If it's not the RPM header checksum, would it be more clear to specify what it is and where it comes from?