It's been done by @nahimilega.
We iterated over it.
Now a discussion is in-progress with the gnu sysadmins to determine if we can improve over their gnu manifest so they can provide a sha256 checkums.
The end goal being allowing us to be more optimal in terms of artifact downloads.