This signature file may be used to cryptographically verify file integrity,
like this::

    $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D
    $ gpg --list-keys 0xA16EB94D
    pub   2048R/A16EB94D 2008-08-15 [expires: 2023-08-12]
    uid   Turnkey Linux Release Key <release@turnkeylinux.com>

    $ gpg --verify turnkey-appengine-python-12.0-squeeze-x86-xen.tar.bz2.sig
    gpg: Signature made Tue Aug 21 15:11:27 UTC 2012 using RSA key ID A16EB94D
    gpg: Good signature from "Turnkey Linux Release Key

For your convenience we also include file checksums:

* sha1sum  b031b2e169d48dfc24b33c43760638baa77d19bf
* md5sum   508e534e1941dc404ec9c6f71199c9b0

You can calculate these on your end and compare to check for errors, but
cryptographic verification is recommended for security reasons.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iQEcBAABAgAGBQJQM6UWAAoJEIXCXpWhbrlNd08IAKLUzHIi41MSfS/k+HBzk2st
pS8dGa/h6VUkn7ZrJdCF7e9kb9AaK3p+QZkQ6RIgBe17jQQouLI09Qjdx+keyHyh
UQmODZYSYKB9uouwu2jmHRHB1WiCxf6Bzi39L5spy+OM4+Y+nNWm+opjtl71HntW
C7/zGSJloi1+fAc4oQC/dGICgayqwX4EEo0MmmKVBfKi2A8nEPKH24J1YPJPvPRc
JrHpU3N5tt5J54d614YB03D3spaf7Ee2gCyytV3yiXPQI4J/FQI/bRAYdHN2Sxai
wO9vfN0VrI5kIQQRXHvRFV+9j6l5/srnvDsLj8U1xIPfwHc9QuF2heFKM3n7JFo=
=YVn+
-----END PGP SIGNATURE-----