Checksum manifest, phase 2

Now with verification

Todo:
Move manifest stuff to a separate file
Move work to a separate cmd and add parser