-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl | gpg --import $ gpg --list-keys --with-fingerprint release-bullseye-images@turnkeylinux.org pub rsa4096 2021-08-04 [SC] [expires: 2041-07-30] E10F 6567 0C8E BE42 ED0C 3A49 CCA5 1174 468F 9073 uid [ unknown] TurnKey GNU/Linux Bullseye Images (GPG signing key for TurnKey Linux Bullseye Images) sub rsa4096 2021-08-04 [S] [expires: 2041-07-30] $ gpg --verify turnkey-invoice-ninja-17.2-bullseye-amd64.iso.hash gpg: Signature made using RSA key ID E10F65670C8EBE42ED0C3A49CCA51174468F9073 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-invoice-ninja-17.2-bullseye-amd64.iso 7008ba85bc9f8fd6c9538619fff8d8bb5e26a105d1483969520827b07aea0dab turnkey-invoice-ninja-17.2-bullseye-amd64.iso $ sha512sum turnkey-invoice-ninja-17.2-bullseye-amd64.iso b052953af05e8f8112c5b1174deeb3712592474e20342a3b66d507c3180bdc12149dc8ee318c610711f38e4fec6f46e381f3267c0b5754916ad3e9b5bb4b2e46 turnkey-invoice-ninja-17.2-bullseye-amd64.iso Note, you can compare hashes automatically:: $ sha256sum -c turnkey-invoice-ninja-17.2-bullseye-amd64.iso.hash turnkey-invoice-ninja-17.2-bullseye-amd64.iso: OK $ sha512sum -c turnkey-invoice-ninja-17.2-bullseye-amd64.iso.hash turnkey-invoice-ninja-17.2-bullseye-amd64.iso: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE3YP+u+JWuSop/BuCHkh6RjHW/rYFAmOccf4ACgkQHkh6RjHW /rbCQg//bVZsxG0HZ+K3TW775zAJsnD0+duOsYRLVtzqExRlvHB7IufYDb2W67rv 6nK+c/ueXgrojD0/4T13yp09pNvRG9fHP5Ly73YVqc00qXSlJ4GnL9vcqfHXpVZA KtCQ8HkGHC2QxjIe/M/C01BC5+mhhdhDW3L7CLTfSW2uzA96EZbZikn3S7cAbFnl oRNYgzHQq1EaRMK0ZKePyPBrSJzEzjlMQkHDJ0+Pihxzeh//I+qGTERijGyyPFbR 1l1zX4ahUznVSem6lV9zzfwpF7f0iPWp6jUi2+NKmbpCefr/AU7EngKWug/V6pN5 r7J51FUgV8omn+DloevtjoF2VKvriNVzfrpjK/E71j2/as+1sMCyJj0xDdzVq9ri rw+TFaQhMUckdwK8+cckxd08RGe8pPF7tSIsr6RCghhPugrpVw/F2SAtPg15ahnZ CZVfTUUd2iN1pDxl2B3InCNe9pLw09qQna6BvJ/c5Ok8GW3XMdDAjv6pORgsO/jI Hp6lm/h8EvuepDnw+NIIjThUbwPvZcFwDv5bGtUjT8TF/saI48XdpdpkqRveEG1h XXi2DSVjkIRxHRz4wQ+NmgB0TWA99U8+dEaWLLhCx5jR0LCNsmjWOOq4QgHk8ybW ytZsoQhuezxu55OXWhtt7LNATXmx0VYoqP5pZdUKnlJLUL9Wr5o= =1sRl -----END PGP SIGNATURE-----