This signature file may be used to cryptographically verify file integrity,
like this::

    $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D
    $ gpg --list-keys 0xA16EB94D
    pub   2048R/A16EB94D 2008-08-15 [expires: 2023-08-12]
    uid   Turnkey Linux Release Key <release@turnkeylinux.com>

    $ gpg --verify turnkey-vanilla-12.0-squeeze-x86-ovf.zip.sig
    gpg: Signature made Tue Aug 21 12:38:05 UTC 2012 using RSA key ID A16EB94D
    gpg: Good signature from "Turnkey Linux Release Key

For your convenience we also include file checksums:

* sha1sum  c8bf304cb0c0a1266563cad7288e703291771752
* md5sum   0ce6626b9ce4c716befbad50e0f3e83c

You can calculate these on your end and compare to check for errors, but
cryptographic verification is recommended for security reasons.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iQEcBAABAgAGBQJQM4EgAAoJEIXCXpWhbrlNoREIAIWMcsE7GPMyXndkI03EKD3N
v9yPox9/viVqHdXhTDZiSntcRNwqJqXoDlduR0OweqGbi9kiGeupHesxUSXFv3Iz
GLVSXWrZKAhyoAckFMUFUvI93HDAI1utgtaiWigNW+aoZ5d6Bv4eR5OYNrgTdnkf
ywYtqNjEqoC53tgoWvdoKKoJZ0puVFnx5aB5a2m6ddnw2/JAISPZxe4J12/lzh8f
RETLkCOjIC2zoSax6tyJ7Gi4kNjQYP5Pv5GP9RnPWXdM0AIQHuL0PCM6o0RJ/dUx
efEZPJ+rqo+oCdNlHIbnnA7cE1rW/hRqQWodhA4fxmQ1Iv9bj0P35DVB0RJFgWs=
=zzpX
-----END PGP SIGNATURE-----