This signature file may be used to cryptographically verify file integrity,
like this::

    $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D
    $ gpg --list-keys 0xA16EB94D
      pub   2048R/A16EB94D 2008-08-15 [expires: 2023-08-12]
      uid   Turnkey Linux Release Key <release@turnkeylinux.com>

    $ gpg --verify turnkey-typo3-12.1-squeeze-amd64-ovf.zip.sig
      gpg: Signature made Tue Jun  4 16:40:12 UTC 2013 using RSA key ID A16EB94D
      gpg: Good signature from "Turnkey Linux Release Key"

For your convenience we also include file checksums:

    * sha1sum  7a7758da5be49cd100ef5a6b23a36d89234682f0
    * md5sum   fa936d16d30e8ec83ff38c17963f8b26

You can calculate these on your end and compare to check for errors, but
cryptographic verification is recommended for security reasons.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iQEcBAABAgAGBQJRrhhfAAoJEIXCXpWhbrlNhCgIAI7zHHbFy4El4rlJA9HBnwSa
U0cji0tKJI6vb0zyQ5UCkObLR4RdT6Ea9kGXPhIql4GRLJgRkez6NC1lJaZhmmXX
XOAR15s62YKeLbz8d2qLEpUn3mOJ5WsJyM8II9sE8L/E1OuM42NLcvtWbUco7eqq
YH97AfBXh6XyJ2S7hpI5S1HbgcOX3WVPV54rYuV2pJ5UwkgSJS6UDtXSxsOQqN6d
ReFqsmwPxI2+ih4n4WH0fIjCE9SQov76Ruxj3oRpDXG6EnQKhIm74/RyFyQpuVKU
xUDVbx4b//y3QWf9sjh38/LPCCOpyBzxlEC0htt7n8vAqREZY50CJaUID9bMzu0=
=welc
-----END PGP SIGNATURE-----