-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transmit or tampered with,
perform the following two steps to cryptographically verify image integrity:

1. Verify the authenticity of this file by checking that it is signed with our
   GPG release key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/master/keys/tkl-buster-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint release-buster-images@turnkeylinux.org
      pub   rsa4096 2020-02-05 [SC] [expires: 2040-01-31]
            A8B2 EF42 8781 9B03 D351  6CCA 7623 1C20 425E 9772
      uid           [ unknown] TurnKey GNU/Linux Buster Images (GPG signing key for TurnKey Linux Buster Images) <release-buster-images@turnkeylinux.org>
      sub   rsa4096 2020-02-05 [S] [expires: 2040-01-31]
      
    $ gpg --verify turnkey-torrentserver-16.1-buster-amd64.ova.hash
      gpg: Signature made using RSA key ID A8B2EF4287819B03D3516CCA76231C20425E9772
      gpg: Good signature from "0"

2. Recalculate the image hash and make sure it matches your choice of hash below.

    $ sha256sum turnkey-torrentserver-16.1-buster-amd64.ova
      4dc75b795c9778598a247aa892e312b52f4e6f3d110f7ae7f6720ff3849260ed  turnkey-torrentserver-16.1-buster-amd64.ova

    $ sha512sum turnkey-torrentserver-16.1-buster-amd64.ova
      3c014b4dd714b6eb259c3245d92d668eca48b2fa8b61ab31d08143efb6b0f25a73fb0539dfa39850894e3ff0cfe6396fbb1ea3b27269028e513a14d576237e3b  turnkey-torrentserver-16.1-buster-amd64.ova

   Note, you can compare hashes automatically::

    $ sha256sum -c turnkey-torrentserver-16.1-buster-amd64.ova.hash
      turnkey-torrentserver-16.1-buster-amd64.ova: OK

    $ sha512sum -c turnkey-torrentserver-16.1-buster-amd64.ova.hash
      turnkey-torrentserver-16.1-buster-amd64.ova: OK

    Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted.

-----BEGIN PGP SIGNATURE-----
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=kXVo
-----END PGP SIGNATURE-----