-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl | gpg --import $ gpg --list-keys --with-fingerprint release-bullseye-images@turnkeylinux.org pub rsa4096 2021-08-04 [SC] [expires: 2041-07-30] E10F 6567 0C8E BE42 ED0C 3A49 CCA5 1174 468F 9073 uid [ unknown] TurnKey GNU/Linux Bullseye Images (GPG signing key for TurnKey Linux Bullseye Images) sub rsa4096 2021-08-04 [S] [expires: 2041-07-30] $ gpg --verify turnkey-mantis-17.0-bullseye-amd64.iso.hash gpg: Signature made using RSA key ID E10F65670C8EBE42ED0C3A49CCA51174468F9073 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-mantis-17.0-bullseye-amd64.iso aae7dd336bcb0bba355acc40ed0f250580bcd328acc6560de7e3660237c221f1 turnkey-mantis-17.0-bullseye-amd64.iso $ sha512sum turnkey-mantis-17.0-bullseye-amd64.iso 489fa6f509f35f099fae430cfed2eb6f84167c802d00c7322080b8ce94efe03ac516e37afe313f221bb691efb3a83389328b05fcf2da1335f961ba75c4cf9ae7 turnkey-mantis-17.0-bullseye-amd64.iso Note, you can compare hashes automatically:: $ sha256sum -c turnkey-mantis-17.0-bullseye-amd64.iso.hash turnkey-mantis-17.0-bullseye-amd64.iso: OK $ sha512sum -c turnkey-mantis-17.0-bullseye-amd64.iso.hash turnkey-mantis-17.0-bullseye-amd64.iso: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE3YP+u+JWuSop/BuCHkh6RjHW/rYFAmJw05cACgkQHkh6RjHW /rbIFxAAjVKALex+VjJiABNUO67vZqPwzBnSDyH4+xksKVercWk1q0G1bJBEK5ZM wJZVNfAVGuXjcu4TEXtNBUc00ggUk0lV/OWLhlW6tZlj3fXdkKDStIWxlnJFgmbt Al24W+9jMa6IVVqKxtRZmGAtMe+utd44ZsV35FDofzd3mlnSeHxudLDz8K7MvCPs sa9hQguERMaf24lIqaopf+vtH2+pWYD6DMq/d3OsVzGxL3lxf04RdQ1R282LHfyC pAHP4eFcTNhy0RFQd9Lh6GU6nslJ9l1muFt0/K801EgUUbCp/UZG4BX2yo1FmkTA fXZUZYnALL1MsloO2gQKTw3cyIOeoUHcKTaj6i9GCg23IyujJg4HHKFu4vlDY3Pm Ur3P9e3IlrtjQF+exWXVQBGdTMIeLG92XBtGJWzSOiZiqoWjNI+NyP2+MuPXOj/J lqKN6UL4ArysX0q1JgugCXRNsSAalUceTox91udLJcH6Ej0nXKNlRIpaILGr0ofR mWIyDxMjb9x3y7D7RWuS+vTF/iqXv3fzzAMZiE7YbQOGXXb/wwfPovtsJ8DqXzRc Fqjbcuug7CJ8f1W8ZaUulrH+5Tz69x0AuQtFH5TNvY4Y6fliRHRGw88ZuBNbgkFD 1dTAsJtEXbP8AF2ja4qwvCAdfp1IPLhcH4d4E9Udd8wWtylUZEc= =0tBA -----END PGP SIGNATURE-----