This signature file may be used to cryptographically verify file integrity,
like this::

    $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D
    $ gpg --list-keys 0xA16EB94D
      pub   2048R/A16EB94D 2008-08-15 [expires: 2023-08-12]
      uid   Turnkey Linux Release Key <release@turnkeylinux.com>

    $ gpg --verify turnkey-phplist-13.0-wheezy-i386-xen.tar.bz2.sig
      gpg: Signature made Fri Nov  1 09:31:28 UTC 2013 using RSA key ID A16EB94D
      gpg: Good signature from "Turnkey Linux Release Key"

For your convenience we also include file checksums:

    * sha1sum  8bdbb5990211f228e119c4b5f6cfe06432f1d55d
    * md5sum   55bf70340fb31bb96b87d599fd0c31fe

You can calculate these on your end and compare to check for errors, but
cryptographic verification is recommended for security reasons.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iQEcBAABAgAGBQJSc3ToAAoJEIXCXpWhbrlN+rgIAMUfpZXcwfrK22MA31G35HaJ
0f3x41x9TVihW892V5jHwbNXRQXfTAlfo93BErAA+T/IQms2WYJxJ8XswDEP7g5Y
x32SDQsm+bMBXd6I2nWNnF3Z/Rv5A5WPNgiwJawOHMlB5F0gmHGUPJ5wV+YCfVit
ibAUyPQcgh3aDlZxUU48vZh92gyV3IXvjg6BGD7b2ZcwqPakJg7AC3O2awYAsoEH
i+Q1rHSUspku8Fa1+TqrdYqnaTs5TijK4hrOZMhJnN2tlwXkG7nST1A6SjRv9B6o
cvOn6EVCiWGFpGkHdo6I8NPTU2LJjw3bLvJWYF3W8OYcqOFKGrPWgUuNVq/n2kA=
=4OIe
-----END PGP SIGNATURE-----