I'm familiar with the concept of downloading a file and manually checking it against a published checksum. See How to verify the checksum of a downloaded file (pgp, sha, etc.)? and Is there a command line method by which I can check whether a downloaded file is complete or broken? for examples.
I would now like to maintain my own list of target URLs and expected checksums, something like:
https://example.com/file.tar.gz, SHA123456...
https://example.org/list.txt, SHA1A1A1A...
...and automate the download-and-check process.
Before I make the mistake of hacking my own solution, is there an established way to do this on a Debian-based distro?