add manifest for cacerts