manifest now matches https