Within the requirement R-130206 (support ETSI NFV SOL004 Package Authenticity - option 1), we need to improve the implementation.
According to SOL 004 v2.5.1, chapter 4.3.7 (Non-MANO artifact sets in a VNF package):
“…If the Manifest file provides the integrity assurance of the VNF package (option 1 in clause 5.1), these artifacts shall also appear in the list of blocks of name-value pairs specified in clause 5.3….”

Essentially, if authenticity option 1 is in use, then all files mentioned in non-mano-artifact-sets need to be reported as name-value-digest-algoritm quadruples.

In case there is a mismatch between files mentioned in non-mano-artifact-sets, and the sources mentioned in the xNF package, then a validation error needs to be presented to user: "Mismatch between contents of non-mano-artifact-sets and source files of the package"