add support for md5sum checks for mirrored tarballs of packages with version control...