-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transmit or tampered with,
perform the following two steps to cryptographically verify image integrity:

1. Verify the authenticity of this file by checking that it is signed with our
   GPG release key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/master/keys/tkl-buster-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint release-buster-images@turnkeylinux.org
      pub   rsa4096 2020-02-05 [SC] [expires: 2040-01-31]
            A8B2 EF42 8781 9B03 D351  6CCA 7623 1C20 425E 9772
      uid           [ unknown] TurnKey GNU/Linux Buster Images (GPG signing key for TurnKey Linux Buster Images) <release-buster-images@turnkeylinux.org>
      sub   rsa4096 2020-02-05 [S] [expires: 2040-01-31]
      
    $ gpg --verify turnkey-mibew-16.2-buster-amd64.ova.hash
      gpg: Signature made using RSA key ID A8B2EF4287819B03D3516CCA76231C20425E9772
      gpg: Good signature from "0"

2. Recalculate the image hash and make sure it matches your choice of hash below.

    $ sha256sum turnkey-mibew-16.2-buster-amd64.ova
      331986c2a857dd54b01af588492d4170af9e7959a5632a55a9b89f4b62fe34dc  turnkey-mibew-16.2-buster-amd64.ova

    $ sha512sum turnkey-mibew-16.2-buster-amd64.ova
      4a99c543f848b7fd7e809cd2ed17766497fedc55478ba0d36c843bf7f86ee71ae94f99e697917c2b6ee45a2944a8c7100846e54b39f0d1629b6045c60431ac76  turnkey-mibew-16.2-buster-amd64.ova

   Note, you can compare hashes automatically::

    $ sha256sum -c turnkey-mibew-16.2-buster-amd64.ova.hash
      turnkey-mibew-16.2-buster-amd64.ova: OK

    $ sha512sum -c turnkey-mibew-16.2-buster-amd64.ova.hash
      turnkey-mibew-16.2-buster-amd64.ova: OK

    Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted.

-----BEGIN PGP SIGNATURE-----
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=YWc0
-----END PGP SIGNATURE-----