This signature file may be used to cryptographically verify file integrity,
like this::

    $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D
    $ gpg --list-keys 0xA16EB94D
      pub   2048R/A16EB94D 2008-08-15 [expires: 2023-08-12]
      uid   Turnkey Linux Release Key <release@turnkeylinux.com>

    $ gpg --verify turnkey-redmine-12.1-squeeze-i386-xen.tar.bz2.sig
      gpg: Signature made Wed Jun  5 00:31:37 UTC 2013 using RSA key ID A16EB94D
      gpg: Good signature from "Turnkey Linux Release Key"

For your convenience we also include file checksums:

    * sha1sum  27fab72a8a4e0b8b7edcbac4a4033a5388de37d8
    * md5sum   18bfc6165d6ce2127c0c676d82ff2012

You can calculate these on your end and compare to check for errors, but
cryptographic verification is recommended for security reasons.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iQEcBAABAgAGBQJRrobcAAoJEIXCXpWhbrlNu0QIAOBF2y5yuqu9BBTwSVm5N2dS
w+wFTNwaXSpgs3OqvddVFehS+587xv0uheQT5dFQtFgv23n6dQbnLkMR1HfIsIyi
fpEw/1eSCtJ9kU0k6d7QBr4WNPlS4Ya2gaqtVw9QK1Nwv+w0S4pzI/WHMJxbZcda
XIrw07iTSAOlBQOPB44+EAca50twj6LeCIuC5qFjfwZ8KPx51MDiandV3cxFlxZu
gxJMKMGQTbxnwtvNi2SMNZRcsc43GakkXIPQaQknEl4JPVW7yNn79rAA0saj9uWV
OOkx5IU4+0CNOBzF5be0p6Ct6LiEJwTFDr+HZ84UuZNI2cGQBXWgKGul03crP4Y=
=aN31
-----END PGP SIGNATURE-----