This signature file may be used to cryptographically verify file integrity,
like this::

    $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D
    $ gpg --list-keys 0xA16EB94D
      pub   2048R/A16EB94D 2008-08-15 [expires: 2023-08-12]
      uid   Turnkey Linux Release Key <release@turnkeylinux.com>

    $ gpg --verify turnkey-vanilla-12.1-squeeze-amd64-ovf.zip.sig
      gpg: Signature made Tue Jun  4 16:48:13 UTC 2013 using RSA key ID A16EB94D
      gpg: Good signature from "Turnkey Linux Release Key"

For your convenience we also include file checksums:

    * sha1sum  afd9e3da64023c8ef783261acfdc7e67481e7145
    * md5sum   a598f01110a390382d65b83ef972684e

You can calculate these on your end and compare to check for errors, but
cryptographic verification is recommended for security reasons.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iQEcBAABAgAGBQJRrhpDAAoJEIXCXpWhbrlNDigH/1Br7ds4cuuJobuLmqQSBUvz
yni2yaLzXbzCrlnHPGA1i2fNl4x0ekldtfO3F7qwq6SdfhjXT+2lz3MxPXTAuTgk
Lv6wGCeArNiKMznYFCz4+OzteHeKJx8bYN8wzHgqg05H3O/VGjFsJTM3p23n+UqY
NaYsOZOEEGiLC/QZWcRzn3mugriepS3XYpvhGqNjtGEuvhn90YSYP7WGwBZwGgPG
921aA4li55dSbyPm37KmkxOBfGvARu7nAyV/RlCjhpnxvh+pmb0W2OyFfp3LBgHG
WgHmgTqvrL44XLeOIMT+F5cMQuVvRE+vJEvm3m+/2HkF3aWWuEFx9g1DuOwFWYs=
=fj+L
-----END PGP SIGNATURE-----