The file never leaves your browser. The check hashes the signed byte ranges and compares them with the digest sealed inside each signature.