I've encountered at least one registry that doesn't allow pulling a manifest until it has been pushed with a tag (so after pushing by digest, a pull is responding with a 404). I don't think that follows the spec, but we would want a conformance test to verify registries support pushing and pulling by digest.