This signature file may be used to cryptographically verify file integrity,
like this::

    $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D
    $ gpg --list-keys 0xA16EB94D
      pub   2048R/A16EB94D 2008-08-15 [expires: 2023-08-12]
      uid   Turnkey Linux Release Key <release@turnkeylinux.com>

    $ gpg --verify debian-6-turnkey-canvas_12.1-1_i386.tar.gz.sig
      gpg: Signature made Tue Jun  4 20:14:58 UTC 2013 using RSA key ID A16EB94D
      gpg: Good signature from "Turnkey Linux Release Key"

For your convenience we also include file checksums:

    * sha1sum  acba2eae53cd54a8001ad84defcdf5cf7fd32c96
    * md5sum   2de0df14828648b9fc3696e6fa1edc6a

You can calculate these on your end and compare to check for errors, but
cryptographic verification is recommended for security reasons.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iQEcBAABAgAGBQJRrkqvAAoJEIXCXpWhbrlNPKUIAKHr0C4v8shUpZ/aZE44Kp6A
sQ13tvpTzsajg+zhaFZkE1bFMbkaZgOLqWcW2ZC8/SxnPHSVi6n6zm+WvtBKR97L
ptuUjwr29oiLJgV9qBcdJQJY+woLjfGUtzCM1Hr2DIiOOGQPeCNEZlcesDERYDUJ
v4nUZnZM/aoT+ctqL+T9lfOZ4WYh5ltaLmjUstxDLzB6rbE/B/x7Mg7S6keu8P21
XNTyTf69AKigOmmeq0eMPkFSRP4S8JwNO0UYQHvxSdOS1hyMtjqT7Flgg/dgpDOM
hZA2J4s0urzBUPbsKFpe52O2fGuBnEd30/qcfIuNTooV2P4VMy95BSVAHEK2Irg=
=t39p
-----END PGP SIGNATURE-----