New comment by leahneukirchen on mblaze repository https://github.com/leahneukirchen/mblaze/issues/202#issuecomment-771586339 Comment: Putting an external signature into a GPG signed part seems weird, as you could just sign the GPG part in the first place. But on this content mverify should work.