It has always been possible to generate keys with the same key ID (it's only 32 Bit, duh). There has now been a public demonstration of just that.
Do what we should have done ages ago by listing the full fingerprint only.
MD5 and to a lesser degree SHA1 are no longer useful to detect malicious modfication, so don't mention them.
Clarify that the numbers after the exe are hashsums.
Closes#10066