This signature file may be used to cryptographically verify file integrity,
like this::

    $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D
    $ gpg --list-keys 0xA16EB94D
      pub   2048R/A16EB94D 2008-08-15 [expires: 2023-08-12]
      uid   Turnkey Linux Release Key <release@turnkeylinux.com>

    $ gpg --verify turnkey-orangehrm-13.0-wheezy-i386-xen.tar.bz2.sig
      gpg: Signature made Fri Nov  1 09:27:13 UTC 2013 using RSA key ID A16EB94D
      gpg: Good signature from "Turnkey Linux Release Key"

For your convenience we also include file checksums:

    * sha1sum  8c76c6b2c440f4eb88223080f793ef9e7acd9ac8
    * md5sum   52dbbc868d82dddb2f08206e9c9a02d2

You can calculate these on your end and compare to check for errors, but
cryptographic verification is recommended for security reasons.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iQEcBAABAgAGBQJSc3PoAAoJEIXCXpWhbrlN5BQIAISSIQPJ7MWJzhbBDE7DCQKg
S3kg3hd3ecYT0an0npV/t8Hr1LUbWECeeSNcMhIa75nmwU1vpaaf1zMty8VK59rT
XfagAe2d79DfJID/MxC3k3FaYYOb7nsufINnzvEdSrFo3wmbRbHJdTx05Ti4gzmX
YEvYlwAHIe8SB+UkzN3p2eTX4244rP9ljPnLbbQbcZeYFfs+0nZRH6c1eRXFdWaQ
fDZRI8K7DrRI34FMQt+umJt5tuTXApu9eJZB2szDSSQJa8yndDgiXDf13BJI0Oww
1U/zrkiYYZgD4dSbXNa1srTW+mKsbrzy4x2YxKX1uONHD9UA7rHEINnD/XFEspQ=
=KJs5
-----END PGP SIGNATURE-----