Are the hashes in the release notes correct?
I get
C:\Users\...\Downloads>certutil -hashfile v2.0.6-passport.bin md5
MD5 hash of v2.0.6-passport.bin:
93f87f44d2635339926c41e151ff5de7
CertUtil: -hashfile command completed successfully.
C:\Users\...\Downloads>certutil -hashfile v2.0.6-passport.bin sha256
SHA256 hash of v2.0.6-passport.bin:
1aee526cfcd28d262c00b74740adb0e75dbe89de9e81fe6f6896d88c6163cb72
CertUtil: -hashfile command completed successfully.