-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transmit or tampered with,
perform the following two steps to cryptographically verify image integrity:

1. Verify the authenticity of this file by checking that it is signed with our
   GPG release key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/master/keys/tkl-buster-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint release-buster-images@turnkeylinux.org
      pub   rsa4096 2020-02-05 [SC] [expires: 2040-01-31]
            A8B2 EF42 8781 9B03 D351  6CCA 7623 1C20 425E 9772
      uid           [ unknown] TurnKey GNU/Linux Buster Images (GPG signing key for TurnKey Linux Buster Images) <release-buster-images@turnkeylinux.org>
      sub   rsa4096 2020-02-05 [S] [expires: 2040-01-31]
      
    $ gpg --verify turnkey-mongodb-16.1-buster-amd64.ova.hash
      gpg: Signature made using RSA key ID A8B2EF4287819B03D3516CCA76231C20425E9772
      gpg: Good signature from "0"

2. Recalculate the image hash and make sure it matches your choice of hash below.

    $ sha256sum turnkey-mongodb-16.1-buster-amd64.ova
      b32038889f5fe3bdaace40ccf8a97aee8bd2cef56cc3894c8e192a8c244eca44  turnkey-mongodb-16.1-buster-amd64.ova

    $ sha512sum turnkey-mongodb-16.1-buster-amd64.ova
      3ac81459e855af768ba8eefd62d7cd379a33923d847cd26e2aa27e568a2bf36326bbe26843ad3fd20c90da994aad8e310e4bd2493aea74f2f988fd8ead92e7e0  turnkey-mongodb-16.1-buster-amd64.ova

   Note, you can compare hashes automatically::

    $ sha256sum -c turnkey-mongodb-16.1-buster-amd64.ova.hash
      turnkey-mongodb-16.1-buster-amd64.ova: OK

    $ sha512sum -c turnkey-mongodb-16.1-buster-amd64.ova.hash
      turnkey-mongodb-16.1-buster-amd64.ova: OK

    Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted.

-----BEGIN PGP SIGNATURE-----
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=NucD
-----END PGP SIGNATURE-----