-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl | gpg --import $ gpg --list-keys --with-fingerprint release-bullseye-images@turnkeylinux.org pub rsa4096 2021-08-04 [SC] [expires: 2041-07-30] E10F 6567 0C8E BE42 ED0C 3A49 CCA5 1174 468F 9073 uid [ unknown] TurnKey GNU/Linux Bullseye Images (GPG signing key for TurnKey Linux Bullseye Images) sub rsa4096 2021-08-04 [S] [expires: 2041-07-30] $ gpg --verify turnkey-mayan-edms-17.1-bullseye-amd64.iso.hash gpg: Signature made using RSA key ID E10F65670C8EBE42ED0C3A49CCA51174468F9073 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-mayan-edms-17.1-bullseye-amd64.iso 8eebc8f7c41be017c2bd96da04b522872d9e07bd2b0694aa9c2065dff3588782 turnkey-mayan-edms-17.1-bullseye-amd64.iso $ sha512sum turnkey-mayan-edms-17.1-bullseye-amd64.iso f0079f23d1feeba34c82021ac98d462c96a46c40148795e589244f6ba082e27db5b62db2235f79e46e5eac52ad58b0278ba217daa6e021af4d43ac2201504d0e turnkey-mayan-edms-17.1-bullseye-amd64.iso Note, you can compare hashes automatically:: $ sha256sum -c turnkey-mayan-edms-17.1-bullseye-amd64.iso.hash turnkey-mayan-edms-17.1-bullseye-amd64.iso: OK $ sha512sum -c turnkey-mayan-edms-17.1-bullseye-amd64.iso.hash turnkey-mayan-edms-17.1-bullseye-amd64.iso: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE3YP+u+JWuSop/BuCHkh6RjHW/rYFAmNx+zUACgkQHkh6RjHW /raSsQ/9FWDxBu6gsJxKvtPygmccFa2At3suisAus+lNsYOxfgzkLVMtPqcbcHHa cOZbgVhbWfG4LjB0k7hrchxTeh3CBisqYW7AgfvrGt7Ps+AI8a9f1ocwgAH0w9Gd EIgF3nxeY6ZeXOau+HdPLIDofo5w97p7mjzHV2kwJ+XTvvzyiKA5zPBu/PBuEkse 0BRKsVe9+oEEhsyjy2hYSfS1Hi6y85s7Fwyuainlg2cecXK8DpJPc2S3fDRAHB+z 2U05V2BbLA77nr9r9YM8yHEWmJAFyReV4pRQUWwfzZWsked/1t/WMlOjeaHfpl77 MbDOmz++y3UdFXQKvMBNLpMVX4xG0q7Thc8Co2fN641fV5LuDiw0je5Y6auzneuy 0YFGOJQyr6GQXBWLXU2KonGqyhYr4K988F/cf7tSrYy1UEQG3QI2Ix1YlAYRbEyQ tm4yOkJNEXbg70fjeXMvb9w8vs+SpCcfQflWkiGqTQa2vPLlnYnc8RSQGAqNuR/e trD4DGs32bzCdc1QEo0sORqVAh4NJfNjUtPlTPfKTLSGkXgMHcrgpnTf2/KueCUR DLRAHRny8mQ0yfqZ6haSjghiTsFK9Zt/85VlXBdC4/Q/iPu9TdUjpgReFL6jsS3y HHwUgB0iUVQDEizsGPlGT7HrkTwUj/bvWSovCroowJogyCbz9xo= =f4iD -----END PGP SIGNATURE-----