This signature file may be used to cryptographically verify file integrity,
like this::

    $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D
    $ gpg --list-keys 0xA16EB94D
      pub   2048R/A16EB94D 2008-08-15 [expires: 2023-08-12]
      uid   Turnkey Linux Release Key <release@turnkeylinux.com>

    $ gpg --verify debian-7-turnkey-punbb_13.0-1_i386.ova.sig
      gpg: Signature made Tue Oct 15 18:22:32 UTC 2013 using RSA key ID A16EB94D
      gpg: Good signature from "Turnkey Linux Release Key"

For your convenience we also include file checksums:

    * sha1sum  1d78ec0b866130f5b197167425b4ad49f7ef0b58
    * md5sum   bf5e21238e32fd225d194366930b0f80

You can calculate these on your end and compare to check for errors, but
cryptographic verification is recommended for security reasons.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iQEcBAABAgAGBQJSXYfiAAoJEIXCXpWhbrlNuMYH/3d7Gn3Pay7QLBcHOBvu0ezy
5MvqBfSkI0hWpo6NA1fhZleWjFOoZ+iSCqH2L2kVieGECAlkbuAdM6eF2sKvsGMO
s+9pzi5DU6fNlGsg5C+ZDdZMQa/7mnPee3qzypaa3gC+wdBsWICbQ0t04O1my9do
awA7tw5o+RsD/MDYHXLL8xXLn4NSIgJt9mymjsJ41p/jVKLm8vK3G+WcHWM6509u
DFupSPhdt1mDYmm9kE3TtD1ekqJVj0rs7MGcELfxVlWt/Xd4kwp1xK7GWcHBsfPG
+HWbDwWyRKpvpnEuuHu+NDCL0VuSMvqzl7yp1oDrofACgDQfllB+m8oBsCNvt1A=
=l1Lq
-----END PGP SIGNATURE-----