-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transmit or tampered with,
perform the following two steps to cryptographically verify image integrity:

1. Verify the authenticity of this file by checking that it is signed with our
   GPG release key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/master/keys/tkl-buster-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint release-buster-images@turnkeylinux.org
      pub   rsa4096 2020-02-05 [SC] [expires: 2040-01-31]
            A8B2 EF42 8781 9B03 D351  6CCA 7623 1C20 425E 9772
      uid           [ unknown] TurnKey GNU/Linux Buster Images (GPG signing key for TurnKey Linux Buster Images) <release-buster-images@turnkeylinux.org>
      sub   rsa4096 2020-02-05 [S] [expires: 2040-01-31]
      
    $ gpg --verify turnkey-magento-16.0-buster-amd64-vmdk.zip.hash
      gpg: Signature made using RSA key ID A8B2EF4287819B03D3516CCA76231C20425E9772
      gpg: Good signature from "0"

2. Recalculate the image hash and make sure it matches your choice of hash below.

    $ sha256sum turnkey-magento-16.0-buster-amd64-vmdk.zip
      4c6a5e8ca2fac4552ffb062a782f99b1591d6df99d72d94b5082bb44498ececf  turnkey-magento-16.0-buster-amd64-vmdk.zip

    $ sha512sum turnkey-magento-16.0-buster-amd64-vmdk.zip
      c670e445fa80738aec40c3faf4ae3725db852541bfd54d327684e9a5e71406765378d629839b13f1440a6a6734841b96a5592603b8f69158fa7bbb57418459c9  turnkey-magento-16.0-buster-amd64-vmdk.zip

   Note, you can compare hashes automatically::

    $ sha256sum -c turnkey-magento-16.0-buster-amd64-vmdk.zip.hash
      turnkey-magento-16.0-buster-amd64-vmdk.zip: OK

    $ sha512sum -c turnkey-magento-16.0-buster-amd64-vmdk.zip.hash
      turnkey-magento-16.0-buster-amd64-vmdk.zip: OK

    Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted.

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEE8ZCki1TcVrLH8k3LrF6wBJPlvBwFAl9LYOkACgkQrF6wBJPl
vBwPrhAAttE1/tw37a6dgmT/9qwEnzQoM5QT8u00g80OTvVx/Fr4dZpFFEENiJQJ
T5zgmSFhHYYQKKeqkruczWtY7Yf254w6MxTglQmhyB1MsB5CMc3Wk8+nVwoVKyOw
E5wch1PBOic7nwmvjjduwCqt2Hvw33ulMlmx14Vz0cmncuJ1b9MwACf/vzoOeH4G
lTvrn9y98s9cgEVcCqRE/049Z9UEiasaLSVLdwfP5TLu6Ry4/XisSZ1WGCsxRtHI
4cxePpmHhwYPAMJh6zNPfiy8BWZ54luHhHEA2i/31qOUFO+5AXBiSa5PTPURWbEx
asFg6Nj5CD0rHIkdUq3GEQHcmWcUVUbViWm+0tQGGO/VqSD5PX4uNlzgcUn1yFZj
O2ZPVoS5z/Ku2gAYnu84jh7SfdKP+DAmsegP9TvPhuEbpz6kmu20xCA1bjP0bodK
UJXI/gV0b4ctgaF82BVlXxGlMN3paWMavJfUGUHyhYAtZtxux1V2He6ZfvZaNL1j
iOb7mF/vz8oAHnTMFttADHyy4LgG4WCyDqtB0/AgSgM9FA7d5pnTWNPzA7vBf8Ny
iwDO9W8qWDNETFPFqyS5h0qV71uZGjI1L2zm1vOTYsR/USkQTKQVkw3HRmFoyr0H
dMT49YNQSrBwCWWtidEh/FGDcp/x6NA71HiO30HN9vChmEkfBQ8=
=J40d
-----END PGP SIGNATURE-----