https://www.torproject.org/dist/torbrowser/3.5.3/sha256sums.txt-mikeperry.asc is a signature by erinn
The file name sure implies that it should be a signature by Mike.
Is our (intended) process explained anywhere? I don't know if this is a bug or a (bad) feature.