sources:
  "rosa-release.tar.bz2": f1242f08ec3d3437f1ec329ab7b2be8aaa1eaffc