SHA256 and SHA512 hashes for zip-archives

https://commons.apache.org/proper/commons-codec/

webservice should give out hashes on the download page