This signature file may be used to cryptographically verify file integrity,
like this::

    $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D
    $ gpg --list-keys 0xA16EB94D
      pub   2048R/A16EB94D 2008-08-15 [expires: 2023-08-12]
      uid   Turnkey Linux Release Key <release@turnkeylinux.com>

    $ gpg --verify turnkey-canvas-13.0-wheezy-i386-vmdk.zip.sig
      gpg: Signature made Tue Oct 15 15:02:52 UTC 2013 using RSA key ID A16EB94D
      gpg: Good signature from "Turnkey Linux Release Key"

For your convenience we also include file checksums:

    * sha1sum  8446c294739449ed29dc25dc5767a960bba15508
    * md5sum   c4dfb7fcec3a3c91e8a2b4c54b8ccdbd

You can calculate these on your end and compare to check for errors, but
cryptographic verification is recommended for security reasons.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iQEcBAABAgAGBQJSXVkBAAoJEIXCXpWhbrlN230IAM++QEMPsJlUXNgsNGbUvaWU
RUTtw7P4OeMZRaAWb3O3VUlPokDxlD2ixICbjmp0agdZPf1Dpw5nt8tDq1RR7tOO
VeqlNY/0LucEDo5vTVHpQ/1i0XkV0YULv0eBcQaAEGIXMl4MY3Ja1ti8LnQQ55FD
dg+Aj8Un0foyv6Z/TguBVyRkppY22MDB3yb5vD7xOpfSSM9+lG7FpeEhsKUDkRIt
Ldp358nIuDSW6WQ6fxCQSTb8VEhy+odMM7bwNfQe6AxHF1hOK0TjRQUt+smkM9L0
2NiEH+0LybEg2ptw9aMvoH4TsMXKZsyaLDNtBvLqyd990p93TGlcnw5i/aTemuQ=
=M/tu
-----END PGP SIGNATURE-----