Suppose I download a file from the web, say a Jenkins plugins hpi file. How can I verify the authenticity of that file if it\'s downloaded correctly? I am using the requests mod