the gpg signature for sha256sums.txt has changed (fixes #90)