-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transmit or tampered with,
perform the following two steps to cryptographically verify image integrity:

1. Verify the authenticity of this file by checking that it is signed with our
   GPG release key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/master/keys/tkl-buster-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint release-buster-images@turnkeylinux.org
      pub   rsa4096 2020-02-05 [SC] [expires: 2040-01-31]
            A8B2 EF42 8781 9B03 D351  6CCA 7623 1C20 425E 9772
      uid           [ unknown] TurnKey GNU/Linux Buster Images (GPG signing key for TurnKey Linux Buster Images) <release-buster-images@turnkeylinux.org>
      sub   rsa4096 2020-02-05 [S] [expires: 2040-01-31]
      
    $ gpg --verify debian-10-turnkey-processmaker_16.1-1_amd64.tar.gz.hash
      gpg: Signature made using RSA key ID A8B2EF4287819B03D3516CCA76231C20425E9772
      gpg: Good signature from "0"

2. Recalculate the image hash and make sure it matches your choice of hash below.

    $ sha256sum debian-10-turnkey-processmaker_16.1-1_amd64.tar.gz
      b6030d41a888960b8641c1addc4240b65648751031283d4e2428bd5728432fc4  debian-10-turnkey-processmaker_16.1-1_amd64.tar.gz

    $ sha512sum debian-10-turnkey-processmaker_16.1-1_amd64.tar.gz
      bce1ef0f204d363317d10b7d0b5b6e3424f178ffda662b476c79a17b74c2807afbd2e79d9e23cbbfbfdfc60b051aaff2f043c6e2aaa93fafc5177a6ccea3b41f  debian-10-turnkey-processmaker_16.1-1_amd64.tar.gz

   Note, you can compare hashes automatically::

    $ sha256sum -c debian-10-turnkey-processmaker_16.1-1_amd64.tar.gz.hash
      debian-10-turnkey-processmaker_16.1-1_amd64.tar.gz: OK

    $ sha512sum -c debian-10-turnkey-processmaker_16.1-1_amd64.tar.gz.hash
      debian-10-turnkey-processmaker_16.1-1_amd64.tar.gz: OK

    Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted.

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEE8ZCki1TcVrLH8k3LrF6wBJPlvBwFAmBh2NUACgkQrF6wBJPl
vBwt+hAAr1gv0I47jKacW3D2FGC4L0t4V4csawiJIeTAMMVn1oifUQk0QqcYFda5
521pAYtkAabSekKHm4dcGcUGPJw/jxDkW8o4PODtMTaTLj98MYjUVGuhHyCBeo1J
FIVdDpjSWjAS2JtLheXvDzNC91S0I5bsD86gu1m5E14+pacJqbjb8NqxzwllXaN8
e1pI8wi0RowquJuxWjUCutS5ATvgGJuOpsGL0cU94jEgeeLVoA7xBF6o+KGzibfu
1VlwPLWQ87GSQEJLnEcOc/E4jMkeOl2XH3KVS3eqdfemhDqXJwpjg7183DWPRkGV
bYEOplibCeHmpGoi7/zo+XeSL9nFofitXJHA6H5rWHz9/qnc7Nxu23kSOSO0pJDF
2qCtgxpRW/LFdX4IwNgO1dKcgKgJYeawkQpa0AiO0ldi4SKqK4NVdsWBcQtog8Y6
O4jws0RiMuu6S2qQChT8jwsH7zfF9sZDIRZbWdebgR2j8vIubSxSbmTQuPMqiMPQ
1fsaTncJ2nht64zx6Mf6UrVyJC9NsDb27/vSMRWkqvjq6vWAOsMn48Yti40bSDk1
aPqgA+cUXUxjVNsLhA0zUUQ8dUgLzfEFV1PFPGatbCKj1bFoA8QX89Xl8sSsVNj8
IQa+saohrzd2Q750UbxJFAKAPm040Fr8hqQ5aJjK9oITCujnjcY=
=MzO/
-----END PGP SIGNATURE-----