direction: down

registry: "OCI Registry" {
  tag: "Tag\nnginx:1.25"
  digest: "digest = sha256:…\nhash of the manifest, immutable" { class: muted }
  manifest: "Manifest\nmediaType, config, layers" { class: accent }
  config: "Config\nsha256:aaa…"
  lyr: "Layers" {
    l1: "Layer 1\nsha256:bbb… (base)"
    l2: "Layer 2\nsha256:ccc… (app)"
    ln: "Layer N\nsha256:ddd…"
  }
  principe: "Content-addressable:\nevery object is identified by its SHA256" { class: muted }
  tag -> manifest
  tag -> digest { class: indirect }
  manifest -> config: "config: sha256:aaa"
  manifest -> lyr: "layers: sha256:bbb, sha256:ccc"
}