Also check the MD5 sum of third party MANIFEST.bz2 files, if available.