buster-amd64-vmdk.zip: OK

    Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted.

-----BEGIN PGP SIGNATURE-----
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=5AkC
-----END PGP SIGNATURE-----