It is an either or message. The package is not corrupted - but for unknown reasons your system does not have the manjaro-keyring that was updated early October.
The answer to your problem is to do
Either
sudo pacman-key --recv-keys fh@manjaro.org
sudo pacman-key --lsign-key fh@manjaro.org
Or
sudo pacman -S manjaro-keyring
sudo pacman-key --populate manjaro
Then rerun the update.
pacman-key reference
$ pacman-key -f fh@manjaro.org
gpg: Note: trustdb not writable
pub rsa4096 2017-05-30 [SC] [expires: 2026-08-21]
*** This key has been disabled
04BB 537F 5BC2 D399 BFA7 2F8F 17C7 52B6 1B2F 2E90
uid [ full ] Frede Hundewadt <fh@manjaro.org>
pub ed25519 2024-04-25 [SCA]
11DE F506 FD67 0B95 80A8 BEFF 6F12 0DAE C909 FAD7
uid [ full ] Frede Hundewadt <fh@manjaro.org>
sub cv25519 2024-04-25 [E]
gpg reference
$ gpg --finger fh@manjaro.org
pub ed25519/0x6F120DAEC909FAD7 2024-04-25 [SCA]
Key fingerprint = 11DE F506 FD67 0B95 80A8 BEFF 6F12 0DAE C909 FAD7
uid [ultimate] Frede Hundewadt <fh@manjaro.org>
sub cv25519/0xDBBBB3C4C139A140 2024-04-25 [E]
sub ed25519/0x9CEF1D38B506C62E 2025-12-31 [A] [expires: 2028-12-30]
pub rsa4096/0x17C752B61B2F2E90 2017-05-30 [SC] [expires: 2026-08-21]
*** This key has been disabled
Key fingerprint = 04BB 537F 5BC2 D399 BFA7 2F8F 17C7 52B6 1B2F 2E90
uid [ unknown] Frede Hundewadt <fh@manjaro.org>