-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transmit or tampered with,
perform the following two steps to cryptographically verify image integrity:

1. Verify the authenticity of this file by checking that it is signed with our
   GPG release key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/master/keys/tkl-buster-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint release-buster-images@turnkeylinux.org
      pub   rsa4096 2020-02-05 [SC] [expires: 2040-01-31]
            A8B2 EF42 8781 9B03 D351  6CCA 7623 1C20 425E 9772
      uid           [ unknown] TurnKey GNU/Linux Buster Images (GPG signing key for TurnKey Linux Buster Images) <release-buster-images@turnkeylinux.org>
      sub   rsa4096 2020-02-05 [S] [expires: 2040-01-31]
      
    $ gpg --verify turnkey-mibew-16.0-buster-amd64.iso.hash
      gpg: Signature made using RSA key ID A8B2EF4287819B03D3516CCA76231C20425E9772
      gpg: Good signature from "0"

2. Recalculate the image hash and make sure it matches your choice of hash below.

    $ sha256sum turnkey-mibew-16.0-buster-amd64.iso
      9633bc3f67c034659442b2b5df1035e2ac6ecfe24dd60256a062a89f86aa77b5  turnkey-mibew-16.0-buster-amd64.iso

    $ sha512sum turnkey-mibew-16.0-buster-amd64.iso
      31968bec99409f93890c5ae46b78f869a6105a3e637f6fe595b511545cc1ac20297fb7c57b4b376813bf23c6dd32eef41cc340e81709b673af7b9a524bd91452  turnkey-mibew-16.0-buster-amd64.iso

   Note, you can compare hashes automatically::

    $ sha256sum -c turnkey-mibew-16.0-buster-amd64.iso.hash
      turnkey-mibew-16.0-buster-amd64.iso: OK

    $ sha512sum -c turnkey-mibew-16.0-buster-amd64.iso.hash
      turnkey-mibew-16.0-buster-amd64.iso: OK

    Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted.

-----BEGIN PGP SIGNATURE-----
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=Rat1
-----END PGP SIGNATURE-----