Signed digest format?
How are you generating sha256sums.txt.asc? I'm trying to set up a system to verify the sources automatically, but it doesn't appear just to be the gpg-signed output of "sha256sum" as it has the hash, filename, and file size on different lines.