-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

To ensure the image has not been corrupted in transmit or tampered with,
perform the following two steps to cryptographically verify image integrity:

1. Verify the authenticity of this file by checking that it is signed with our
   GPG release key:

    $ curl https://keybase.io/turnkeylinux/pgp_keys.asc | gpg --import
    $ gpg --list-keys --with-fingerprint release@turnkeylinux.com
      pub   2048R/A16EB94D 2008-08-15 [expires: 2023-08-12]
            Key fingerprint = 694C FF26 795A 29BA E07B  4EB5 85C2 5E95 A16E B94D
      uid   Turnkey Linux Release Key <release@turnkeylinux.com>

    $ gpg --verify debian-9-turnkey-prestashop_15.0-1_amd64.tar.gz.hash
      gpg: Signature made using RSA key ID A16EB94D
      gpg: Good signature from "Turnkey Linux Release Key <release@turnkeylinux.com>"

    For extra credit you can validate the key's authenticity at:

      https://keybase.io/turnkeylinux

2. Recalculate the image hash and make sure it matches your choice of hash below.

    $ sha256sum debian-9-turnkey-prestashop_15.0-1_amd64.tar.gz
      6c0949f09b575071852b727b351efc49e812709f476ca6a0c054032433783d5d  debian-9-turnkey-prestashop_15.0-1_amd64.tar.gz

    $ sha512sum debian-9-turnkey-prestashop_15.0-1_amd64.tar.gz
      9207aefefebab736066129ff230753a58058642301a0e9c60e065143bc041cad5c814a4d3b8ad4c09c3715428e20ea0df6e94f18bdf7f19fe4e7e0959d920e59  debian-9-turnkey-prestashop_15.0-1_amd64.tar.gz

   Note, you can compare hashes automatically::

    $ sha256sum -c debian-9-turnkey-prestashop_15.0-1_amd64.tar.gz.hash
      debian-9-turnkey-prestashop_15.0-1_amd64.tar.gz: OK

    $ sha512sum -c debian-9-turnkey-prestashop_15.0-1_amd64.tar.gz.hash
      debian-9-turnkey-prestashop_15.0-1_amd64.tar.gz: OK

-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEaUz/JnlaKbrge061hcJelaFuuU0FAluM+9kACgkQhcJelaFu
uU2svQgAw1YprMASTRfLmJU1w4IWKv4bj45zOxie5C3Ds1o3JizZ4d7tQUxaVSU9
6XxAyb8+jIRiAvD9ZPR1CnZLfYzeHKDm9j6VqLc5OS/0z53S0z9s6llL7pLnT542
o1KZsxq/zEg5k6YSy6otI5nF8Xz7TY/edQtmwn7aGQHIQzRAeSd7WjnkSqy5HidF
8KX4KwRu3kGY2SaIHH5gGThLjDGFJl69/cMeLTTluT8GJ+Q2+r+rvFw86svT4QBI
YOc/vlV1oaHr9mGIH1T1RokkHMcBDhUWSC0S6vTE2KyOOburASIXM+BZDdQtaktP
eb9+82vyPcXQbDDBGt9U2IMl/lL4ew==
=JKRv
-----END PGP SIGNATURE-----