put checksums in message manifest instead of in a dedicated md5sum file