*: sha256 -> sha512

Continuation of https://github.com/coreos/rocket/pull/209
*blinks* they are probably wrong. I feel pretty weakly about keeping them in sync with reality, it's a PITA. Maybe we should just add a disclaimer?