Generated new test data but signature verification still fails; signature taken over sha256(update.json)