Can an .ipsw firmware restore image's origin be verified?
All IPSW SHA1 hashes can be found on The iPhone Wiki - Firmware.

You can get the SHA1 of your downloaded IPSW by running the following Terminal command:

openssl sha1 &lt;path-to-ipsw&gt;


The output can be compared to the relevant SHA1 provided on the wiki.