The server computes the MD5 checksum asynchronously after upload, so the object returned from Put and Update often had no MD5 while a fresh listing shortly afterwards would report one. This broke wrappers which compare exact hashes, such as the hasher backend's fingerprint and the VFS cache. Retry reading the metadata for a short time after upload until the MD5 appears.