I have some questions about cdimage-testing.
Since they are weekly generated is it possible the MD5SUMS files to be signed
as well ? Hm, it would be better to rename MD5SUMS like hashes, sums or
something more generic, and populate it with both md5 and sha1 sums, which
will be signed by a member of debian-cd team at some point.
While still unofficial will amd64 jigdo files be weekly rebuilt 
pub 4096R/0E4BD0AB 2003-03-18 <keyserver.bu.edu ; pgp.mit.edu>
fingerprint 1AE7 7C66 0A26 5BFF DF22 5D55 1C57 0C89 0E4B D0AB