This signature file may be used to cryptographically verify file integrity,
like this::

    $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D
    $ gpg --list-keys 0xA16EB94D
      pub   2048R/A16EB94D 2008-08-15 [expires: 2023-08-12]
      uid   Turnkey Linux Release Key <release@turnkeylinux.com>

    $ gpg --verify turnkey-typo3-12.1-squeeze-amd64-xen.tar.bz2.sig
      gpg: Signature made Tue Jun  4 16:56:35 UTC 2013 using RSA key ID A16EB94D
      gpg: Good signature from "Turnkey Linux Release Key"

For your convenience we also include file checksums:

    * sha1sum  4e025c8662d1fe801d7dc3d03cb449faf01de1a0
    * md5sum   162fbd97dc99424a8f8d399f2ff2db6b

You can calculate these on your end and compare to check for errors, but
cryptographic verification is recommended for security reasons.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iQEcBAABAgAGBQJRrhw6AAoJEIXCXpWhbrlNLKEIANNVqj2B/pVOGbaKhSeEgzF3
8YcoiDnKIzbxMaKz3JpteIPRtBHqR9h3G7Dto2wRohdG5yWt13ayS+mkCatTf2fc
VtamlfxdW90EFFRfK6nfpkwmkWAjlh6Zc1sUU1kbWN5eBzCMHyQkur+gh+M9wieP
jIgB+PZNHIYMvS7JsXfolGZKUJU8Cuslk/JF104adOQArm3EgMgfKy333z6yXAqo
OBMlZcMLo+uZysRc/U+XeWmlbZ8wU6WvHWcmTxkUY8VD5AdOy+/5vhF+6d8r4F34
O+/dxKdWxOtgZHUJeF8Xi8cZsziMM7khtJoZRvv3hK11PHf6CIGDUMniuyvBweA=
=U7OJ
-----END PGP SIGNATURE-----