Signatures

Digital signatures and checksums will be stores in a simple XML file. There are different signatures for the different files in a chunk, and per file multiple signatures are possible.
   <signatures>
     <md5 file="metadata-1-1">db9557f3fdd690d07bc9f2682b7d0447</md5>
     <md5 file="data-1">732813edc871575e107dd8324ed417ce</md5>
     <pgp file="metadata-1-1">
   -----BEGIN PGP SIGNATURE-----
   Version: GnuPG v1.0.1 (GNU/Linux)
   Comment: For info see http://www.gnupg.org
   
   iD8DBQA4w1bAP4VifPYwQCsRApV7AJ9xporhmU11+nOYgHFSVQJ++UtHsgCgwawT
   ruLKGjuFPQnNmLamTU9OTEI=
   =Wg9K
   -----END PGP SIGNATURE-----
     </pgp>
     <pgp file="metadata-1-1">
   -----BEGIN PGP SIGNATURE-----
   Version: GnuPG v1.0.1 (GNU/Linux)
   Comment: For info see http://www.gnupg.org
   
   iD8DBQA4w1blP4VifPYwQCsRAp0ZAJ9zBMy75Og3RpoYceg2ULgNb1MynACfXk6u
   3mKwj/m750YKblxz4jjeq1k=
   =N9zL
   -----END PGP SIGNATURE-----
     </pgp>
   </signatures>