-r repo -g should only get the GPG key, not CHECKSUMS.md5 etc.