This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify turnkey-postgresql-12.1-squeeze-amd64-xen.tar.bz2.sig gpg: Signature made Tue Jun 4 15:30:58 UTC 2013 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum 2e85253742915d64bba3f570d200c65bb7bc83f2 * md5sum 6a49b36e7fe006dff0fbe53b2b620dcc You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQEcBAABAgAGBQJRrggsAAoJEIXCXpWhbrlN/eIIAMp+yLdtvgbsxdAFQoZrXU52 +9MUhjFntoLehyXTm+dUL1r3Epigp98I4GvEqMcAfsWRMcVFROM0lMndvbFpkStH ZPyo/LvjIdh+bRM+GzUKN9esVNZcoBTHCaZw0x/pKyJqqmYNct3EbN86AI96YhfG lwYUtA2ga/jzBSa7ec8XHIfK+psU1JVsqypqPtrSrokUAdt1dWfF5httVU7QiR5T dozIyfsB+C2TljW+J/wVcp3pzYLm2MVVr+37u/MvAMvbLzRqS0bb5ued18MAWyyy u9OEcLWHfbPmNKGEcuH5UsBQCO59JRTNovaMtFHnkNLrVzhjUJw9/Ox0Et2ePAg= =lNf5 -----END PGP SIGNATURE-----