cravuhaw2C:
The 5.5-release ISOs do not contain a SHA256.sig file, because the ISOs would have required self-signatures. The other installation media options do not have this requirement, which is why the signature file is available outside the ISOs.
http://marc.info/?l=openbsd-misc&m=139393982414320&w=2