each of these is verified: the current sha1 and the new sha256 are both correct for the given download.
Wish I could have used a cleaner DL url, but the official site uses a magnet link (lol). So, MacUpdate it is. It works, though!