both timestamped 26-Jan-2023 23:01 in the directory listing
primary.xml has package with checksum be8f8f34a444f82e2d057d799e1eaf4c69197efeb1a46ecd2d4cc1a7ea37949f:
<package type="rpm">
<name>python3-perf</name>
<arch>x86_64</arch>
<version epoch="0" ver="5.14.0" rel="162.12.1.el9_1.0.1"/>
<checksum type="sha256" pkgid="YES">
be8f8f34a444f82e2d057d799e1eaf4c69197efeb1a46ecd2d4cc1a7ea37949f
</checksum>
<summary>
Python bindings for apps which will manipulate perf events
</summary>
<description>
The python3-perf package contains a module that permits applications written in the Python programming language to use the interface to manipulate perf events.
</description>
<packager>Release Engineering <releng@rockylinux.org></packager>
<url>https://www.kernel.org/</url>
<time file="1674758604" build="1674500931"/>
<size package="2077777" installed="391829" archive="392312"/>
<location href="Packages/p/python3-perf-5.14.0-162.12.1.el9_1.0.1.x86_64.rpm"/>
...
other.xml has pkgid 786010ce275e9a122265d52515eb90784e036bdf68f2ed2d78d1de250016d3f0:
Good to know. Although the bug is misleading and pointing to an old issue where metadata was reversed. But in this case, as far as I understand, the metadata is actually inconsistent. The same rpm has different checksums in primary.xml and other.xml…