Which you plan to use (EVE-NG, GNS3, or PNETLab )?
echo "expected_hash_here ne40ev800r011c00spc607b607qcow2.qcow2" | sha256sum -c - ne40ev800r011c00spc607b607qcow2 download verified
Then visually compare or automate:
When downloading through ICS Lite, the client simultaneously pulls both the .qcow2 image and its associated .cms or .asc cryptographic signature file. Which you plan to use (EVE-NG, GNS3, or PNETLab )