Fortunately the hash is the same, so I don't really need to check authenticity. Uncovered by c3255fe8.