-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transmit or tampered with,
perform the following two steps to cryptographically verify image integrity:

1. Verify the authenticity of this file by checking that it is signed with our
   GPG release key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/master/keys/tkl-buster-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint release-buster-images@turnkeylinux.org
      pub   rsa4096 2020-02-05 [SC] [expires: 2040-01-31]
            A8B2 EF42 8781 9B03 D351  6CCA 7623 1C20 425E 9772
      uid           [ unknown] TurnKey GNU/Linux Buster Images (GPG signing key for TurnKey Linux Buster Images) <release-buster-images@turnkeylinux.org>
      sub   rsa4096 2020-02-05 [S] [expires: 2040-01-31]
      
    $ gpg --verify turnkey-avideo-16.0-buster-amd64-vmdk.zip.hash
      gpg: Signature made using RSA key ID A8B2EF4287819B03D3516CCA76231C20425E9772
      gpg: Good signature from "0"

2. Recalculate the image hash and make sure it matches your choice of hash below.

    $ sha256sum turnkey-avideo-16.0-buster-amd64-vmdk.zip
      cc19899a1a3e71e4c34870460122bd7e093db08eea9a6f66e309b3b41b156053  turnkey-avideo-16.0-buster-amd64-vmdk.zip

    $ sha512sum turnkey-avideo-16.0-buster-amd64-vmdk.zip
      8500d5214b34dc117f32994aca7f6573006425ab05e1e54c4ada5e45a08b08c903df78d48358b7a7b3beddf26eec285f6a283195da8124dbf168b971cfbe154b  turnkey-avideo-16.0-buster-amd64-vmdk.zip

   Note, you can compare hashes automatically::

    $ sha256sum -c turnkey-avideo-16.0-buster-amd64-vmdk.zip.hash
      turnkey-avideo-16.0-buster-amd64-vmdk.zip: OK

    $ sha512sum -c turnkey-avideo-16.0-buster-amd64-vmdk.zip.hash
      turnkey-avideo-16.0-buster-amd64-vmdk.zip: OK

    Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted.

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEE8ZCki1TcVrLH8k3LrF6wBJPlvBwFAl7vE5MACgkQrF6wBJPl
vBzqag/+PPr6vnND8X0ymQRLD/BOqw7cZe4fH7tr1RqL9IX3TzNCivB4bzGCQ9SS
jjXpo8Zpqe2nbZ0qWC1JTAPQQk0lZOnI1efPIGQMY3YbiNh7g0NAOUstlfQr0z6Y
7TFOzCJnjQEDpK0plWUsLl6pmPhOwROOWBXQmP7z8XUPhzajMdrYFPtQ+uc0X5yt
5ID/0JlnGRnqQ8+kAIvEyPtTaTrg0yo3ie+bDEaibEn2rHrLOgUQOTZRHHFGVjMh
8dOwTTA0qB0p/9RkW9DUaqzfnlLWZM9HqQkLecuXG+li4MZ6O3g1exNIUnwrRK8V
Ocv5K7Qp5jjbNcWN+vw+Ti+tpMm2XvQF76yVM6W6Oh+3L7kTPPQXuMsrXAHe6+hk
QAEyJ2YyXMjGuDd3pGjQAXO+gbXNHupwfA9v5oDkyh1rUKIJo/b4Tzw9rQ4OVSBn
3+qDW7AIYqooGG0v9GbyeeWpXkQqOIHmNZX49+7/IEt5IvTH9dxZqLNd70cGKS9K
7lwWG0XPMFKcRnpcSbkKeHVc8fPHHcUFtVYG+9GotPqBQ8HI868DStrjC4TjQ2KR
cLT5LF8XswMPmYn/2Gyn0n3uJZRRvEdF1CfoqaE9IfLfwBedDuJu+d3IYyFKJjMo
nb3oqo5aODQWJyC+jYuZp5PDpmcL8/Im8+luXMqAuKXR+xCcpUU=
=Cjui
-----END PGP SIGNATURE-----