I just noticed that if the software needed to be do the checksum step, they usually showing the SHA-256 in the download page as well.