change manifests to https