This signature file may be used to cryptographically verify file integrity,
like this::

    $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D
    $ gpg --list-keys 0xA16EB94D
      pub   2048R/A16EB94D 2008-08-15 [expires: 2023-08-12]
      uid   Turnkey Linux Release Key <release@turnkeylinux.com>

    $ gpg --verify turnkey-orangehrm-12.1-squeeze-i386-vmdk.zip.sig
      gpg: Signature made Tue Jun  4 22:38:31 UTC 2013 using RSA key ID A16EB94D
      gpg: Good signature from "Turnkey Linux Release Key"

For your convenience we also include file checksums:

    * sha1sum  c266665596370f38015e09025eed470ee02641f4
    * md5sum   5512e5811a5a2203390253bfac668b27

You can calculate these on your end and compare to check for errors, but
cryptographic verification is recommended for security reasons.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iQEcBAABAgAGBQJRrmxZAAoJEIXCXpWhbrlN5TsH/jxKrJC4R6CHhAUYcLB4acZR
z1x3SaYmxyMghPR3KqEjiuas1mSZul8YNV/krLbD2TFMRApK2jGFnfaNz+BByC71
RpuapKG7C9ea+7d2CYrTGDsxOtWC8GZkiAHafrdv6aQo5Gj8nvk1zRr9tVm1hM5s
fU+rgREmbpmYNzM4hLdloiw1YBgCE66UGHhqDNaPlxy4GAioCqO2CA1qCXGJPQ6R
Cj4HzAIGQdiaoMIJaVJLJQLtAGDZIhw3upMMiE1Cjpn00Iz9r/8Zoem/htflKhLS
B2S36jAp26Pk1Fj8d5yssyDWJdzdiKrTqKrHOD7/HtPzit3fKfS+SkKRG/b5wLQ=
=68ei
-----END PGP SIGNATURE-----