manifest.json and manifest.sig only.