$ git branch && sha256sum virtualenv_support/*.whl
* master
  update_bundled
717cdffb2833be8409433a93746744b59505f42146e8d37de6c62b430e25d6d7  virtualenv_support/pip-10.0.1-py2.py3-none-any.whl
0cb8b8625bfdcc2d43ea4b9cdba0b39b2b7befc04f3088897031082aa16ce186  virtualenv_support/setuptools-39.1.0-py2.py3-none-any.whl
80044e51ec5bbf6c894ba0bc48d26a8c20a9ba629f4ca19ea26ecfcf87685f5f  virtualenv_support/wheel-0.31.1-py2.py3-none-any.whl

$ git checkout update_bundled 
Switched to branch 'update_bundled'
Your branch is ahead of 'origin/master' by 1 commit.
  (use "git push" to publish your local commits)

$ git branch && sha256sum virtualenv_support/*.whl
  master
* update_bundled
070e4bf493c7c2c9f6a08dd797dd3c066d64074c38e9e8a0fb4e6541f266d96c  virtualenv_support/pip-18.0-py2.py3-none-any.whl
ce4137d58b444bac11a31d4e0c1805c69d89e8ed4e91fde1999674ecc2f6f9ff  virtualenv_support/setuptools-40.4.3-py2.py3-none-any.whl
80044e51ec5bbf6c894ba0bc48d26a8c20a9ba629f4ca19ea26ecfcf87685f5f  virtualenv_support/wheel-0.31.1-py2.py3-none-any.whl

$ curl -s https://pypi.org/simple/pip/ | grep 18.0-py2.py3 | grep -o sha256=[a-f0-9]*
sha256=070e4bf493c7c2c9f6a08dd797dd3c066d64074c38e9e8a0fb4e6541f266d96c
$ curl -s https://pypi.org/simple/setuptools/ | grep 40.4.3-py2.py3 | grep -o sha256=[a-f0-9]*
sha256=ce4137d58b444bac11a31d4e0c1805c69d89e8ed4e91fde1999674ecc2f6f9ff