use SHA256 to use cached download