Clarification, they are missing for the binary releases only. I had a
script to build a docker image of monit that broke because it couldn't
download the sha256 hash to verify the binary tarball. I ended up
having to supply my own, but that isn't ideal.