-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transmit or tampered with,
perform the following two steps to cryptographically verify image integrity:

1. Verify the authenticity of this file by checking that it is signed with our
   GPG release key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/master/keys/tkl-buster-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint release-buster-images@turnkeylinux.org
      pub   rsa4096 2020-02-05 [SC] [expires: 2040-01-31]
            A8B2 EF42 8781 9B03 D351  6CCA 7623 1C20 425E 9772
      uid           [ unknown] TurnKey GNU/Linux Buster Images (GPG signing key for TurnKey Linux Buster Images) <release-buster-images@turnkeylinux.org>
      sub   rsa4096 2020-02-05 [S] [expires: 2040-01-31]
      
    $ gpg --verify turnkey-openldap-16.1-buster-amd64.iso.hash
      gpg: Signature made using RSA key ID A8B2EF4287819B03D3516CCA76231C20425E9772
      gpg: Good signature from "0"

2. Recalculate the image hash and make sure it matches your choice of hash below.

    $ sha256sum turnkey-openldap-16.1-buster-amd64.iso
      d2b59607f3d970413b10964706d369da0078bb5e7d246c8e98eead759a463e6a  turnkey-openldap-16.1-buster-amd64.iso

    $ sha512sum turnkey-openldap-16.1-buster-amd64.iso
      117e383d9c021fe6d937b50586995d325ae74085fad07dd9ef5b24f1e89d03a71528c578bff82b13e80ffcba14fda074bf2e5a8f2bb33e5fa6f207d0775d4f3e  turnkey-openldap-16.1-buster-amd64.iso

   Note, you can compare hashes automatically::

    $ sha256sum -c turnkey-openldap-16.1-buster-amd64.iso.hash
      turnkey-openldap-16.1-buster-amd64.iso: OK

    $ sha512sum -c turnkey-openldap-16.1-buster-amd64.iso.hash
      turnkey-openldap-16.1-buster-amd64.iso: OK

    Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted.

-----BEGIN PGP SIGNATURE-----
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=GQvZ
-----END PGP SIGNATURE-----