That's a good question. I just blindly [copied this code out of our Ruby code](https://github.com/Katello/katello/blob/master/app/helpers/katello/subscriptions_helper.rb#L26). @thomasmckay , do you know if we should/could use https to link to manifests?