Just noticed I have checked the gz file hash while it was being downloaded (again) and checked the img file from a previous download.

I re-downloaded it using wget and got the right checksum. Thanks!