code: def verify_data_signature(self, signature_url, data_url, data):
          
  
          req = requests.get(signature_url)
          if req.status_code is 200:
              tm = int(time.time())
              datestamp = datetime.utcfromtimestamp(tm).isoformat()
              sigfile = "repo-{0}-tmp.sig".format(datestamp)
              logger.debug("writing {0} to {1}".format(signature_url, sigfile))
              with open(sigfile, 'wb') as f:
                  f.write(req.content)
          else:
              raise RepositoryMissingSignatureError(signature_url)
  
          verified = self.gpg.verify_data(sigfile, data)
          try:
              os.remove(sigfile)
          except OSError:
              pass
  
          if verified.valid is True:
              logger.debug("verified {0} against {1}".format(data_url,
                                                             signature_url))
          else:
              raise RepositorySignatureError(data_url, signature_url)
docs: Verify data against it's remote signature
  
          :type signature_url: str
          :param signature_url: remote path to signature for data_url
          :type data_url: str
          :param data_url: url from which data was fetched
          :type data: str
          :param data: content of remote file at file_url