check the md5sum of the tarball