This signature file may be used to cryptographically verify file integrity,
like this::

    $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D
    $ gpg --list-keys 0xA16EB94D
      pub   2048R/A16EB94D 2008-08-15 [expires: 2023-08-12]
      uid   Turnkey Linux Release Key <release@turnkeylinux.com>

    $ gpg --verify debian-7-turnkey-tomatocart_13.0-1_i386.tar.gz.sig
      gpg: Signature made Tue Oct 15 19:33:31 UTC 2013 using RSA key ID A16EB94D
      gpg: Good signature from "Turnkey Linux Release Key"

For your convenience we also include file checksums:

    * sha1sum  a420bb885ed5678805f58ef10e32b3c5a92adde2
    * md5sum   b6c860934420776ecc3fd8b31792cbe9

You can calculate these on your end and compare to check for errors, but
cryptographic verification is recommended for security reasons.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iQEcBAABAgAGBQJSXZiEAAoJEIXCXpWhbrlNZa8IAJzyVrgnwP01O/MyG9f+zv0t
qBO3s3XW5CdF9k0dF42mc14M09Ou8CFwk4Q7o+7rYb5I5HW1opRaQ6ZvY87eIXsZ
PGdc8ODwXXMnucf8Rxjxytm+JahOpGsQqhcpzFF9M8CL8Ld+lEQ2EFcOr+y3uVMJ
wtOqCgvQmHR04Ra+97itJ1gytO9+w8hF4JTkWsqv2ffGu/dK31yOdCSfJJSMm9xi
swrjPVhz1yeiNy9aVg9h7ZiyJ/yBW1CWE95w1ygw4zhCzGjTEPlqSKUJLxB/++CE
usDMYIe85AoIhWdPxhuNiYGSwaTMzTGe8ti6KoDe33dULCzU//Hv2R0ChzzVNVw=
=NJRz
-----END PGP SIGNATURE-----