Load fingerprints
Verify signature
Use simpler .sig bundle so only 1 fetch is needed