Thanks a lot for the feedback, it was useful. It turns out I had a mismatch between the certificate used in the provisioning profile and the certificate I was using to sign manually. Thanks for pointing out to the archive method, I had tried that in the past and for some reason I did not go there for that project. In any case, problem solved on my end :-)