Test the case when the manifest reference has invalid hash: this is the
more complex situation. A simple situation is when a direct
(non-manifest) reference is broken.

Change-Id: Iaea139abc460050768cfbc236cacb1fd94418b36