add src.rpm sha512 hash to verify the downloaded files.