-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transmit or tampered with,
perform the following two steps to cryptographically verify image integrity:

1. Verify the authenticity of this file by checking that it is signed with our
   GPG release key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/master/keys/tkl-buster-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint release-buster-images@turnkeylinux.org
      pub   rsa4096 2020-02-05 [SC] [expires: 2040-01-31]
            A8B2 EF42 8781 9B03 D351  6CCA 7623 1C20 425E 9772
      uid           [ unknown] TurnKey GNU/Linux Buster Images (GPG signing key for TurnKey Linux Buster Images) <release-buster-images@turnkeylinux.org>
      sub   rsa4096 2020-02-05 [S] [expires: 2040-01-31]
      
    $ gpg --verify turnkey-owncloud-16.1-buster-amd64-vmdk.zip.hash
      gpg: Signature made using RSA key ID A8B2EF4287819B03D3516CCA76231C20425E9772
      gpg: Good signature from "0"

2. Recalculate the image hash and make sure it matches your choice of hash below.

    $ sha256sum turnkey-owncloud-16.1-buster-amd64-vmdk.zip
      0399ca4eafdb981b8d6ee3cc285ce5f27d191bf8d890e7e371a1ee405e41774b  turnkey-owncloud-16.1-buster-amd64-vmdk.zip

    $ sha512sum turnkey-owncloud-16.1-buster-amd64-vmdk.zip
      f17a08b06db3ddb6453911e0e4b85d8ef9388d8575c73acacf6477752e68715035c1e6fb10615b37ad1843bcf1597f7da8944f38bbf01cabdd83549b48d9a026  turnkey-owncloud-16.1-buster-amd64-vmdk.zip

   Note, you can compare hashes automatically::

    $ sha256sum -c turnkey-owncloud-16.1-buster-amd64-vmdk.zip.hash
      turnkey-owncloud-16.1-buster-amd64-vmdk.zip: OK

    $ sha512sum -c turnkey-owncloud-16.1-buster-amd64-vmdk.zip.hash
      turnkey-owncloud-16.1-buster-amd64-vmdk.zip: OK

    Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted.

-----BEGIN PGP SIGNATURE-----
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=eBTj
-----END PGP SIGNATURE-----