This signature file may be used to cryptographically verify file integrity,
like this::

    $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D
    $ gpg --list-keys 0xA16EB94D
      pub   2048R/A16EB94D 2008-08-15 [expires: 2023-08-12]
      uid   Turnkey Linux Release Key <release@turnkeylinux.com>

    $ gpg --verify debian-7-turnkey-tomcat_13.0-1_amd64.tar.gz.sig
      gpg: Signature made Wed Oct 16 10:33:36 UTC 2013 using RSA key ID A16EB94D
      gpg: Good signature from "Turnkey Linux Release Key"

For your convenience we also include file checksums:

    * sha1sum  34fb2ac302a12814b55c527afb4f729da6a713e6
    * md5sum   962b7e2d255ce84b07a7b1de54796aa7

You can calculate these on your end and compare to check for errors, but
cryptographic verification is recommended for security reasons.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iQEcBAABAgAGBQJSXmt4AAoJEIXCXpWhbrlNzJEH/3ZrlV3WGFIG0C9M6sLZsJKI
lcB9LWW87oInxTHW2fB2u0ujzh7OfwQ0hxKZEtWgQ7vGHS/P+tWTbqYfN4YT21ka
M7W0g+XaCcdSBeN4YS3A96mOE8Fyd1Rii58NjOYt+NjiCD4GMAuXWAmGRhQkJL/t
on1ghSO+IMtG1uz72DD6t3Aiax1tPImof5aOZ0k8bCtNeStEWPVlKut8C3YEWpx1
zREK2vb4PcYsHqz8LXkr400TubcnIcR92nShI+5NxcUNMjqf4xkKOsjdtcVGwS2x
Dkez+wZxVGm9cv/6NaGELw3lcTfqyzuC5TECiMaU6YlwIrmpmbstfXoTIpvT9HU=
=1L0H
-----END PGP SIGNATURE-----