Add checksum attribute for binary downloads, closes #128