sha1sums for unsigned MSIs