-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transmit or tampered with,
perform the following two steps to cryptographically verify image integrity:

1. Verify the authenticity of this file by checking that it is signed with our
   GPG release key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/master/keys/tkl-buster-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint release-buster-images@turnkeylinux.org
      pub   rsa4096 2020-02-05 [SC] [expires: 2040-01-31]
            A8B2 EF42 8781 9B03 D351  6CCA 7623 1C20 425E 9772
      uid           [ unknown] TurnKey GNU/Linux Buster Images (GPG signing key for TurnKey Linux Buster Images) <release-buster-images@turnkeylinux.org>
      sub   rsa4096 2020-02-05 [S] [expires: 2040-01-31]
      
    $ gpg --verify turnkey-wordpress-16.1-buster-amd64.iso.hash
      gpg: Signature made using RSA key ID A8B2EF4287819B03D3516CCA76231C20425E9772
      gpg: Good signature from "0"

2. Recalculate the image hash and make sure it matches your choice of hash below.

    $ sha256sum turnkey-wordpress-16.1-buster-amd64.iso
      e0bd47a9885e6208f8d8e92f1c1c1637ca2f855d7757225a5f3858d55abdcf6a  turnkey-wordpress-16.1-buster-amd64.iso

    $ sha512sum turnkey-wordpress-16.1-buster-amd64.iso
      de9df0fd19c7a4927f39e1d1c08439cb273d0e02e30e037a416c9daa8b8dfdf0894f7d64f3e96a2c60fe6d90b0d641d28e5871ab529dceadc94631bd2c5846ed  turnkey-wordpress-16.1-buster-amd64.iso

   Note, you can compare hashes automatically::

    $ sha256sum -c turnkey-wordpress-16.1-buster-amd64.iso.hash
      turnkey-wordpress-16.1-buster-amd64.iso: OK

    $ sha512sum -c turnkey-wordpress-16.1-buster-amd64.iso.hash
      turnkey-wordpress-16.1-buster-amd64.iso: OK

    Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted.

-----BEGIN PGP SIGNATURE-----
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=aaFt
-----END PGP SIGNATURE-----