The text 1ac07b287a62, as Debian 10 (Buster) shipped it.
Bundle cached tarballs in vendor/cache
Carton::Doc::Bundle(3pm) on Linux now