This signature file may be used to cryptographically verify file integrity,
like this::

    $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D
    $ gpg --list-keys 0xA16EB94D
      pub   2048R/A16EB94D 2008-08-15 [expires: 2023-08-12]
      uid   Turnkey Linux Release Key <release@turnkeylinux.com>

    $ gpg --verify turnkey-sitracker-12.1-squeeze-amd64-vmdk.zip.sig
      gpg: Signature made Tue Jun  4 16:01:03 UTC 2013 using RSA key ID A16EB94D
      gpg: Good signature from "Turnkey Linux Release Key"

For your convenience we also include file checksums:

    * sha1sum  0c1e6dd10c455003abf88a6400de7d43048ae05c
    * md5sum   a734a39fbcd23eb9e82069f3f7b873a1

You can calculate these on your end and compare to check for errors, but
cryptographic verification is recommended for security reasons.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iQEcBAABAgAGBQJRrg84AAoJEIXCXpWhbrlNKAUIALRcagHnz6gbKyOpnJCWjTxg
BGySYMzZGgUfV2Qe/mxybebp+tZX2kwM9DIgq+ZpCMhaXhKhiGVsUJKKfjEy0Mm7
wuXCQqdr373R/HnuvG0x5WZ4wZxQo0w+wBsv2fmfzp380Uf+yKgLk9OW/1tb1fTT
DZdPCFuLkLnMz6ARCjTTePWaoi9KLFdvFE+NHG83Oh6g088unaI+uE+r9TQicsq1
erre9WI7J5Jm5Uh/jI+nvFhJ9u/TN27rI6JiQoyRJrR8wfl9JqJV1GurHqP2jiKX
hn6Tj/EWXYoAAe8M8YFDm3+5y1MKCJEyzXs0JjfQEAP3IQqqo8P0q3t/j48RX5k=
=KwyY
-----END PGP SIGNATURE-----