Apt does its sha256 checks on the uncompressed Packages file and that is correct in the Release file.
Apt does its sha256 checks on the uncompressed Packages file and that is correct in the Release file.