-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transmit or tampered with,
perform the following two steps to cryptographically verify image integrity:

1. Verify the authenticity of this file by checking that it is signed with our
   GPG release key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/master/keys/tkl-buster-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint release-buster-images@turnkeylinux.org
      pub   rsa4096 2020-02-05 [SC] [expires: 2040-01-31]
            A8B2 EF42 8781 9B03 D351  6CCA 7623 1C20 425E 9772
      uid           [ unknown] TurnKey GNU/Linux Buster Images (GPG signing key for TurnKey Linux Buster Images) <release-buster-images@turnkeylinux.org>
      sub   rsa4096 2020-02-05 [S] [expires: 2040-01-31]
      
    $ gpg --verify turnkey-redmine-16.0-buster-amd64-vmdk.zip.hash
      gpg: Signature made using RSA key ID A8B2EF4287819B03D3516CCA76231C20425E9772
      gpg: Good signature from "0"

2. Recalculate the image hash and make sure it matches your choice of hash below.

    $ sha256sum turnkey-redmine-16.0-buster-amd64-vmdk.zip
      7497e89d3825964748e7a31d104281b21309db43fca511a93643750ad6ab120c  turnkey-redmine-16.0-buster-amd64-vmdk.zip

    $ sha512sum turnkey-redmine-16.0-buster-amd64-vmdk.zip
      74b8e132c3d081cd9460089deb1b69ef99ddd58ced6fe1a80450d42612ffa13f3de413de7d7ce74fd77f84df380fbd8280e8a967dd91f4a7da9a37edcb6d0eee  turnkey-redmine-16.0-buster-amd64-vmdk.zip

   Note, you can compare hashes automatically::

    $ sha256sum -c turnkey-redmine-16.0-buster-amd64-vmdk.zip.hash
      turnkey-redmine-16.0-buster-amd64-vmdk.zip: OK

    $ sha512sum -c turnkey-redmine-16.0-buster-amd64-vmdk.zip.hash
      turnkey-redmine-16.0-buster-amd64-vmdk.zip: OK

    Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted.

-----BEGIN PGP SIGNATURE-----
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=+wOg
-----END PGP SIGNATURE-----