Adding SHA-256 calculation and adding the relevant records inside the manifest file as described in the User Story attachment

• VNF-SDK calculates the SHA-256 hash per each artifact listed in the manifest file
• Add “Algorithm” and “Hash” records inside the manifest (right below the “Source” record) as shown in [^ONAP Beijing Manifest File.pptx]

When VNF package (CSAR file) is on-boarded/tested by SDC/VNF package validation entity

• An onboarding/validating entity calculates a hash value on every artifact content referred by a URI mentioned in the "Source": record.
• The algorithm for calculation is specified in "Algorithm" record
• Compare the calculated Hash with the code specified in the "Hash" record per each artifact.

Plenty of Java-based open source for SHA-256 calculation in both StackOverflow and Oracle Java developers forum.