Liten-Datamaskin:isos rick$ cat devuan-2.0.0-ascii-amd64.verification
# Source: https://mirror.leaseweb.com/devuan/devuan_ascii/

$ shasum -a 256 -c devuan-2.0.0-ascii-amd64.sha256
devuan-2.0.0-ascii-amd64-cd1.iso: OK
devuan-2.0.0-ascii-amd64-netinst.iso: OK

$ gpg --keyserver hkp://keys.gnupg.net --recv-keys 0x94532124541922FB
gpg: key 94532124541922FB: 2 signatures not checked due to missing keys
gpg: key 94532124541922FB: public key "Devuan Repository (Primary Devuan signing key) <[email protected]>" imported
gpg: no ultimately trusted keys found
gpg: Total number processed: 1
gpg:               imported: 1

$ gpg --verify devuan-2.0.0-ascii-amd64.gpg devuan-2.0.0-ascii-amd64.sha256.original
gpg: Signature made Wed Jun  6 11:55:55 2018 PDT
gpg:                using DSA key 8E59D6AA445EFDB4A1533D5A5F20B3AE0B5F062F
gpg: key 5F20B3AE0B5F062F: 17 signatures not checked due to missing keys
gpg: key 5F20B3AE0B5F062F: public key "Vincenzo (KatolaZ) Nicosia <[email protected]>" imported
gpg: no ultimately trusted keys found
gpg: Total number processed: 1
gpg:               imported: 1
gpg: Good signature from "Vincenzo (KatolaZ) Nicosia <[email protected]>" [unknown]
gpg:                 aka "KatolaZ <[email protected]>" [unknown]
gpg:                 aka "Enzo Nicosia <[email protected]>" [unknown]
gpg:                 aka "Vincenzo Nicosia (KatolaZ) <[email protected]>" [unknown]
gpg:                 aka "Enzo Nicosia -- KatolaZ <[email protected]>" [unknown]
gpg:                 aka "Vincenzo Nicosia (KatolaZ) <[email protected]>" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg:          There is no indication that the signature belongs to the owner.
Primary key fingerprint: 8E59 D6AA 445E FDB4 A153  3D5A 5F20 B3AE 0B5F 062F
$
Liten-Datamaskin:isos rick$