-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transmit or tampered with,
perform the following two steps to cryptographically verify image integrity:

1. Verify the authenticity of this file by checking that it is signed with our
   GPG release key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/master/keys/tkl-buster-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint release-buster-images@turnkeylinux.org
      pub   rsa4096 2020-02-05 [SC] [expires: 2040-01-31]
            A8B2 EF42 8781 9B03 D351  6CCA 7623 1C20 425E 9772
      uid           [ unknown] TurnKey GNU/Linux Buster Images (GPG signing key for TurnKey Linux Buster Images) <release-buster-images@turnkeylinux.org>
      sub   rsa4096 2020-02-05 [S] [expires: 2040-01-31]
      
    $ gpg --verify turnkey-mongodb-16.0-buster-amd64-vmdk.zip.hash
      gpg: Signature made using RSA key ID A8B2EF4287819B03D3516CCA76231C20425E9772
      gpg: Good signature from "0"

2. Recalculate the image hash and make sure it matches your choice of hash below.

    $ sha256sum turnkey-mongodb-16.0-buster-amd64-vmdk.zip
      1d761fb7355c530e5081bf5c0b6f8c8e21d133c043d578a20f372f6486123ea3  turnkey-mongodb-16.0-buster-amd64-vmdk.zip

    $ sha512sum turnkey-mongodb-16.0-buster-amd64-vmdk.zip
      a4c2b6ebbe4cd38fb7b377a6f3a07079d701028dcc126b52b11f197be1637610c9cab3290bca5a4213edb9a2ce565744654e27843445c86abc3031307470ae0d  turnkey-mongodb-16.0-buster-amd64-vmdk.zip

   Note, you can compare hashes automatically::

    $ sha256sum -c turnkey-mongodb-16.0-buster-amd64-vmdk.zip.hash
      turnkey-mongodb-16.0-buster-amd64-vmdk.zip: OK

    $ sha512sum -c turnkey-mongodb-16.0-buster-amd64-vmdk.zip.hash
      turnkey-mongodb-16.0-buster-amd64-vmdk.zip: OK

    Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted.

-----BEGIN PGP SIGNATURE-----
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=R7/8
-----END PGP SIGNATURE-----