Under the hood, Sony PKGs use AES-128-CBC encryption plus a custom header format. TrueAncestor leverages known keys (extracted from official firmware updates) to perform the following steps:
Run the repack command:
trueancestor_repacker --batch config.json --output ./repacked_pkgs trueancestor pkg repacker