HTTPS manifest