This signature file may be used to cryptographically verify file integrity,
like this::

    $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D
    $ gpg --list-keys 0xA16EB94D
    pub   2048R/A16EB94D 2008-08-15 [expires: 2023-08-12]
    uid   Turnkey Linux Release Key <release@turnkeylinux.com>

    $ gpg --verify turnkey-simplemachines-12.0-squeeze-x86-vmdk.zip.sig
    gpg: Signature made Tue Aug 21 12:25:03 UTC 2012 using RSA key ID A16EB94D
    gpg: Good signature from "Turnkey Linux Release Key

For your convenience we also include file checksums:

* sha1sum  a3b16527cd92722c27fb6aad5f95c1ee4be6984f
* md5sum   c4a33bdf6a9665290e69a66c989baf4f

You can calculate these on your end and compare to check for errors, but
cryptographic verification is recommended for security reasons.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iQEcBAABAgAGBQJQM34TAAoJEIXCXpWhbrlNttoIAL4H6pRm4F+9wvfvHtdTgPjv
qivZscQSn+iF+jBCTCCzMd+CFh+CAdNDd0DgPlwnQ7bpkp/vlEpN/uUqgQLwZGhU
sfIInNsE+JM0YZ2255fIxJ7du76+vGjO22+iH1/CiRxbeCV2jy2eZhH08dc4oHZv
x7W2nUorLpfP2jvqH1ElUX4lkpYyVihN9tmdjD5FnRsYTtq//JTaroyER2paLKdg
552Zb1Bfa6WXno/XwrNKEbQV2vg0EywgyKUUgmMzjM/H+ZjRLCs0ZEURzC8N6yYI
uD1A8mZ+PcFfc4OWPxvMHqONC4kyU2I45hLkCJ9J4OFbL9z/pYbfr152JFHKtJA=
=Yo7f
-----END PGP SIGNATURE-----