2002 according to the copyright. But it also has this note:

debsums is intended primarily as a way of determining what installed files have been locally modified by the administrator or damaged by media errors and is of limited use as a security tool.

> md5? Is 'jammy' a remarkably old platform? I hope so.

Jammy comes out next month.

Though if you encounter an md5 second preimage attack that's pretty impressive.