Verify RPM contents against the primary.xml hashes