For example in the latest release, there is: LLVM-22.1.0-Linux-ARM64.tar.xz Which has 2 signature files: LLVM-22.1.0-Linux-ARM64.tar.xz.jsonl LLVM-22.1.0-Linux-ARM64.tar.xz.sig jsonl comes from the GitHub build and the sig is uploaded by the release manager.