-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Two steps are required to cryptographically verify image integrity.

1. By verifying the integrity of this signature file, you can be sure that
   the checksums included in this file are valid.

    $ gpg --keyserver hkp://pool.sks-keyservers.net --recv-keys 0xA16EB94D
    $ gpg --list-keys 0xA16EB94D
      pub   2048R/A16EB94D 2008-08-15 [expires: 2023-08-12]
      uid   Turnkey Linux Release Key <release@turnkeylinux.com>

    $ gpg --verify turnkey-omeka-14.0-jessie-amd64.ova.sig
      gpg: Good signature from "Turnkey Linux Release Key"

2. By calculating the image checksum and validating the hashed value is the
   same as listed below, you can be sure the image was not corrupted in
   transit or tampered with.

    $ md5sum turnkey-omeka-14.0-jessie-amd64.ova
      5bf76ca64e779007e48de54ec27febcb

    $ sha1sum turnkey-omeka-14.0-jessie-amd64.ova
      6f2c2d30ff41ef8edce22cd0d3918b8e9147a1e2

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iQEcBAEBAgAGBQJWMJdYAAoJEIXCXpWhbrlNuv8H+QHSJTYaa0XOZ1IkBqxDGnc6
uIYS+l9ReLJT3SoyejkczqsLLyqo7ZHtHHVBDR3KFvEFvgxDSXAHpN/uyZUu6+s/
SsSehhiWx2Wgd2AESyPbo0xGe/L08+rIvEDTT6cMyPzrc+d+p9Abw92+KxoGA8VL
3AIWETs8CbPZRvCUvwIev9tqC8kdkB69xgrdO2whCmr2rCAeo2AWDb4vzrkYghin
8A42j6yhDoWAUJS9T2U4XU/chLvkeMDrYt6DhT/+pPWj4RadB7Ock3ZSlKfRqUMq
6JJXeUV1B2wKnVcd2o2bQQtgGbA+DlEtIRZGHme3fblJLVaGi/zYqILhX9UV7co=
=vuA3
-----END PGP SIGNATURE-----