This signature file may be used to cryptographically verify file integrity,
like this::

    $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D
    $ gpg --list-keys 0xA16EB94D
    pub   2048R/A16EB94D 2008-08-15 [expires: 2023-08-12]
    uid   Turnkey Linux Release Key <release@turnkeylinux.com>

    $ gpg --verify turnkey-moinmoin-12.0-squeeze-x86-xen.tar.bz2.sig
    gpg: Signature made Tue Aug 21 15:58:51 UTC 2012 using RSA key ID A16EB94D
    gpg: Good signature from "Turnkey Linux Release Key

For your convenience we also include file checksums:

* sha1sum  5c584d694800e2466db59dd476291e7fd43c10ec
* md5sum   d6792126e92057dcce9fdbd865d9390e

You can calculate these on your end and compare to check for errors, but
cryptographic verification is recommended for security reasons.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iQEcBAABAgAGBQJQM7AyAAoJEIXCXpWhbrlNNmIIAId2o8ZqkvS0s4LSge5e8qv2
Ucz43Bzj0b8DwifbOgNW3CkARPn11NawH60uO3NuKJzo/w3QV2LhxTW4xeSTwZko
coMsnlYFxvuSVfmWt2i8ttQWE3LqAIADjBmdyZQZQ/a8cqBL+KSjOXust4gU4AHF
s231brL7JxCBE/5yqbh1eM5hexE2SgFfnXww7g+hduYZfH8eOf2Ao7V7CITNQyJp
QaEknD6r/RvktaiLULZyKLb70CMBFCsWG8YT73QVJdnVqxP7M+iGdreJ2a/AF7i1
CKwDqXgwu4WvhJ1GOWrkZ8hiY0kqp/19gcT6yLK+lPJV/0OHlS9NoWA445d/zBc=
=2OjA
-----END PGP SIGNATURE-----