This signature file may be used to cryptographically verify file integrity,
like this::

    $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D
    $ gpg --list-keys 0xA16EB94D
      pub   2048R/A16EB94D 2008-08-15 [expires: 2023-08-12]
      uid   Turnkey Linux Release Key <release@turnkeylinux.com>

    $ gpg --verify turnkey-silverstripe-12.1-squeeze-amd64-vmdk.zip.sig
      gpg: Signature made Tue Jun  4 15:55:24 UTC 2013 using RSA key ID A16EB94D
      gpg: Good signature from "Turnkey Linux Release Key"

For your convenience we also include file checksums:

    * sha1sum  16e7dd4746bc5986788c1675cd62381de534884e
    * md5sum   4163ff108a3d6c5dde12c3d22307994c

You can calculate these on your end and compare to check for errors, but
cryptographic verification is recommended for security reasons.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iQEcBAABAgAGBQJRrg3iAAoJEIXCXpWhbrlNk3gH/jk1y6hJRQVf3SB528YpyzaE
OZ2XLE3QXOU3XiWZBZlsSW9rkzsMTqHcCu7cCyeQ4AXuLwIBtTcBuIpkEq+CQWN0
Ht7hTbFAfQkPfpnBwt/xZH0//JYQCCYieHAp4DqyTzTjSLQ+D0S9m9CmIJ02TP1X
TXQmGRU+DWFqoiq3tq8nFA2ZGNH0GuEJviLP++yPXXlWhDwDK+beq5flSEswaQm7
jQoTjSUf8LbCVZGYLw8nlyUYxQtR9O4/77wovNftMAHnn6uayvD4Tnjj8J0dU9D2
OtqK7wCA0WMPUzqLrQ02zztvt3WwnIE06bdUH5jS2LNavQFV8M4x3ilolUyM8qo=
=J5CO
-----END PGP SIGNATURE-----