diff --git a/test/data/manifests/f32-base.json b/test/data/manifests/f32-base.json
index 82650354..1c1bef09 100644
--- a/test/data/manifests/f32-base.json
+++ b/test/data/manifests/f32-base.json
@@ -16,6 +16,7 @@
                 "sha256:22d311f22902d592f72bd0fb4010a682f796e5a4698d5ea209848468a2d5aa96",
                 "sha256:a346990bb07adca8c323a15f31b093ef6e639bde6ca84adf1a3abebc4dc9adce",
                 "sha256:7a97e71cd552285ead303d07dbb6417403edf45c0a531e02cf4ebfb0efda4975",
+                "sha256:cd01ae91895e60f189106a159bb551f906a8b663110f421ad6ee83c9e008851e",
                 "sha256:842f7a38be2e8dbb14eff3ede4091db214ebe241e1fde7a128e88c4e686b63b0",
                 "sha256:73f6a9108f7d5ec3cd89c31dbbaa874ae28cd5cb443ef69700a1218903ee2fc4",
                 "sha256:7023687eb65baa56a9b4c3ffde1e439b3d41b03ac4ad35a1a1fc3903464548f7",
@@ -55,6 +56,8 @@
                 "sha256:e0b1da98020a740991dbb70b42c0ff1eece9e268a461e555a5ec763bda1645f5",
                 "sha256:1110261787146443e089955912255d99daf7ba042c3743e13648a9eb3d80ceb4",
                 "sha256:0b7cd6f6cb3b7cd9e0704dd6c62b65254b04cb870ab638b9bed4951564436e24",
+                "sha256:9369d4fed30402f45705b7a5cb51b6eeefb1dabbe0942c84514c6fdf1edac5e0",
+                "sha256:45132e53c649def28d63c199d8c3a3b9fd16fa8bca7426ad4e9c202e52a233b4",
                 "sha256:53992752850779218421994f61f1589eda5d368e28d340dccaae3f67de06e7f2",
                 "sha256:d0e5d0104cf20c8dd332053a5903aab9b7fdadb84b35a1bfb3a6456f3399eb32",
                 "sha256:9899cfd32ada2537693af30b60051da21c6264b0d0db51ba709fceb179d4c836",
@@ -79,6 +82,7 @@
                 "sha256:c1f957511b5e011e6f7995ed7bca9196703cf1214068f209e86b1dc4fd0e98bf",
                 "sha256:f4eb6d332b9aea8d8ef0a6ea8dc2b073d6bf5f2599d64f24111d8da2ee82ad48",
                 "sha256:d3a64fcef3de79a97541b21c71ddd00d4cca9039c930bc660d6c5479eabf5f26",
+                "sha256:8a03d482b5294f7452b2f9ce31ebb6aea9eefac002281c1b9152fbb1a0341987",
                 "sha256:a05178831a546e2001e52f065fc6969f36d2292efaee2971fe7a7e882cc8c813",
                 "sha256:3be681b78e919bfd82eb186c7393718f1d37abd0b1bb8b1a8571aefa11e7a248",
                 "sha256:60774007011889671c28158f599032f0db253c153ccae70f5e2f5840f2dc490b",
@@ -118,6 +122,7 @@
                 "sha256:6eb95e39b9771c4dde5f9954a74cef6be90522c28c7c4aa767ebe7a9d55fcdf9",
                 "sha256:1c68255945533ed4e3368125bc46e19f3fe348d7ec507a85a35038dbb976003f",
                 "sha256:f98f854a86c68b534f71e1f35852fabddbe2cbfe481b01bb15291b3363013b2a",
+                "sha256:aa5b658fd4a95c724b61eddadecdbcbc1b2a813ae681318ab092a2ed03954825",
                 "sha256:e740cc0a580639b887bda0039a779e750a32835be1fd8c64aa01183b4cbb98bf",
                 "sha256:884357540f4be2a74e608e2c7a31f2371ee3b4d29be2fe39a371c0b131d84aa6",
                 "sha256:ec6abd65541b5bded814de19c9d064e6c21e3d8b424dba7cb25b2fdc52d45a2b",
@@ -169,6 +174,8 @@
                 "sha256:ad6d7d9767e05978b14a39c08dba59ddc4396584576df194f77ed310a0816ae0",
                 "sha256:3f2cb9092d6f55f84dd9eacd5359dfb354772e5f38308328027c7758f4a06fb6",
                 "sha256:45fc2608b746fd841dd25919e9e4d44834154758aec8fb8b529c014b11c7917d",
+                "sha256:ec64add7d60a70fbaf14a083929f22bd2637c33d20d2a30b7e842caa6040f817",
+                "sha256:3343d9e7c90bd58e1e44ee07e7c59bb570ffc74da50f0607c5f5681a00b70e76",
                 "sha256:dedd37a96262c35763ab2dcbc19838f5cc39a2a3a392a650a80bd6d5ae42ff8b",
                 "sha256:3589b982ac0c2f5f6b47cde5cb7ec33c2c01d756dabf8c4ca64f6d9d0d78b35e",
                 "sha256:4c80ade4ac0889316930a8d181ea43fa2d1b2f1a6a5703c22f2b3ba191346eec",
@@ -178,6 +185,7 @@
                 "sha256:15f08ce979e48fd25be5e16d63d1c95c57f9abff7704005137ea00b958442939",
                 "sha256:7df4fa1a29772696d92866e890af6fbe006088f3407ed3e67b0e7867ef58d899",
                 "sha256:8df97dcfb42c1667b5d2e4150012eaf96f58eeac4f7b879e0928c8c36e3a7604",
+                "sha256:d439ffbe20c8c0e8244e31c0324d60cf959dc1cd6cecc575d7b34509a73e9386",
                 "sha256:8a0c00a69f9cb3a9ffacaf1cdc162c38a1faca76c9b976cb177bdc988902f2d4",
                 "sha256:f3908831ae53f43b07a4e196850d0e59cc89b50c97d838538c3185fd0eb0d569",
                 "sha256:af992ad02594b68f17d2da41104a26aee41d02639edf22332d7dbb1fe9af58a5",
@@ -201,6 +209,8 @@
                 "sha256:136a9cbae9c225be60718fdc8cc8988a55235d6502e451df77d1c5c765143850",
                 "sha256:3151132084577032b4c827eb577a1509950601888c6ff13a0a30b24252ee26d2",
                 "sha256:54b740cf7a75a7215168970378d9a1d6b9a5e4eb81159a874ce8ea5990436641",
+                "sha256:ee664c392a97cdd272f57980c6856b2c57567005fa0ad9cb16c388b645d014f1",
+                "sha256:9d220d8ee28cd0adf28e8fef547af92c3ec66e238747165939cf8e1a413ddf83",
                 "sha256:e2a04f4de125ff60a3cdc3d2b3718a4530a9c9240c9cf14f55938444c229539f",
                 "sha256:630ad20496ff00f76764e01b9302ccbe94e3e91d76ececef88bd9e8a890b1ac3",
                 "sha256:ffe5076b9018efdb1612c487f637af39ab6c3c79ec37311978935cfa357ecd61",
@@ -865,9 +875,18 @@
         "sha256:b149e5c36e0327ca9c749b3ac0d3746ff9f9e0df68d6d177c3d13273273077cf": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/y/yum-4.2.19-1.fc32.noarch.rpm",
         "sha256:140708561a2ec1c7709fd38d8b1b115d02da710b80eeecd65c2b8387d9d78ef9": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/z/zchunk-libs-1.1.5-2.fc32.x86_64.rpm",
         "sha256:c0fff40dc1092e18ed3e608bc6143c89a0d7775b9e0553319bb2caca7d324d80": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/z/zlib-1.2.11-21.fc32.x86_64.rpm",
+        "sha256:cd01ae91895e60f189106a159bb551f906a8b663110f421ad6ee83c9e008851e": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/b/bubblewrap-0.4.1-1.fc32.x86_64.rpm",
         "sha256:c3f7089ae50f79cf4d2cb59e01091d33c70cab89ae08f95c547339a87404c3ec": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/d/dosfstools-4.1-10.fc32.x86_64.rpm",
+        "sha256:9369d4fed30402f45705b7a5cb51b6eeefb1dabbe0942c84514c6fdf1edac5e0": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/f/fuse-2.9.9-9.fc32.x86_64.rpm",
+        "sha256:45132e53c649def28d63c199d8c3a3b9fd16fa8bca7426ad4e9c202e52a233b4": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/f/fuse-common-3.9.1-1.fc32.x86_64.rpm",
+        "sha256:8a03d482b5294f7452b2f9ce31ebb6aea9eefac002281c1b9152fbb1a0341987": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/j/json-glib-1.4.4-4.fc32.x86_64.rpm",
         "sha256:a410db5c56d4f39f6ea71e7d5bb6d4a2bd518015d1e34f38fbc0d7bbd4e872d4": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/l/libaio-0.3.111-7.fc32.x86_64.rpm",
+        "sha256:aa5b658fd4a95c724b61eddadecdbcbc1b2a813ae681318ab092a2ed03954825": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/l/libmodulemd1-1.8.16-2.fc32.x86_64.rpm",
+        "sha256:ec64add7d60a70fbaf14a083929f22bd2637c33d20d2a30b7e842caa6040f817": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/o/ostree-2020.3-2.fc32.x86_64.rpm",
+        "sha256:3343d9e7c90bd58e1e44ee07e7c59bb570ffc74da50f0607c5f5681a00b70e76": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/o/ostree-libs-2020.3-2.fc32.x86_64.rpm",
         "sha256:475b6de876914aec2187ac4858a13ae75585f5c4cb5d739c637f79a5ca6f05f9": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/q/qemu-img-4.2.0-7.fc32.x86_64.rpm",
+        "sha256:ee664c392a97cdd272f57980c6856b2c57567005fa0ad9cb16c388b645d014f1": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/r/rpm-ostree-2020.1-1.fc32.x86_64.rpm",
+        "sha256:9d220d8ee28cd0adf28e8fef547af92c3ec66e238747165939cf8e1a413ddf83": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/r/rpm-ostree-libs-2020.1-1.fc32.x86_64.rpm",
         "sha256:2cee64e12b295b74d2f4b008c7628ef3a01ef4149905fc4a7ae14b304da5f53b": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/t/tar-1.32-4.fc32.x86_64.rpm"
       }
     }
diff --git a/test/data/manifests/f32-build.json b/test/data/manifests/f32-build.json
index 535ae8b6..ec546102 100644
--- a/test/data/manifests/f32-build.json
+++ b/test/data/manifests/f32-build.json
@@ -13,6 +13,7 @@
             "sha256:22d311f22902d592f72bd0fb4010a682f796e5a4698d5ea209848468a2d5aa96",
             "sha256:a346990bb07adca8c323a15f31b093ef6e639bde6ca84adf1a3abebc4dc9adce",
             "sha256:7a97e71cd552285ead303d07dbb6417403edf45c0a531e02cf4ebfb0efda4975",
+            "sha256:cd01ae91895e60f189106a159bb551f906a8b663110f421ad6ee83c9e008851e",
             "sha256:842f7a38be2e8dbb14eff3ede4091db214ebe241e1fde7a128e88c4e686b63b0",
             "sha256:73f6a9108f7d5ec3cd89c31dbbaa874ae28cd5cb443ef69700a1218903ee2fc4",
             "sha256:7023687eb65baa56a9b4c3ffde1e439b3d41b03ac4ad35a1a1fc3903464548f7",
@@ -52,6 +53,8 @@
             "sha256:e0b1da98020a740991dbb70b42c0ff1eece9e268a461e555a5ec763bda1645f5",
             "sha256:1110261787146443e089955912255d99daf7ba042c3743e13648a9eb3d80ceb4",
             "sha256:0b7cd6f6cb3b7cd9e0704dd6c62b65254b04cb870ab638b9bed4951564436e24",
+            "sha256:9369d4fed30402f45705b7a5cb51b6eeefb1dabbe0942c84514c6fdf1edac5e0",
+            "sha256:45132e53c649def28d63c199d8c3a3b9fd16fa8bca7426ad4e9c202e52a233b4",
             "sha256:53992752850779218421994f61f1589eda5d368e28d340dccaae3f67de06e7f2",
             "sha256:d0e5d0104cf20c8dd332053a5903aab9b7fdadb84b35a1bfb3a6456f3399eb32",
             "sha256:9899cfd32ada2537693af30b60051da21c6264b0d0db51ba709fceb179d4c836",
@@ -76,6 +79,7 @@
             "sha256:c1f957511b5e011e6f7995ed7bca9196703cf1214068f209e86b1dc4fd0e98bf",
             "sha256:f4eb6d332b9aea8d8ef0a6ea8dc2b073d6bf5f2599d64f24111d8da2ee82ad48",
             "sha256:d3a64fcef3de79a97541b21c71ddd00d4cca9039c930bc660d6c5479eabf5f26",
+            "sha256:8a03d482b5294f7452b2f9ce31ebb6aea9eefac002281c1b9152fbb1a0341987",
             "sha256:a05178831a546e2001e52f065fc6969f36d2292efaee2971fe7a7e882cc8c813",
             "sha256:3be681b78e919bfd82eb186c7393718f1d37abd0b1bb8b1a8571aefa11e7a248",
             "sha256:60774007011889671c28158f599032f0db253c153ccae70f5e2f5840f2dc490b",
@@ -115,6 +119,7 @@
             "sha256:6eb95e39b9771c4dde5f9954a74cef6be90522c28c7c4aa767ebe7a9d55fcdf9",
             "sha256:1c68255945533ed4e3368125bc46e19f3fe348d7ec507a85a35038dbb976003f",
             "sha256:f98f854a86c68b534f71e1f35852fabddbe2cbfe481b01bb15291b3363013b2a",
+            "sha256:aa5b658fd4a95c724b61eddadecdbcbc1b2a813ae681318ab092a2ed03954825",
             "sha256:e740cc0a580639b887bda0039a779e750a32835be1fd8c64aa01183b4cbb98bf",
             "sha256:884357540f4be2a74e608e2c7a31f2371ee3b4d29be2fe39a371c0b131d84aa6",
             "sha256:ec6abd65541b5bded814de19c9d064e6c21e3d8b424dba7cb25b2fdc52d45a2b",
@@ -166,6 +171,8 @@
             "sha256:ad6d7d9767e05978b14a39c08dba59ddc4396584576df194f77ed310a0816ae0",
             "sha256:3f2cb9092d6f55f84dd9eacd5359dfb354772e5f38308328027c7758f4a06fb6",
             "sha256:45fc2608b746fd841dd25919e9e4d44834154758aec8fb8b529c014b11c7917d",
+            "sha256:ec64add7d60a70fbaf14a083929f22bd2637c33d20d2a30b7e842caa6040f817",
+            "sha256:3343d9e7c90bd58e1e44ee07e7c59bb570ffc74da50f0607c5f5681a00b70e76",
             "sha256:dedd37a96262c35763ab2dcbc19838f5cc39a2a3a392a650a80bd6d5ae42ff8b",
             "sha256:3589b982ac0c2f5f6b47cde5cb7ec33c2c01d756dabf8c4ca64f6d9d0d78b35e",
             "sha256:4c80ade4ac0889316930a8d181ea43fa2d1b2f1a6a5703c22f2b3ba191346eec",
@@ -175,6 +182,7 @@
             "sha256:15f08ce979e48fd25be5e16d63d1c95c57f9abff7704005137ea00b958442939",
             "sha256:7df4fa1a29772696d92866e890af6fbe006088f3407ed3e67b0e7867ef58d899",
             "sha256:8df97dcfb42c1667b5d2e4150012eaf96f58eeac4f7b879e0928c8c36e3a7604",
+            "sha256:d439ffbe20c8c0e8244e31c0324d60cf959dc1cd6cecc575d7b34509a73e9386",
             "sha256:8a0c00a69f9cb3a9ffacaf1cdc162c38a1faca76c9b976cb177bdc988902f2d4",
             "sha256:f3908831ae53f43b07a4e196850d0e59cc89b50c97d838538c3185fd0eb0d569",
             "sha256:af992ad02594b68f17d2da41104a26aee41d02639edf22332d7dbb1fe9af58a5",
@@ -198,6 +206,8 @@
             "sha256:136a9cbae9c225be60718fdc8cc8988a55235d6502e451df77d1c5c765143850",
             "sha256:3151132084577032b4c827eb577a1509950601888c6ff13a0a30b24252ee26d2",
             "sha256:54b740cf7a75a7215168970378d9a1d6b9a5e4eb81159a874ce8ea5990436641",
+            "sha256:ee664c392a97cdd272f57980c6856b2c57567005fa0ad9cb16c388b645d014f1",
+            "sha256:9d220d8ee28cd0adf28e8fef547af92c3ec66e238747165939cf8e1a413ddf83",
             "sha256:e2a04f4de125ff60a3cdc3d2b3718a4530a9c9240c9cf14f55938444c229539f",
             "sha256:630ad20496ff00f76764e01b9302ccbe94e3e91d76ececef88bd9e8a890b1ac3",
             "sha256:ffe5076b9018efdb1612c487f637af39ab6c3c79ec37311978935cfa357ecd61",
@@ -237,6 +247,7 @@
         "sha256:22d311f22902d592f72bd0fb4010a682f796e5a4698d5ea209848468a2d5aa96": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/a/audit-libs-3.0-0.19.20191104git1c2f876.fc32.x86_64.rpm",
         "sha256:a346990bb07adca8c323a15f31b093ef6e639bde6ca84adf1a3abebc4dc9adce": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/b/basesystem-11-9.fc32.noarch.rpm",
         "sha256:7a97e71cd552285ead303d07dbb6417403edf45c0a531e02cf4ebfb0efda4975": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/b/bash-5.0.11-2.fc32.x86_64.rpm",
+        "sha256:cd01ae91895e60f189106a159bb551f906a8b663110f421ad6ee83c9e008851e": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/b/bubblewrap-0.4.1-1.fc32.x86_64.rpm",
         "sha256:842f7a38be2e8dbb14eff3ede4091db214ebe241e1fde7a128e88c4e686b63b0": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/b/bzip2-libs-1.0.8-2.fc32.x86_64.rpm",
         "sha256:73f6a9108f7d5ec3cd89c31dbbaa874ae28cd5cb443ef69700a1218903ee2fc4": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/c/ca-certificates-2020.2.40-3.fc32.noarch.rpm",
         "sha256:7023687eb65baa56a9b4c3ffde1e439b3d41b03ac4ad35a1a1fc3903464548f7": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/c/coreutils-8.32-3.fc32.1.x86_64.rpm",
@@ -276,6 +287,8 @@
         "sha256:e0b1da98020a740991dbb70b42c0ff1eece9e268a461e555a5ec763bda1645f5": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/f/file-libs-5.38-2.fc32.x86_64.rpm",
         "sha256:1110261787146443e089955912255d99daf7ba042c3743e13648a9eb3d80ceb4": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/f/filesystem-3.14-2.fc32.x86_64.rpm",
         "sha256:0b7cd6f6cb3b7cd9e0704dd6c62b65254b04cb870ab638b9bed4951564436e24": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/f/findutils-4.7.0-3.fc32.x86_64.rpm",
+        "sha256:9369d4fed30402f45705b7a5cb51b6eeefb1dabbe0942c84514c6fdf1edac5e0": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/f/fuse-2.9.9-9.fc32.x86_64.rpm",
+        "sha256:45132e53c649def28d63c199d8c3a3b9fd16fa8bca7426ad4e9c202e52a233b4": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/f/fuse-common-3.9.1-1.fc32.x86_64.rpm",
         "sha256:53992752850779218421994f61f1589eda5d368e28d340dccaae3f67de06e7f2": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/f/fuse-libs-2.9.9-9.fc32.x86_64.rpm",
         "sha256:d0e5d0104cf20c8dd332053a5903aab9b7fdadb84b35a1bfb3a6456f3399eb32": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/g/gawk-5.0.1-7.fc32.x86_64.rpm",
         "sha256:9899cfd32ada2537693af30b60051da21c6264b0d0db51ba709fceb179d4c836": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/g/gdbm-libs-1.18.1-3.fc32.x86_64.rpm",
@@ -300,6 +313,7 @@
         "sha256:c1f957511b5e011e6f7995ed7bca9196703cf1214068f209e86b1dc4fd0e98bf": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/i/ima-evm-utils-1.2.1-3.fc32.x86_64.rpm",
         "sha256:f4eb6d332b9aea8d8ef0a6ea8dc2b073d6bf5f2599d64f24111d8da2ee82ad48": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/i/iptables-libs-1.8.4-7.fc32.x86_64.rpm",
         "sha256:d3a64fcef3de79a97541b21c71ddd00d4cca9039c930bc660d6c5479eabf5f26": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/j/json-c-0.13.1-9.fc32.x86_64.rpm",
+        "sha256:8a03d482b5294f7452b2f9ce31ebb6aea9eefac002281c1b9152fbb1a0341987": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/j/json-glib-1.4.4-4.fc32.x86_64.rpm",
         "sha256:a05178831a546e2001e52f065fc6969f36d2292efaee2971fe7a7e882cc8c813": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/k/kbd-2.2.0-1.fc32.x86_64.rpm",
         "sha256:3be681b78e919bfd82eb186c7393718f1d37abd0b1bb8b1a8571aefa11e7a248": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/k/kbd-legacy-2.2.0-1.fc32.noarch.rpm",
         "sha256:60774007011889671c28158f599032f0db253c153ccae70f5e2f5840f2dc490b": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/k/kbd-misc-2.2.0-1.fc32.noarch.rpm",
@@ -339,6 +353,7 @@
         "sha256:6eb95e39b9771c4dde5f9954a74cef6be90522c28c7c4aa767ebe7a9d55fcdf9": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/l/libmetalink-0.1.3-10.fc32.x86_64.rpm",
         "sha256:1c68255945533ed4e3368125bc46e19f3fe348d7ec507a85a35038dbb976003f": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/l/libmnl-1.0.4-11.fc32.x86_64.rpm",
         "sha256:f98f854a86c68b534f71e1f35852fabddbe2cbfe481b01bb15291b3363013b2a": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/l/libmodulemd-2.9.1-1.fc32.x86_64.rpm",
+        "sha256:aa5b658fd4a95c724b61eddadecdbcbc1b2a813ae681318ab092a2ed03954825": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/l/libmodulemd1-1.8.16-2.fc32.x86_64.rpm",
         "sha256:e740cc0a580639b887bda0039a779e750a32835be1fd8c64aa01183b4cbb98bf": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/l/libmount-2.35.1-7.fc32.x86_64.rpm",
         "sha256:884357540f4be2a74e608e2c7a31f2371ee3b4d29be2fe39a371c0b131d84aa6": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/l/libnetfilter_conntrack-1.0.7-4.fc32.x86_64.rpm",
         "sha256:ec6abd65541b5bded814de19c9d064e6c21e3d8b424dba7cb25b2fdc52d45a2b": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/l/libnfnetlink-1.0.1-17.fc32.x86_64.rpm",
@@ -390,6 +405,8 @@
         "sha256:ad6d7d9767e05978b14a39c08dba59ddc4396584576df194f77ed310a0816ae0": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/o/openssl-libs-1.1.1d-7.fc32.x86_64.rpm",
         "sha256:3f2cb9092d6f55f84dd9eacd5359dfb354772e5f38308328027c7758f4a06fb6": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/o/openssl-pkcs11-0.4.10-5.fc32.x86_64.rpm",
         "sha256:45fc2608b746fd841dd25919e9e4d44834154758aec8fb8b529c014b11c7917d": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/o/os-prober-1.77-4.fc32.x86_64.rpm",
+        "sha256:ec64add7d60a70fbaf14a083929f22bd2637c33d20d2a30b7e842caa6040f817": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/o/ostree-2020.3-2.fc32.x86_64.rpm",
+        "sha256:3343d9e7c90bd58e1e44ee07e7c59bb570ffc74da50f0607c5f5681a00b70e76": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/o/ostree-libs-2020.3-2.fc32.x86_64.rpm",
         "sha256:dedd37a96262c35763ab2dcbc19838f5cc39a2a3a392a650a80bd6d5ae42ff8b": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/p/p11-kit-0.23.20-1.fc32.x86_64.rpm",
         "sha256:3589b982ac0c2f5f6b47cde5cb7ec33c2c01d756dabf8c4ca64f6d9d0d78b35e": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/p/p11-kit-trust-0.23.20-1.fc32.x86_64.rpm",
         "sha256:4c80ade4ac0889316930a8d181ea43fa2d1b2f1a6a5703c22f2b3ba191346eec": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/p/pam-1.3.1-24.fc32.x86_64.rpm",
@@ -399,6 +416,7 @@
         "sha256:15f08ce979e48fd25be5e16d63d1c95c57f9abff7704005137ea00b958442939": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/p/pigz-2.4-6.fc32.x86_64.rpm",
         "sha256:7df4fa1a29772696d92866e890af6fbe006088f3407ed3e67b0e7867ef58d899": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/p/pinentry-1.1.0-7.fc32.x86_64.rpm",
         "sha256:8df97dcfb42c1667b5d2e4150012eaf96f58eeac4f7b879e0928c8c36e3a7604": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/p/policycoreutils-3.0-2.fc32.x86_64.rpm",
+        "sha256:d439ffbe20c8c0e8244e31c0324d60cf959dc1cd6cecc575d7b34509a73e9386": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/p/polkit-libs-0.116-7.fc32.x86_64.rpm",
         "sha256:8a0c00a69f9cb3a9ffacaf1cdc162c38a1faca76c9b976cb177bdc988902f2d4": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/p/popt-1.16-19.fc32.x86_64.rpm",
         "sha256:f3908831ae53f43b07a4e196850d0e59cc89b50c97d838538c3185fd0eb0d569": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/p/procps-ng-3.3.15-7.fc32.x86_64.rpm",
         "sha256:af992ad02594b68f17d2da41104a26aee41d02639edf22332d7dbb1fe9af58a5": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/p/publicsuffix-list-dafsa-20190417-3.fc32.noarch.rpm",
@@ -422,6 +440,8 @@
         "sha256:136a9cbae9c225be60718fdc8cc8988a55235d6502e451df77d1c5c765143850": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/r/rpm-4.15.1-2.fc32.1.x86_64.rpm",
         "sha256:3151132084577032b4c827eb577a1509950601888c6ff13a0a30b24252ee26d2": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/r/rpm-build-libs-4.15.1-2.fc32.1.x86_64.rpm",
         "sha256:54b740cf7a75a7215168970378d9a1d6b9a5e4eb81159a874ce8ea5990436641": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/r/rpm-libs-4.15.1-2.fc32.1.x86_64.rpm",
+        "sha256:ee664c392a97cdd272f57980c6856b2c57567005fa0ad9cb16c388b645d014f1": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/r/rpm-ostree-2020.1-1.fc32.x86_64.rpm",
+        "sha256:9d220d8ee28cd0adf28e8fef547af92c3ec66e238747165939cf8e1a413ddf83": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/r/rpm-ostree-libs-2020.1-1.fc32.x86_64.rpm",
         "sha256:e2a04f4de125ff60a3cdc3d2b3718a4530a9c9240c9cf14f55938444c229539f": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/r/rpm-plugin-systemd-inhibit-4.15.1-2.fc32.1.x86_64.rpm",
         "sha256:630ad20496ff00f76764e01b9302ccbe94e3e91d76ececef88bd9e8a890b1ac3": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/r/rpm-sign-libs-4.15.1-2.fc32.1.x86_64.rpm",
         "sha256:ffe5076b9018efdb1612c487f637af39ab6c3c79ec37311978935cfa357ecd61": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/s/sed-4.5-5.fc32.x86_64.rpm",
diff --git a/test/data/manifests/fedora-boot.json b/test/data/manifests/fedora-boot.json
index d9fd214c..3179bd3a 100644
--- a/test/data/manifests/fedora-boot.json
+++ b/test/data/manifests/fedora-boot.json
@@ -16,6 +16,7 @@
                 "sha256:22d311f22902d592f72bd0fb4010a682f796e5a4698d5ea209848468a2d5aa96",
                 "sha256:a346990bb07adca8c323a15f31b093ef6e639bde6ca84adf1a3abebc4dc9adce",
                 "sha256:7a97e71cd552285ead303d07dbb6417403edf45c0a531e02cf4ebfb0efda4975",
+                "sha256:cd01ae91895e60f189106a159bb551f906a8b663110f421ad6ee83c9e008851e",
                 "sha256:842f7a38be2e8dbb14eff3ede4091db214ebe241e1fde7a128e88c4e686b63b0",
                 "sha256:73f6a9108f7d5ec3cd89c31dbbaa874ae28cd5cb443ef69700a1218903ee2fc4",
                 "sha256:7023687eb65baa56a9b4c3ffde1e439b3d41b03ac4ad35a1a1fc3903464548f7",
@@ -55,6 +56,8 @@
                 "sha256:e0b1da98020a740991dbb70b42c0ff1eece9e268a461e555a5ec763bda1645f5",
                 "sha256:1110261787146443e089955912255d99daf7ba042c3743e13648a9eb3d80ceb4",
                 "sha256:0b7cd6f6cb3b7cd9e0704dd6c62b65254b04cb870ab638b9bed4951564436e24",
+                "sha256:9369d4fed30402f45705b7a5cb51b6eeefb1dabbe0942c84514c6fdf1edac5e0",
+                "sha256:45132e53c649def28d63c199d8c3a3b9fd16fa8bca7426ad4e9c202e52a233b4",
                 "sha256:53992752850779218421994f61f1589eda5d368e28d340dccaae3f67de06e7f2",
                 "sha256:d0e5d0104cf20c8dd332053a5903aab9b7fdadb84b35a1bfb3a6456f3399eb32",
                 "sha256:9899cfd32ada2537693af30b60051da21c6264b0d0db51ba709fceb179d4c836",
@@ -79,6 +82,7 @@
                 "sha256:c1f957511b5e011e6f7995ed7bca9196703cf1214068f209e86b1dc4fd0e98bf",
                 "sha256:f4eb6d332b9aea8d8ef0a6ea8dc2b073d6bf5f2599d64f24111d8da2ee82ad48",
                 "sha256:d3a64fcef3de79a97541b21c71ddd00d4cca9039c930bc660d6c5479eabf5f26",
+                "sha256:8a03d482b5294f7452b2f9ce31ebb6aea9eefac002281c1b9152fbb1a0341987",
                 "sha256:a05178831a546e2001e52f065fc6969f36d2292efaee2971fe7a7e882cc8c813",
                 "sha256:3be681b78e919bfd82eb186c7393718f1d37abd0b1bb8b1a8571aefa11e7a248",
                 "sha256:60774007011889671c28158f599032f0db253c153ccae70f5e2f5840f2dc490b",
@@ -118,6 +122,7 @@
                 "sha256:6eb95e39b9771c4dde5f9954a74cef6be90522c28c7c4aa767ebe7a9d55fcdf9",
                 "sha256:1c68255945533ed4e3368125bc46e19f3fe348d7ec507a85a35038dbb976003f",
                 "sha256:f98f854a86c68b534f71e1f35852fabddbe2cbfe481b01bb15291b3363013b2a",
+                "sha256:aa5b658fd4a95c724b61eddadecdbcbc1b2a813ae681318ab092a2ed03954825",
                 "sha256:e740cc0a580639b887bda0039a779e750a32835be1fd8c64aa01183b4cbb98bf",
                 "sha256:884357540f4be2a74e608e2c7a31f2371ee3b4d29be2fe39a371c0b131d84aa6",
                 "sha256:ec6abd65541b5bded814de19c9d064e6c21e3d8b424dba7cb25b2fdc52d45a2b",
@@ -169,6 +174,8 @@
                 "sha256:ad6d7d9767e05978b14a39c08dba59ddc4396584576df194f77ed310a0816ae0",
                 "sha256:3f2cb9092d6f55f84dd9eacd5359dfb354772e5f38308328027c7758f4a06fb6",
                 "sha256:45fc2608b746fd841dd25919e9e4d44834154758aec8fb8b529c014b11c7917d",
+                "sha256:ec64add7d60a70fbaf14a083929f22bd2637c33d20d2a30b7e842caa6040f817",
+                "sha256:3343d9e7c90bd58e1e44ee07e7c59bb570ffc74da50f0607c5f5681a00b70e76",
                 "sha256:dedd37a96262c35763ab2dcbc19838f5cc39a2a3a392a650a80bd6d5ae42ff8b",
                 "sha256:3589b982ac0c2f5f6b47cde5cb7ec33c2c01d756dabf8c4ca64f6d9d0d78b35e",
                 "sha256:4c80ade4ac0889316930a8d181ea43fa2d1b2f1a6a5703c22f2b3ba191346eec",
@@ -178,6 +185,7 @@
                 "sha256:15f08ce979e48fd25be5e16d63d1c95c57f9abff7704005137ea00b958442939",
                 "sha256:7df4fa1a29772696d92866e890af6fbe006088f3407ed3e67b0e7867ef58d899",
                 "sha256:8df97dcfb42c1667b5d2e4150012eaf96f58eeac4f7b879e0928c8c36e3a7604",
+                "sha256:d439ffbe20c8c0e8244e31c0324d60cf959dc1cd6cecc575d7b34509a73e9386",
                 "sha256:8a0c00a69f9cb3a9ffacaf1cdc162c38a1faca76c9b976cb177bdc988902f2d4",
                 "sha256:f3908831ae53f43b07a4e196850d0e59cc89b50c97d838538c3185fd0eb0d569",
                 "sha256:af992ad02594b68f17d2da41104a26aee41d02639edf22332d7dbb1fe9af58a5",
@@ -201,6 +209,8 @@
                 "sha256:136a9cbae9c225be60718fdc8cc8988a55235d6502e451df77d1c5c765143850",
                 "sha256:3151132084577032b4c827eb577a1509950601888c6ff13a0a30b24252ee26d2",
                 "sha256:54b740cf7a75a7215168970378d9a1d6b9a5e4eb81159a874ce8ea5990436641",
+                "sha256:ee664c392a97cdd272f57980c6856b2c57567005fa0ad9cb16c388b645d014f1",
+                "sha256:9d220d8ee28cd0adf28e8fef547af92c3ec66e238747165939cf8e1a413ddf83",
                 "sha256:e2a04f4de125ff60a3cdc3d2b3718a4530a9c9240c9cf14f55938444c229539f",
                 "sha256:630ad20496ff00f76764e01b9302ccbe94e3e91d76ececef88bd9e8a890b1ac3",
                 "sha256:ffe5076b9018efdb1612c487f637af39ab6c3c79ec37311978935cfa357ecd61",
@@ -1026,11 +1036,20 @@
         "sha256:b149e5c36e0327ca9c749b3ac0d3746ff9f9e0df68d6d177c3d13273273077cf": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/y/yum-4.2.19-1.fc32.noarch.rpm",
         "sha256:140708561a2ec1c7709fd38d8b1b115d02da710b80eeecd65c2b8387d9d78ef9": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/z/zchunk-libs-1.1.5-2.fc32.x86_64.rpm",
         "sha256:c0fff40dc1092e18ed3e608bc6143c89a0d7775b9e0553319bb2caca7d324d80": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/z/zlib-1.2.11-21.fc32.x86_64.rpm",
+        "sha256:cd01ae91895e60f189106a159bb551f906a8b663110f421ad6ee83c9e008851e": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/b/bubblewrap-0.4.1-1.fc32.x86_64.rpm",
         "sha256:c3f7089ae50f79cf4d2cb59e01091d33c70cab89ae08f95c547339a87404c3ec": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/d/dosfstools-4.1-10.fc32.x86_64.rpm",
         "sha256:1f2ba0fc562864ad1bea31a42da124030fc188d23a84d144be616c2d066e1531": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/f/fedora-release-32-1.noarch.rpm",
+        "sha256:9369d4fed30402f45705b7a5cb51b6eeefb1dabbe0942c84514c6fdf1edac5e0": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/f/fuse-2.9.9-9.fc32.x86_64.rpm",
+        "sha256:45132e53c649def28d63c199d8c3a3b9fd16fa8bca7426ad4e9c202e52a233b4": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/f/fuse-common-3.9.1-1.fc32.x86_64.rpm",
         "sha256:129d919e55c09edecaa8edd0fd4058dbf7460aaae5d1c5625ca11f6df7defefe": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/g/glibc-all-langpacks-2.31-2.fc32.x86_64.rpm",
+        "sha256:8a03d482b5294f7452b2f9ce31ebb6aea9eefac002281c1b9152fbb1a0341987": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/j/json-glib-1.4.4-4.fc32.x86_64.rpm",
         "sha256:a410db5c56d4f39f6ea71e7d5bb6d4a2bd518015d1e34f38fbc0d7bbd4e872d4": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/l/libaio-0.3.111-7.fc32.x86_64.rpm",
-        "sha256:475b6de876914aec2187ac4858a13ae75585f5c4cb5d739c637f79a5ca6f05f9": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/q/qemu-img-4.2.0-7.fc32.x86_64.rpm"
+        "sha256:aa5b658fd4a95c724b61eddadecdbcbc1b2a813ae681318ab092a2ed03954825": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/l/libmodulemd1-1.8.16-2.fc32.x86_64.rpm",
+        "sha256:ec64add7d60a70fbaf14a083929f22bd2637c33d20d2a30b7e842caa6040f817": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/o/ostree-2020.3-2.fc32.x86_64.rpm",
+        "sha256:3343d9e7c90bd58e1e44ee07e7c59bb570ffc74da50f0607c5f5681a00b70e76": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/o/ostree-libs-2020.3-2.fc32.x86_64.rpm",
+        "sha256:475b6de876914aec2187ac4858a13ae75585f5c4cb5d739c637f79a5ca6f05f9": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/q/qemu-img-4.2.0-7.fc32.x86_64.rpm",
+        "sha256:ee664c392a97cdd272f57980c6856b2c57567005fa0ad9cb16c388b645d014f1": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/r/rpm-ostree-2020.1-1.fc32.x86_64.rpm",
+        "sha256:9d220d8ee28cd0adf28e8fef547af92c3ec66e238747165939cf8e1a413ddf83": "http://mirrors.kernel.org/fedora/releases/32/Everything/x86_64/os/Packages/r/rpm-ostree-libs-2020.1-1.fc32.x86_64.rpm"
       }
     }
   }
diff --git a/test/data/manifests/mpp-f32-build.json b/test/data/manifests/mpp-f32-build.json
index 0d4a53c5..f48742e6 100644
--- a/test/data/manifests/mpp-f32-build.json
+++ b/test/data/manifests/mpp-f32-build.json
@@ -24,6 +24,7 @@
               "grub2-pc",
               "policycoreutils",
               "qemu-img",
+              "rpm-ostree",
               "systemd",
               "tar",
               "xz"