This signature file may be used to cryptographically verify file integrity,
like this::

    $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D
    $ gpg --list-keys 0xA16EB94D
    pub   2048R/A16EB94D 2008-08-15 [expires: 2023-08-12]
    uid   Turnkey Linux Release Key <release@turnkeylinux.com>

    $ gpg --verify turnkey-rails-12.0-squeeze-x86-vmdk.zip.sig
    gpg: Signature made Tue Aug 21 12:22:30 UTC 2012 using RSA key ID A16EB94D
    gpg: Good signature from "Turnkey Linux Release Key

For your convenience we also include file checksums:

* sha1sum  e8498c5aa0abe179a0a3fe534911e9441146dacc
* md5sum   d18f39a159297ab9b94e2783d429ad03

You can calculate these on your end and compare to check for errors, but
cryptographic verification is recommended for security reasons.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iQEcBAABAgAGBQJQM315AAoJEIXCXpWhbrlNPIcIAOXFV1qTbkJQFZGXUIdhoToR
LRsO5pyeJ74zNu8qEnbxshMzxHkNgj+9Yc/s87Bu29VVSsfmVd28Bb4/TIFi0vuf
H/0fkU42BsEbW6ZnnuTTPeHrySvLLYb30xFmX9Rxkn3hxf7NMQNeR31QAMMBNUND
Vy8dtpml6vRymp7sPaWFSaMn/idCoB3Yt3kowE/zOJ8rKl0LXkoJHNznGfvh2olW
4FZkURp86YPGqIQB/Aa8Q/oiZcy9jdgAlbt6Dc7jP5JYkBeRzr+ew/jJMfEUseWQ
CVA7DInS0rfJFzcmRTnyPtiiiJYJrsxnf6tcJaCuMBv8q9WOA2bHl2Er7st8tnE=
=X5y/
-----END PGP SIGNATURE-----