Checksums

this pull stacks on top of #6 

I added verification of the repo metadata checksums. This pull closes #7