I downloaded this file from the LibreOffice website and there was no digital certificate and the SHA-1 and MD5 hashes didn’t match. I downloaded the same file again but this time from cnet and again the same thing. Have I download a bad file? What’s going on? Here are the MD5 and SHA-1 hashes from the files I downloaded.
MD5: 78e05827b0d2cc2a2d21529b94518bc3
SHA-1: 58bcb5e5f4a9b002b62c573f36dae669516ff97d
The initially provided windows installer were not signed, they were replaced with signed copies, the current md5sums are the ones of the signed package.
The contents are the same, the only difference is the digital signature.
The signed package has md5sum e95758133c9275258683885e7c3b8bb3 & sha1 hash da9bd1f03a17cd15d5fdf4713f4490ea65fcef4b
You did download the unsigned package, see also
http://www.mail-archive.com/users@global.libreoffice.org/msg22669.html