Where to get signature for updater.phar from?

I want to update from 32.0.9 to 32.0.10, but the automatic update wants to go to 33.0.4. So I try to execute updater.phar with the url of the 32.0.10 zip. Where can I find the correct signature to pass with the --signature= argument? The PGP signature from nextcloud-32.0.10.zip.asc is not the correct string. According to updater.log correct signatures are about half as long as that.