This signature file may be used to cryptographically verify file integrity,
like this::

    $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D
    $ gpg --list-keys 0xA16EB94D
      pub   2048R/A16EB94D 2008-08-15 [expires: 2023-08-12]
      uid   Turnkey Linux Release Key <release@turnkeylinux.com>

    $ gpg --verify turnkey-oscommerce-12.1-squeeze-amd64-vmdk.zip.sig
      gpg: Signature made Tue Jun  4 14:53:11 UTC 2013 using RSA key ID A16EB94D
      gpg: Good signature from "Turnkey Linux Release Key"

For your convenience we also include file checksums:

    * sha1sum  ac2292ee86ae382d445563aa1bd043ca222aca9f
    * md5sum   90dd44ecb14f3e3aee931116d2562aa2

You can calculate these on your end and compare to check for errors, but
cryptographic verification is recommended for security reasons.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iQEcBAABAgAGBQJRrf9QAAoJEIXCXpWhbrlNFywH/11YFNb8Ia6ny6+ypZ7mhCNw
OdewlJKzO5gYL7JCq2xLFjagmZIyalUYj4IXrTTk0cnR8c/BPpJTtP+OSuwwJysy
wmSbrcp5crU0bQGO4xV6bxNnn1looOyTLIS0+pN5qR9H/1u1t3qaChwK0tstGv+R
ARjNSMJKyttGsiBDxfuYqW6RKHbOhH5QfwXRuMmsECDi+14wYbPCsQh3M011rht3
kIwty2ab0Vtpt/bOujy9yC/woifpuBK5ijNJJLtahEDE6deziBAH68mZvcOdcfpx
nCT6prLADNBIKj6RJPRSxuvlf4IErhtXUbhoAr19Bb3UJatcSauLYTY0H/WtdWk=
=yzTB
-----END PGP SIGNATURE-----