-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transmit or tampered with,
perform the following two steps to cryptographically verify image integrity:

1. Verify the authenticity of this file by checking that it is signed with our
   GPG release key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/master/keys/tkl-buster-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint release-buster-images@turnkeylinux.org
      pub   rsa4096 2020-02-05 [SC] [expires: 2040-01-31]
            A8B2 EF42 8781 9B03 D351  6CCA 7623 1C20 425E 9772
      uid           [ unknown] TurnKey GNU/Linux Buster Images (GPG signing key for TurnKey Linux Buster Images) <release-buster-images@turnkeylinux.org>
      sub   rsa4096 2020-02-05 [S] [expires: 2040-01-31]
      
    $ gpg --verify turnkey-rails-16.0-buster-amd64.iso.hash
      gpg: Signature made using RSA key ID A8B2EF4287819B03D3516CCA76231C20425E9772
      gpg: Good signature from "0"

2. Recalculate the image hash and make sure it matches your choice of hash below.

    $ sha256sum turnkey-rails-16.0-buster-amd64.iso
      e98d184948f69bd36c888b5fb6f3ca1749c86261c93199e2e393c582a88fb5dc  turnkey-rails-16.0-buster-amd64.iso

    $ sha512sum turnkey-rails-16.0-buster-amd64.iso
      8e8e4c2efad1f6272e63e46a79bbb7f7d79a541be85aeef39194570caed343979617aae6c06aad7e9b7fcac8ad6cf677344b4363cda666795ef20696245273d4  turnkey-rails-16.0-buster-amd64.iso

   Note, you can compare hashes automatically::

    $ sha256sum -c turnkey-rails-16.0-buster-amd64.iso.hash
      turnkey-rails-16.0-buster-amd64.iso: OK

    $ sha512sum -c turnkey-rails-16.0-buster-amd64.iso.hash
      turnkey-rails-16.0-buster-amd64.iso: OK

    Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted.

-----BEGIN PGP SIGNATURE-----
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=QH2w
-----END PGP SIGNATURE-----