Assertion: jar artifact | /r/RelatedTo | a pgp signature
Facets:
Source sentences:
text: The released JAR artifact is associated with a PGP signature, an MD5 and SHA checksum which can be used to verify both the authenticity and integrity of the binary software artifact.