as oga@ points out, -tvv provides sha1's, nice!