-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transmit or tampered with,
perform the following two steps to cryptographically verify image integrity:

1. Verify the authenticity of this file by checking that it is signed with our
   GPG release key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/master/keys/tkl-buster-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint release-buster-images@turnkeylinux.org
      pub   rsa4096 2020-02-05 [SC] [expires: 2040-01-31]
            A8B2 EF42 8781 9B03 D351  6CCA 7623 1C20 425E 9772
      uid           [ unknown] TurnKey GNU/Linux Buster Images (GPG signing key for TurnKey Linux Buster Images) <release-buster-images@turnkeylinux.org>
      sub   rsa4096 2020-02-05 [S] [expires: 2040-01-31]
      
    $ gpg --verify turnkey-symfony-16.1-buster-amd64-vmdk.zip.hash
      gpg: Signature made using RSA key ID A8B2EF4287819B03D3516CCA76231C20425E9772
      gpg: Good signature from "0"

2. Recalculate the image hash and make sure it matches your choice of hash below.

    $ sha256sum turnkey-symfony-16.1-buster-amd64-vmdk.zip
      1f310e372c993309e784b5cd1571edfcdde166e39963c8523c3725bd1ada3434  turnkey-symfony-16.1-buster-amd64-vmdk.zip

    $ sha512sum turnkey-symfony-16.1-buster-amd64-vmdk.zip
      f7633d93df905db003fcdb51cd18738471b93ef7ed6660e135fa15c65954374f79322c409fb8e6db9e36a989bd7e0a1eadad1f4bfb993209e881290cae1975b7  turnkey-symfony-16.1-buster-amd64-vmdk.zip

   Note, you can compare hashes automatically::

    $ sha256sum -c turnkey-symfony-16.1-buster-amd64-vmdk.zip.hash
      turnkey-symfony-16.1-buster-amd64-vmdk.zip: OK

    $ sha512sum -c turnkey-symfony-16.1-buster-amd64-vmdk.zip.hash
      turnkey-symfony-16.1-buster-amd64-vmdk.zip: OK

    Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted.

-----BEGIN PGP SIGNATURE-----
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=Ddkk
-----END PGP SIGNATURE-----