Ferringb recently told me that this info apparently wasn't mentioned explicit enough in Glep 44:
Manifest2 records do not contain a MD5 checksum. The only guaranteed checksum type there is SHA1. So once manifest1 is phased out the tree will not contain MD5 checksums anymore. This is just a reminder, not a request for discussion (unless you have a *really* good reason why MD5 is still needed) Marius -- gentoo-dev@gentoo.org mailing list