This signature file may be used to cryptographically verify file integrity,
like this::

    $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D
    $ gpg --list-keys 0xA16EB94D
      pub   2048R/A16EB94D 2008-08-15 [expires: 2023-08-12]
      uid   Turnkey Linux Release Key <release@turnkeylinux.com>

    $ gpg --verify turnkey-zencart-12.1-squeeze-amd64-vmdk.zip.sig
      gpg: Signature made Tue Jun  4 17:07:10 UTC 2013 using RSA key ID A16EB94D
      gpg: Good signature from "Turnkey Linux Release Key"

For your convenience we also include file checksums:

    * sha1sum  97ebc3cbb6adfc1a67f2b0b8760b42bc2d6afca8
    * md5sum   873e9d78b92a95081bf90af4284ffe00

You can calculate these on your end and compare to check for errors, but
cryptographic verification is recommended for security reasons.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iQEcBAABAgAGBQJRrh61AAoJEIXCXpWhbrlNWPsH/2ns6epqgv9os47ub3d4hZ/e
h0z1Ipa948XN7mYyBlYZA/KC0ZOFXXOn0cibg5Pr6deCRzzklxMRiYXXS6EJ+KQL
WwCOzDCJQNny0OAVqpQ5BuuNgHPsJTh5tVnCbSSxPz8qpmc0IQD8Iy9TQt70/Q2G
44LMgF2S0Q/h5HUPBNsl3D3Ii1WDx5Ol6k0kdj94yDUD2uWsX35WDKCh339mChVq
KnkDWfhvNTUqIl9JBWcbmhgbaGk+8/ghtOuCd3S22nh7K1/9DdkvKetEl4ORWqzV
XZennevpzqnW/YbsX8ctRkbZiLqA8pbCDNhaNGUEYKiTwz1/AzBn6/y/eVTTH2U=
=TrAY
-----END PGP SIGNATURE-----