This signature file may be used to cryptographically verify file integrity,
like this::

    $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D
    $ gpg --list-keys 0xA16EB94D
      pub   2048R/A16EB94D 2008-08-15 [expires: 2023-08-12]
      uid   Turnkey Linux Release Key <release@turnkeylinux.com>

    $ gpg --verify turnkey-tomcat-12.1-squeeze-amd64-vmdk.zip.sig
      gpg: Signature made Tue Jun  4 16:22:54 UTC 2013 using RSA key ID A16EB94D
      gpg: Good signature from "Turnkey Linux Release Key"

For your convenience we also include file checksums:

    * sha1sum  d50c331d18b9014d3e6b3acf0896758651792c9f
    * md5sum   fc2168ffb31c9be88d91c2f8e05a5797

You can calculate these on your end and compare to check for errors, but
cryptographic verification is recommended for security reasons.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iQEcBAABAgAGBQJRrhRVAAoJEIXCXpWhbrlNJ6kH/1X21Wc+raiun8pW3rrzG7aI
qaIoatQpWasnKotUQgKBWexH0XFH0mq0jOImZPNIVzm14Lq9JF+sUc+WZQkKA4yC
Hi8KJAo8EkH+CdQU3aJfwpp7Xw+PbYf/1TXg5baXlhToHeZv88kt64hwtaunPZfd
Q6dGLL8bxfVT/v5LmgOtLJqsrwQeUhl1o8gmneHQiu8bmP6eXXJ8rW1assdWJnX9
VmsphJYzCredPmrr2i0Z65CNDo8IaUacU4PH4DL4VkXxF0jBZyJXVuYHcZ4c1bHo
CCHb2dpOaQEs1bZo9ndGJ21TadI02yI+pvJRsGI+w5Nlo25cT8Z+IWIoIVbQmXY=
=ZMPy
-----END PGP SIGNATURE-----