This signature file may be used to cryptographically verify file integrity,
like this::

    $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D
    $ gpg --list-keys 0xA16EB94D
      pub   2048R/A16EB94D 2008-08-15 [expires: 2023-08-12]
      uid   Turnkey Linux Release Key <release@turnkeylinux.com>

    $ gpg --verify turnkey-tomcat-apache-12.1-squeeze-i386-ovf.zip.sig
      gpg: Signature made Wed Jun  5 00:32:49 UTC 2013 using RSA key ID A16EB94D
      gpg: Good signature from "Turnkey Linux Release Key"

For your convenience we also include file checksums:

    * sha1sum  1820e93288f09977e7ed7e142f6b477b09667104
    * md5sum   c8b7f648a4ba1389a9a942ed70fa8139

You can calculate these on your end and compare to check for errors, but
cryptographic verification is recommended for security reasons.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iQEcBAABAgAGBQJRrocfAAoJEIXCXpWhbrlNNZcH/R0D06KanCM3SqOhflMceH9S
k7TL6WU1M+NJhO8ycYk4ABOJaIFXE0Ygb++oG+9sKo2fZtq8QnMVKdzWCQ6+eg1m
gdCOhEMOb5QYJDU+klIG675PNPjnX7uRRYX/8wUtz0GN60kJpysKCg/082OBiU8p
qWD3kHihiU8Ks4KUD5M398ZioaECIbFIw1D7TKyPuNUu9qtfTu8lcb1AS/IKJWih
mgzMHe18eTI9fibhMtwWS/n7tqbcjy+eAMQPBt8WGT1hoLxTXSGN6qnpTgLnHwtw
xbX8TuxDQPCJfB5MdmJVax0x+HMJ+zCbFsq8jtydmKRCGTuNI6ih+OmelaW/zSs=
=cGBz
-----END PGP SIGNATURE-----