sha256 checksums of releases