We could remove JSONURL and only have AssetURL, as the verification function tells you how to verify the hash.
We could then use a compact array to determine the length of verification funcition, verification data and source url.
e.g.
verification function + verification data (e.g. hash) + url