Use correct checksums for gzip

I verified the download against the signature.