Removed hardcoded SHA-256 digest from checksum verification methods

The checksum verification methods read all provided digests from the file (manifest or signature file). If at least one matching digest is found, the verification is passed. Before, the methods were looking only for SHA-256 digest.

Added test, checking this for both manifest file and signature file.