Hi @admac ,
There's no official Microsoft article that provides the hash value you are looking for. This official link gives some tips on how to tell if a package is genuine or not, but it doesn't seem to be very helpful in your scenario.
With the above being said, if you still have concerns on the genuineness of the packages you downloaded, personally I'd recommend using the official Microsoft AutoUpdate tool to automatically detect, download and apply the updates available for Office apps on Mac. You can also manually download the latest version of Microsoft AutoUpdate (MAU) via Release history for Microsoft AutoUpdate (MAU). The hash value for MAU is available btw:
For more information about Microsoft AutoUpdate and how to update office for mac, hopefully you can find the links below helpful:
If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.