Manifest contains: DIST hardened-patches-4.3.4-2.extras.tar.bz2 1688847 SHA256 6ab21faa35c3de55627a0d783e7f1ada228b024032e1524617730f88f7282feb SHA512 58f9301354c7c7eff804c2c731719d2c6a9ac10352920189ebf8273d8756e6d7f07edbfab35ff5001f38245590b76ee6f717e022613b7cddeffde2f03b2c7ce8 WHIRLPOOL 8db847bba13cdf7956ff0b53378655c21885f848f4bbab36efabeaed526ae547cb08736912fe71ee15cfbe3ad157d671d493c720a5a70b9370a313702cf111e7 But the actual distfile is different: >>> Downloading 'http://dev.gentoo.org/~blueness/hardened-sources/hardened-patches/hardened-patches-4.3.4-2.extras.tar.bz2' --2016-01-28 13:09:51-- http://dev.gentoo.org/~blueness/hardened-sources/hardened-patches/hardened-patches-4.3.4-2.extras.tar.bz2 Resolving dev.gentoo.org (dev.gentoo.org)... 2001:470:ea4a:1:5054:ff:fec7:86e4, 140.211.166.183 Connecting to dev.gentoo.org (dev.gentoo.org)|2001:470:ea4a:1:5054:ff:fec7:86e4|:80... connected. HTTP request sent, awaiting response... 200 OK Length: 1688802 (1,6M) [application/x-bzip2] Saving to: ‘/var/cache/portage/distfiles/hardened-patches-4.3.4-2.extras.tar.bz2’ /var/cache/portage/ 100%[=====================>] 1,61M 1,15MB/s in 1,4s 2016-01-28 13:09:53 (1,15 MB/s) - ‘/var/cache/portage/distfiles/hardened-patches-4.3.4-2.extras.tar.bz2’ saved [1688802/1688802] !!! Fetched file: hardened-patches-4.3.4-2.extras.tar.bz2 VERIFY FAILED! !!! Reason: Filesize does not match recorded size !!! Got: 1688802 !!! Expected: 1688847 Refetching... File renamed to '/var/cache/portage/distfiles/hardened-patches-4.3.4-2.extras.tar.bz2._checksum_failure_.mya6ycgo' !!! Couldn't download 'hardened-patches-4.3.4-2.extras.tar.bz2'. Aborting.