This signature file may be used to cryptographically verify file integrity,
like this::

    $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D
    $ gpg --list-keys 0xA16EB94D
      pub   2048R/A16EB94D 2008-08-15 [expires: 2023-08-12]
      uid   Turnkey Linux Release Key <release@turnkeylinux.com>

    $ gpg --verify turnkey-web2py-13.0-wheezy-amd64-vmdk.zip.sig
      gpg: Signature made Wed Oct 16 10:41:28 UTC 2013 using RSA key ID A16EB94D
      gpg: Good signature from "Turnkey Linux Release Key"

For your convenience we also include file checksums:

    * sha1sum  ce53eb6ba2971dfb65365b850ffa730d17f9479e
    * md5sum   5c262b2d89c2811344ddc3f63845de9c

You can calculate these on your end and compare to check for errors, but
cryptographic verification is recommended for security reasons.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iQEcBAABAgAGBQJSXm1PAAoJEIXCXpWhbrlNdwoIAIZNo7S2sMK4MFmqPXGmHHBE
wcf8bXkNN3nycf8P9C17hbkTuOCaEPOjKU3VqWfNJY/y7mszMxSRnXfU2tb6tq6B
gT9lrbbIHZSdrCA2+tzo5SIlBAGqVep+DRfdvawiNCZsv5+fZU3ceLHoUjqX0wJy
mly+ocgsJJSe1RV87HKh82ju+UOHNuGgPpYlSKg6EaChWKcjPCs0VUjrP9SbwRCj
sUttlHL8tmI6gIk9WfQmt3p6jsqT6JhZbrCqpZf0I3iH0n3da2DpgbZHhhHcSMjn
Qrg/YvI3SDNAr0v8qIzwqn7VDnyFGNNRH/JWdH0v69GWYDRQbDewv8a5sP7NnZY=
=Op/y
-----END PGP SIGNATURE-----