-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transmit or tampered with,
perform the following two steps to cryptographically verify image integrity:

1. Verify the authenticity of this file by checking that it is signed with our
   GPG release key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/master/keys/tkl-buster-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint release-buster-images@turnkeylinux.org
      pub   rsa4096 2020-02-05 [SC] [expires: 2040-01-31]
            A8B2 EF42 8781 9B03 D351  6CCA 7623 1C20 425E 9772
      uid           [ unknown] TurnKey GNU/Linux Buster Images (GPG signing key for TurnKey Linux Buster Images) <release-buster-images@turnkeylinux.org>
      sub   rsa4096 2020-02-05 [S] [expires: 2040-01-31]
      
    $ gpg --verify turnkey-mediaserver-16.0-buster-amd64-vmdk.zip.hash
      gpg: Signature made using RSA key ID A8B2EF4287819B03D3516CCA76231C20425E9772
      gpg: Good signature from "0"

2. Recalculate the image hash and make sure it matches your choice of hash below.

    $ sha256sum turnkey-mediaserver-16.0-buster-amd64-vmdk.zip
      082bcb05380b647c0b5f91b946c4bb505b3b764caa5aaca99327f6156638b8c8  turnkey-mediaserver-16.0-buster-amd64-vmdk.zip

    $ sha512sum turnkey-mediaserver-16.0-buster-amd64-vmdk.zip
      69d8dd31785b7cc760fc041dba0dbf2c06a5a53a015b00bafbf4d8afbc6a74a78c24f8e97a4c7368c07ddc9280ac1f29fb0b269e4e3079b41ec29db8d518142f  turnkey-mediaserver-16.0-buster-amd64-vmdk.zip

   Note, you can compare hashes automatically::

    $ sha256sum -c turnkey-mediaserver-16.0-buster-amd64-vmdk.zip.hash
      turnkey-mediaserver-16.0-buster-amd64-vmdk.zip: OK

    $ sha512sum -c turnkey-mediaserver-16.0-buster-amd64-vmdk.zip.hash
      turnkey-mediaserver-16.0-buster-amd64-vmdk.zip: OK

    Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted.

-----BEGIN PGP SIGNATURE-----
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=IJ4q
-----END PGP SIGNATURE-----