This signature file may be used to cryptographically verify file integrity,
like this::

    $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D
    $ gpg --list-keys 0xA16EB94D
      pub   2048R/A16EB94D 2008-08-15 [expires: 2023-08-12]
      uid   Turnkey Linux Release Key <release@turnkeylinux.com>

    $ gpg --verify turnkey-asp-net-apache-13.0-wheezy-i386-xen.tar.bz2.sig
      gpg: Signature made Fri Nov  1 08:48:53 UTC 2013 using RSA key ID A16EB94D
      gpg: Good signature from "Turnkey Linux Release Key"

For your convenience we also include file checksums:

    * sha1sum  463443b2e6da14810d7b4cc286070fe8db1d2a1f
    * md5sum   05517ead22c8403bc65de27c4a81e2b4

You can calculate these on your end and compare to check for errors, but
cryptographic verification is recommended for security reasons.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iQEcBAABAgAGBQJSc2rsAAoJEIXCXpWhbrlNbDQIAOFp9nfarWj8QDcg8kvIPJge
GKFUe8ctiKqfM2x0uetN9qcCWKZBKpM/4K9tHXt8tFGIGoDWmrhoNj1hzC3+vhpp
zXqP4kNH1ib+y3vJZhWPG2YDqaqKTOofEKjMmTzBMv6FvInShD6nkaqylCDppddv
6x+dZ57otA8bp4ApwlLCiSve5pjYzdsMdur/lkXIkLdU8g7kZvb54QZQ6k3NiqeH
6iFzqoCkvjDWDiP0y+6q45YjdjmigKEoI9kxgMZTERh/r98myTL7B6fF8muHvFfO
AGzeEFqRCC2EWZzyqFBYA8Cw2Q2byc/kMq9lBHyzD8mulR5LnQvcZLWIBdo0B3c=
=JDZP
-----END PGP SIGNATURE-----