Are all sha256 checksums for v0.10.2 incorrect?

From what it looks like to me, many of the checksums do not match the published jar files.  The contents of `checksum-sha256.txt` also looks strange with some repeated lines with DIFFERENT values.  Am I misunderstanding or is the published release bad?
