The text 874bfd8b7bb2, as Debian 9 (Stretch) shipped it.
Bundle cached tarballs in vendor/cache
Carton::Doc::Bundle(3pm) on Linux now