gozes, there probably is an RFC about it. It's just a sha256 of the body.