Invalid token when downloading image manifest

I am trying to download an image’s (typescript-monorepo-example-main-internal-api:latest) manifest using the following statement:

curl 'https://ghcr.io/v2/rhyek/typescript-monorepo-example-main-internal-api/manifests/latest' \
  -H "Authorization: Bearer $DOCKER_TOKEN" \
  -H 'accept: application/vnd.docker.distribution.manifest.v2+json' \
  > manifest.json

where $DOCKER_TOKEN is a PAT with write:packages, read:packages, and delete:packages permissions.

The response is always {"errors":[{"code":"DENIED","message":"invalid token"}]}. What am I doing wrong? Thanks.