This signature file may be used to cryptographically verify file integrity,
like this::

    $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D
    $ gpg --list-keys 0xA16EB94D
      pub   2048R/A16EB94D 2008-08-15 [expires: 2023-08-12]
      uid   Turnkey Linux Release Key <release@turnkeylinux.com>

    $ gpg --verify turnkey-tomcat-apache-13.0-wheezy-i386-ovf.zip.sig
      gpg: Signature made Tue Oct 15 19:31:48 UTC 2013 using RSA key ID A16EB94D
      gpg: Good signature from "Turnkey Linux Release Key"

For your convenience we also include file checksums:

    * sha1sum  53c8e33a2c1fabcf6743d79500d158c75b0f5347
    * md5sum   c649bf3386913b55a64df4be629af04c

You can calculate these on your end and compare to check for errors, but
cryptographic verification is recommended for security reasons.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iQEcBAABAgAGBQJSXZgWAAoJEIXCXpWhbrlN25gH/3p5YeGif1auf37NpUp9G10G
2xxL8CLnplY927upFTY63XojCDsYtwpOb9gFVS2Mv8gSCFSeFaZ0EIaY4NY43LFv
KmenPNfpC25ybMSVDEfCnWHud2fKTxjbMJsmtJuAT/m5dgIlyALzEoo7eZKw8dn0
/+ioBPKGmOmK8VrfOo0Qt6+E5H10yr4hVpRHNzTVHLkVi9jf+56GdlPX0PFp2+E3
jmRla9QBgGEVayadiVzWhgsXONXltuV+3O85utLlgSs+7B+urqq8yNzlzNLN4Tsh
0Pv69tFTbKBrQAzLRxLVJJ6FBhYVAaQJmlO5Q3c6YfTzdNKf9UCV0jd1eg3dRd0=
=zCNi
-----END PGP SIGNATURE-----