-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transmit or tampered with,
perform the following two steps to cryptographically verify image integrity:

1. Verify the authenticity of this file by checking that it is signed with our
   GPG release key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/master/keys/tkl-buster-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint release-buster-images@turnkeylinux.org
      pub   rsa4096 2020-02-05 [SC] [expires: 2040-01-31]
            A8B2 EF42 8781 9B03 D351  6CCA 7623 1C20 425E 9772
      uid           [ unknown] TurnKey GNU/Linux Buster Images (GPG signing key for TurnKey Linux Buster Images) <release-buster-images@turnkeylinux.org>
      sub   rsa4096 2020-02-05 [S] [expires: 2040-01-31]
      
    $ gpg --verify turnkey-mongodb-16.1-buster-amd64-vmdk.zip.hash
      gpg: Signature made using RSA key ID A8B2EF4287819B03D3516CCA76231C20425E9772
      gpg: Good signature from "0"

2. Recalculate the image hash and make sure it matches your choice of hash below.

    $ sha256sum turnkey-mongodb-16.1-buster-amd64-vmdk.zip
      1a54af096dfe6c30afb7d26cb458373a98dd1961413ccebabd155e5441a39cba  turnkey-mongodb-16.1-buster-amd64-vmdk.zip

    $ sha512sum turnkey-mongodb-16.1-buster-amd64-vmdk.zip
      1d1d4bb3f079e2b942bf2a688ff425500c544e9fe8718bee17a8f904219af70e91e866b9af496fc113d2e5fc75dd97fd8a9b18ab6a4328aa45a427821a07075e  turnkey-mongodb-16.1-buster-amd64-vmdk.zip

   Note, you can compare hashes automatically::

    $ sha256sum -c turnkey-mongodb-16.1-buster-amd64-vmdk.zip.hash
      turnkey-mongodb-16.1-buster-amd64-vmdk.zip: OK

    $ sha512sum -c turnkey-mongodb-16.1-buster-amd64-vmdk.zip.hash
      turnkey-mongodb-16.1-buster-amd64-vmdk.zip: OK

    Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted.

-----BEGIN PGP SIGNATURE-----
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=p/2K
-----END PGP SIGNATURE-----