diff --git a/assets/nwjs.manifest b/assets/nwjs.manifest
new file mode 100644
index 0000000..26f4eed
--- /dev/null
+++ b/assets/nwjs.manifest
@@ -0,0 +1,4 @@
+a9e66b292c80e86f51b616933e8491dad4007da1abe4a0ee85a3477edfd2750f  releases/nwjs-v0.34.5-linux-ia32.tar.gz
+2d50bc19619e9a26ace46da3a4f3a4a0e9850920267300eb35759df4cb92e2b5  releases/nwjs-v0.34.5-linux-x64.tar.gz
+10409d5519662f25c1a97b027492da13cc42c8cc464c08b76de945969ae33413  releases/nwjs-v0.34.5-win-ia32.zip
+77138f6965ad1ae6eba3390e5c6403d3156431ac5247fac39f4491a7c625a216  releases/nwjs-v0.34.5-win-x64.zip
diff --git a/assets/release.sh b/assets/release.sh
index 374288c..7021f13 100755
--- a/assets/release.sh
+++ b/assets/release.sh
@@ -3,6 +3,7 @@
 
 PACKAGE_NAME="asciiblaster";
 RELEASE_DEPS="cpio find gunzip rm sed tar unzip wget zip";
+NWJS_MANIFEST_FNAME="assets/nwjs.manifest";
 NWJS_PLATFORMS="linux-ia32 linux-x64 win-ia32 win-x64";
 NWJS_VERSION="0.34.5";
 NWJS_SUBDIR="nwjs-v${NWJS_VERSION}-%NWJS_PLATFORM%";
@@ -51,6 +52,9 @@ release() {
 	else
 		wget -cO "${_nwjs_fname}" "${_nwjs_url}";
 	fi;
+	if ! sha256sum --ignore-missing -c --status "${NWJS_MANIFEST_FNAME}"; then
+		echo "error: SHA256 sum mismatch for \`${_nwjs_fname}'" >&2; return 1;
+	fi;
 	rm -rf "${_release_dname}"; mkdir -p "${_release_dname}"; extract "${_nwjs_fname}" "${_release_dname}";
 
 	cd "${_release_dname}/${_nwjs_subdir}";