All servers are running GNU/Linux Debian Stretch.
How do I verify integrity of the downloaded tarball with a GPG key and SHA-256 hash?
I downloaded the files from The official download page.
First, I downloaded the file I want to check, over a secure connection:
Then, I downloaded the hash sums containing file over secure connection:
Lastly, I downloaded the release signing key: