This signature file may be used to cryptographically verify file integrity,
like this::

    $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D
    $ gpg --list-keys 0xA16EB94D
      pub   2048R/A16EB94D 2008-08-15 [expires: 2023-08-12]
      uid   Turnkey Linux Release Key <release@turnkeylinux.com>

    $ gpg --verify debian-7-turnkey-yiiframework_13.0-1_i386.ova.sig
      gpg: Signature made Tue Oct 15 20:33:09 UTC 2013 using RSA key ID A16EB94D
      gpg: Good signature from "Turnkey Linux Release Key"

For your convenience we also include file checksums:

    * sha1sum  9d8bfd821eacd345d38894aef00dd3270445af5f
    * md5sum   61384766bb4bc016c74079987002f69a

You can calculate these on your end and compare to check for errors, but
cryptographic verification is recommended for security reasons.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iQEcBAABAgAGBQJSXaZ/AAoJEIXCXpWhbrlNPQwH/0SXvQdirBLY0GyE9pp6ZLlp
CYYNDn4x85Zyg63TWfjH0v6UtmXg4VI2w26rBhNKf6LF1dZ0n4Y+3YhFI0HhbTuI
2tI3Ek69X3K8Kqqzvv2/HPxqzvLHqzAiPKG+5WrU25+2Z0cbloPTvngBj1iufTLE
kH+sw5izAzw0g4jCXg0byX7CeHjvcjRrX7O/7kOCJLsknibtWVue0+4QUb4pLqs5
26XpOnvsB7IpNFgMsbSWkbS85L8je2FIl6N29fzqfNAc1ZyEQOL+4tguLNo1ER9R
b9+5iJ4uQXt3f585PoaUbe3iQrPBo+azdAuH5BLKvOegQX+atjLxuQ+uag4FLpg=
=enJG
-----END PGP SIGNATURE-----