-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transmit or tampered with,
perform the following two steps to cryptographically verify image integrity:

1. Verify the authenticity of this file by checking that it is signed with our
   GPG release key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/master/keys/tkl-buster-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint release-buster-images@turnkeylinux.org
      pub   rsa4096 2020-02-05 [SC] [expires: 2040-01-31]
            A8B2 EF42 8781 9B03 D351  6CCA 7623 1C20 425E 9772
      uid           [ unknown] TurnKey GNU/Linux Buster Images (GPG signing key for TurnKey Linux Buster Images) <release-buster-images@turnkeylinux.org>
      sub   rsa4096 2020-02-05 [S] [expires: 2040-01-31]
      
    $ gpg --verify turnkey-prestashop-16.0-buster-amd64.ova.hash
      gpg: Signature made using RSA key ID A8B2EF4287819B03D3516CCA76231C20425E9772
      gpg: Good signature from "0"

2. Recalculate the image hash and make sure it matches your choice of hash below.

    $ sha256sum turnkey-prestashop-16.0-buster-amd64.ova
      3ea1101ed03384260ae75b7d9151ac618da08d56a0c15d76f56a733a4cbe7bb9  turnkey-prestashop-16.0-buster-amd64.ova

    $ sha512sum turnkey-prestashop-16.0-buster-amd64.ova
      c727e11abe73a7446a101d026afe188da76cd805d194a0f3a7cf33920cc8e0c2db2cb3659d4bb82540a991108d6b000d7c2e0110156f756b86b6b042ae044a86  turnkey-prestashop-16.0-buster-amd64.ova

   Note, you can compare hashes automatically::

    $ sha256sum -c turnkey-prestashop-16.0-buster-amd64.ova.hash
      turnkey-prestashop-16.0-buster-amd64.ova: OK

    $ sha512sum -c turnkey-prestashop-16.0-buster-amd64.ova.hash
      turnkey-prestashop-16.0-buster-amd64.ova: OK

    Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted.

-----BEGIN PGP SIGNATURE-----
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=MXUL
-----END PGP SIGNATURE-----