There is no way we can be certain this "second" part to the leak is actually even a legitimate followup to the first leak (assuming the first leak was legitimat

There is no way we can be certain this "second" part to the leak is actually even a legitimate followup to the first leak (assuming the first leak was legitimate). In the future, if a leaker wants to be able to prove a future anonymous document will be leaked they should post the hashsums in the first document, so they can be verified as authenticate followups. For all we know, this is just /b/ having fun with the first leak pastebin.