This signature file may be used to cryptographically verify file integrity,
like this::

    $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D
    $ gpg --list-keys 0xA16EB94D
      pub   2048R/A16EB94D 2008-08-15 [expires: 2023-08-12]
      uid   Turnkey Linux Release Key <release@turnkeylinux.com>

    $ gpg --verify turnkey-silverstripe-13.0-wheezy-amd64-xen.tar.bz2.sig
      gpg: Signature made Fri Nov  1 09:35:25 UTC 2013 using RSA key ID A16EB94D
      gpg: Good signature from "Turnkey Linux Release Key"

For your convenience we also include file checksums:

    * sha1sum  f8bab2c7d2801d3aae06eb47a14d154ab64f4e1c
    * md5sum   d2109d1920c8b90ab0cedb4298e569d6

You can calculate these on your end and compare to check for errors, but
cryptographic verification is recommended for security reasons.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iQEcBAABAgAGBQJSc3XTAAoJEIXCXpWhbrlN7UMH/19beHQCGLT0OJ8VjYXsrCG0
Uiq+Y96p1PsZB0QYaNmXsJ0NX8rFHXZz03Ok0wWzulr18IkAyg430ieYrkjfVpXJ
pSvTQf7ZeOMa/0QkuBnBsHbZSAcBfiBnT0iyL+d67ddpkWIxrDqnmvUQjpcBQP0J
azJvAue9niB7Yii6L44G7fd8tS9GbL7qYeDxymu6QdnOmgtJUdUFlYJ/342lYKNL
14DhtNEucvphQf0kIoPUXOj64v2hqE1zBwiuawHQOQQwGe+lGMwpCg2QBBybKUsv
AnUikxFu+U5phpFlw9NHeCTV7/KDTDZHTvr5FrKQvoAfTpK/9ayrcrpQ15yC5ag=
=Ff65
-----END PGP SIGNATURE-----