Fix typo in gpg command and handle the .sig file properly.