This signature file may be used to cryptographically verify file integrity,
like this::

    $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D
    $ gpg --list-keys 0xA16EB94D
      pub   2048R/A16EB94D 2008-08-15 [expires: 2023-08-12]
      uid   Turnkey Linux Release Key <release@turnkeylinux.com>

    $ gpg --verify turnkey-codeigniter-12.1-squeeze-amd64-xen.tar.bz2.sig
      gpg: Signature made Tue Jun  4 13:01:48 UTC 2013 using RSA key ID A16EB94D
      gpg: Good signature from "Turnkey Linux Release Key"

For your convenience we also include file checksums:

    * sha1sum  ca3f67597ddf7dc9f97d765e95c35f1919be7434
    * md5sum   949f6d7fbd5a277def775c9bbe4eadfc

You can calculate these on your end and compare to check for errors, but
cryptographic verification is recommended for security reasons.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iQEcBAABAgAGBQJRreU0AAoJEIXCXpWhbrlNBV0H/idWPjob59rBNFUtzDO36S5Z
JVJkcjBEfm7xRFrJopjEtDo1MnYZCwxXIYjPs06WvbvNKHrtu5y9HcNuxH/JE0P0
S/D0HydtphWWv1U3xHOtJ3FErP46xE9V1x1Dc+pJHtqfUw4lGJo+PYdW419s9cDQ
wKyQcCRlqi3ZfuO8eqOonAJLUD7clpYUzxl/WuaMZ4e2+lX/z7/3s+WWjmTXTcaF
EkfyCGvKG9zJBfiPmhUvWoI3Tuiu1qidCZmy2g+YQIwdMPX16yM/n+c550dvpGun
49Pw1v5JcCd1F7hW2I/OfSfqvm/5NVhvhf+5F4ISRBQyErBbgEh0RnyDfrfrogQ=
=RgQB
-----END PGP SIGNATURE-----