Not really a bug nor ‘odd’, signed vs. unsigned values. Can’t be made more consistent w/o breaking compatibility.
Also, incomplete info…? No mention of the manifest file contents or a full repro or anything.