Following the default behavior of the vSphere [Web] Client (6.5+) and OVF Tool (4.2+), Export-VApp should use SHA-256 in its manifest checksums by default and include an option to use SHA-1 if desired. Presently (11.2), there is no way for PowerCLI to export an OVF or OVA with SHA-256 checksums.