Hi Gary,
Validating the checksums I get the same result as you. Looking at the timestamps of the files at Index of /groups/public/com/adobe/aem/uber-jar/6.3.0 it seems to me, that the jar file is much older than the md5 and sha1 files.
Can you raise a Daycare ticket and ask if that's a problem?
Jörg