This signature file may be used to cryptographically verify file integrity,
like this::

    $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D
    $ gpg --list-keys 0xA16EB94D
      pub   2048R/A16EB94D 2008-08-15 [expires: 2023-08-12]
      uid   Turnkey Linux Release Key <release@turnkeylinux.com>

    $ gpg --verify turnkey-yiiframework-12.1-squeeze-i386-xen.tar.bz2.sig
      gpg: Signature made Wed Jun  5 01:47:18 UTC 2013 using RSA key ID A16EB94D
      gpg: Good signature from "Turnkey Linux Release Key"

For your convenience we also include file checksums:

    * sha1sum  f337a1812cc7b3591d85e3b759b7f28ea28bedfe
    * md5sum   525d7d592c11b8fe6898474a6d81ca47

You can calculate these on your end and compare to check for errors, but
cryptographic verification is recommended for security reasons.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iQEcBAABAgAGBQJRrpibAAoJEIXCXpWhbrlNxJwIAMsjizwul58CPg1qm81FlqR4
Gi/I765CG7ogO0MkpN4SkgsKTDymMSYwdXrx3htK/fAgyrmwo6t2QyTK0pYtR7qY
vjJufvjocDyoYTFuFpD7X9RS9loUK4XHXY5idmUOO5NdPI9+42O4zOTw9UYOpECv
Jmo2l8cs887Pj5XBrZ69GjEIWQRD3i6UKex+usZYQfNlOUYV5vDkp5pXlOR/mtst
q4zb7QsJly78M/LAuFKF1J3crqaOMMv+ZlHenAX6GL4r0fowuDL2VpTLd8Vqu36/
PhiZ7am+fx2XzzeTfF0n9OF7TRXIPn6mXE2ZpjwAT2kSmCqoI8xjXR80c7DmNVE=
=eVom
-----END PGP SIGNATURE-----