Signed backend plugin keeps throwing modified signature error

Grafana Plugin Development Signing & publishing
3

I checked but all the files in the dist are all listed in the Manifest.txt. Here is the files list from manifest:

{
  "manifestVersion": "2.0.0",
  "signatureType": "private",
  "signedByOrg": "jeff18",
  "signedByOrgName": "jeff18",
  "rootUrls": [
    "https://example.com/grafana"
  ],
  "plugin": "conectifi-third-backend",
  "version": "1.0.0",
  "time": 1606775501632,
  "keyId": "7e4d0c6a708866e7",
  "files": {
    "gpx_third-backend_darwin_amd64": "3eca6d294ebed2235552cd5a46615ec4add5312542fe7a22d7e2f9414ec2b239",
    "gpx_third-backend_linux_amd64": "e8b93bf91109233f46ea3542ad350032a9b6bb961bd5a37440c58366fece1672",
    "gpx_third-backend_linux_arm": "3dc40560c44f1e308d666bcaff84565bbfe4b57ed51fbfa9857d628c0022debb",
    "gpx_third-backend_linux_arm64": "b764b8cc543fe89b7ac5aabd36b34a95ab664c1ac0eec7ff7d045e7ba6b0b234",
    "gpx_third-backend_windows_amd64.exe": "71ed89790519f2e502bd8adb18fd103329d0675d72fc7658558d39e2ad430d8d",
    "img\\logo.svg": "1defc6f7e585c67657bcfd8fddc599ee7dfa82f8674413f49fa274c2cd453ec6",
    "LICENSE": "e03ba41d7fab20700769fe4118bab50d800cb74f990353a05d2f5fff1c228363",
    "module.js": "51a42b2ac67c0200ede248eb162e4c5931f7856c56606f948a1c2979c5e0bddb",
    "module.js.LICENSE.txt": "0d8f66cd4afb566cb5b7e1540c68f43b939d3eba12ace290f18abc4f4cb53ed0",
    "module.js.map": "0dd62ea24ae9c802cfbe202d8c4d7606b2bea1d71f2d77d97c05755280f639f9",
    "plugin.json": "05fea1d3623b59f710a4128a4b5c9c1083721a4c608ccafe7af680067d357ab6",
    "README.md": "544bc207d260595f688f289c18afae4870460e2eff15c2c076d8eb4fe65e9496"
  }
}

test-third dist files
test-third dist files1560×923 77.8 KB

And here are all the files in the dist

PS: also, I know the rooturl is just the example grafana in this, but I have tried with proper urls, just the url didn’t have any effect on the signature being modified or not so for testing I just didn’t bother to change it. Will once resolved.