Allow the manifest EE certificate to have a different validity period than the manifest not-before and not-after times.