Audit of checksums for Bagit packages always reports that checksums don't agree

[amgciadev]

I have been testing locally with both export formats: METS and Bagit and when using the Bagit format the Audit curation task always fails.

Steps to reproduce:

1. Generate AIPs for a site
2. Run curation task auditaip

The curation results always report differences in checkums.

[nwoodward]

I've confirmed this behavior during BagIt testing locally. I think the problem is that the manifest-md5.txt files in the bags are not created deterministically, and while the checksums of the individual files in the list in that file do match they are not in the same order. This causes the MD5 checksums of the tagmanifest-md5.txt files in the remote and local archives to differ.