hbf.tar.gz seems to get generated automatically by tarring up the directory on the distribution site. XXX: This should be fixed, the files in that dir haven't changed for ca. 5 years now.