The “M” in the second block wasn’t an M. It was two characters: a capital “R” and a capital “N” squished together by a bad font rendering in the original email. The actual key was , with no space. The verification algorithm was reading a six-character block where only five were expected.