Hey thanks - that's just the sort of thing I was looking for. You're right though—it isn't obvious. Knowing to look in the pumpking's checksum file is the key. :)