question: void verify ( ) { byte [ ] d = digest . digest ( ) ; if ( ! MessageDigest . isEqual ( d , Base64 . decode ( hash ) ) ) { throw invalidDigest ( JarFile . MANIFEST_NAME , name , jarName ) ; } verifiedEntries . put ( name , certificates ) ; }
target:  Verifies that the digests stored in the manifest match the decrypted digests from the .SF file. This indicates the validity of the signing, not the integrity of the file, as it's digest must be calculated and verified when its contents are read.