Use the right md5sum

The previous one was for the tar.xz package instead of the .tgz