Minecraft SHA-1 hash download

As far as I can tell, these two checksums are MD5 and SHA1 respectively. They are related to the Maven repository that the JSON file references as per the url tag for each library. The Forge artifacts likely followed this: https://blog.packagecloud.io/eng/2017/03/09/how-does-a-maven-repository-work/#checksumasc

In short, the previous URL explains briefly how a Maven repository works and references these 2 checksums as download verification. Another reference to the creation of Maven checksums also points to them coming in pairs: Maven checksum pom setting?

Here's a plugin that can interact with the checksums: http://checksum-maven-plugin.nicoulaj.net/

tl;dr These are Maven repository checksums that comes in a MD5 and SHA1 pair. In a C# setting, there are a number of options to do verify both:

answered Mar 1 '19 at 19:36