We're now using 'manifest-hashes = SHA256 SHA512 WHIRLPOOL'