separate md5 integrity file from build.sh so we can reuse the build script with minimum modification