This signature file may be used to cryptographically verify file integrity,
like this::

    $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D
    $ gpg --list-keys 0xA16EB94D
    pub   2048R/A16EB94D 2008-08-15 [expires: 2023-08-12]
    uid   Turnkey Linux Release Key <release@turnkeylinux.com>

    $ gpg --verify turnkey-silverstripe-12.0-squeeze-x86-xen.tar.bz2.sig
    gpg: Signature made Tue Aug 21 16:48:25 UTC 2012 using RSA key ID A16EB94D
    gpg: Good signature from "Turnkey Linux Release Key

For your convenience we also include file checksums:

* sha1sum  26cd3d940cd6c775d4c4024bdda09642390dcd76
* md5sum   aec63adf50be31a6fa101faf6aeb4b9d

You can calculate these on your end and compare to check for errors, but
cryptographic verification is recommended for security reasons.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iQEcBAABAgAGBQJQM7vQAAoJEIXCXpWhbrlNo6EH/jtgGSFad0yDCJMTS/FZCW+Z
SMxnwkPzpT9VBj7Y2WZX9P5UgagHaRoXDT5CJWdm9qNY+Fn2uuytm2EDGNz2zeKE
ZPBfi1AEl5mbB/UFuFkfMDcc+khJGFM8lUqUJS3nvvOyK97qInO/cn6b6sYX6Uuu
EYytxbp+Y4SfHrSyh6AoEib44XfrNPSoV99qWWxmHrwu0erP0lw518aVLOkXak5p
IsCN9oV9sm7rJcU0dFQ3KGQ+UG0VY5ag9m1L95q1Eokrd4eTqVyRgX+Ipgpa2S2t
6nZ2fQdjGw0WqOPOT/fLG263VQ/r6/whgowPF2fyib5+VZNjNKyQNVaP8U3CwRI=
=3l0A
-----END PGP SIGNATURE-----