Invalid SHA?

[Neal Becker]

I don't understand this:
sudo smart upgrade 'kde*'
...
error:     
http://download.fedora.redhat.com/pub/fedora/linux/core/development/x86_64/Fedora/RPMS/kdesdk-devel-3.5.0-1.1.x86_64.rpm: 
Invalid SHA (expected ffa8a8736e133ad6745250bb210d5334e954c6b3, got 
e2d2c14da48ae85a30a22adc10e793dcd63e2798)

rpm -K /var/lib/smart/packages/kdesdk-devel-3.5.0-1.1.x86_64.rpm
/var/lib/smart/packages/kdesdk-devel-3.5.0-1.1.x86_64.rpm: (sha1) dsa sha1 md5 
gpg OK

So, do I understand that smart finds SHA in error, but rpm -K says it's fine?  
What does this mean?