md5 hash for manifest as well