Not sure how many people of this days still know how to operate with console commands.

if you drag the file onto www.virustotal.com you will see the SHA256.
Also 7zip shows it as somewone has pointed out.

The problem however really is that if the Main-Webpage is compromised so the links and the SHA256 file itself in the download will be compromised.
That means you have to check from the Github and that is then already a step too much for the lazzy user.