tpm2.0-tools-debugsource-5.2-150400.4.6 >  A bvp9| Bxfʳ>/nJ~}ϖ'QS:5'ח R:&.H2S ]*~;yFpDExQk ɼ?Tܻ dMͪ{rVLnW*=Ì}!6YVy G@LleW$K;U@gmE95P,i*?ְ:+f1C(.OJN2:_WFet!n2֍d L&9ͼ/c- ţ|cg2օU;z+Тs_tC ,1BP`_gTcwj:ei[n-o/Il omH({)ܚjrg89  -Pʹ)8Eh8Udw$~MhzR6rW l!Fe > ]+,1?#Py]_]?|NOKT>p;n`?nPd * Q %FS i{ |   8 =B > A4E&II<LdLLM(M/8M8&9M&:QB&FPAGPTHS|IVXWpYWx\W]Z^h7bifcjdjmejrfjuljwujvmzmnnn nLCtpm2.0-tools-debugsource5.2150400.4.6Debug sources for package tpm2.0-toolsThis package provides debug sources for package tpm2.0-tools. Debug sources are useful when developing applications that use this package or when debugging this package.bvasheep66@SUSE Linux Enterprise 15SUSE LLC BSD-3-Clausehttps://www.suse.com/Development/Debughttps://github.com/tpm2-software/tpm2-tools/releaseslinuxx86_64n`B! |LFb tx\B |&+{V'NlHD= 4$-]?U)*&2!8t  ,E & P   A yPRjE RMl ,>(@*1)  Hq>5,(9A=b  k '.1v ]y@&X@F#Jty*80)a9" -- " y %+ u+  - < $ ` *  %o ]F/A 5I"(To  AA큤AA큤A큤bvWbvWaMaMaMa#a#a#a#aMaMa#a#aMaMaMaMbvCa#aMa#a#a#a#a#aMaMa#a#a#a#aMa#aMaMa#a#a#a#a#aMa#aMa#aMa#aMaMaMaMaMa#a#a#a#a#a#aMaMbvWbvWa#a#a#a#a#a#a#a#a#a#a#a#a#a#a#a#a#a#a#a#a#a#a#a#a#a#a#a#a#a#a#a#a#a#a#a#a#a#bvWaMaMaMaMa#a#a#a#a#a#a#a#a#a#a#aMa#aMaMaMa#aMa#a#a#a#a7h7a#aR)a#a#aMa#a#a#a#a#a#a#a#aMa#aRHaMaMa#aMaMa#aMa#a#aMa#aMa#a#a#a#aMa#a#a#a#a#a#a#a#a#a#a#a#a#a#a#a#a#a#a#a#aMa#a#aMaMa#a#a#a#a#a#a#aMa#a#a#a#aMa#a#a#a#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.0-tools-5.2-150400.4.6.src.rpmtpm2.0-tools-debugsourcetpm2.0-tools-debugsource(x86-64)    rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3a@aapa@``ٹ`̊`9@`Ȗ@` @`@`7@`@_t@]@]@]c\@[t[}P@[6@[{@Z@Z@Z@Z@ZZC@Y@Yp@YTYI@Y1S@YXO@XW@Vaplanas@suse.comaplanas@suse.comaplanas@suse.comaplanas@suse.commatthias.gerstner@suse.comfvogt@suse.comaplanas@suse.comaplanas@suse.comaplanas@suse.comdimstar@opensuse.orgmatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.comvcizek@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commeissner@suse.commatthias.gerstner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.com- The update to 5.2 fill also jsc#SLE-9515 (4.1) and jsc#SLE-17366 (4.3.0)- Fix python3-PyYAML requirement - Move the tests inside a bcond. Disabled by default.- Update to version 5.2: + tpm2_nvextend: * Added option -n, --name to specify the name of the nvindex in hex bytes. This is used when cpHash ought to be calculated without dispatching the TPM2_NV_Extend command to the TPM. + tpm2_nvread: * Added option --rphash=FILE to specify ile path to record the hash of the response parameters. This is commonly termed as rpHash. * Added option -n, --name to specify the name of the nvindex in hex bytes. This is used when cpHash ought to be calculated without dispatching the TPM2_NVRead command to the TPM. * Added option -S, --session to specify to specify an auxiliary session for auditing and or encryption/decryption of the parameters. + tpm2_nvsetbits: * Added option --rphash=FILE to specify file path to record the hash of the response parameters. This is commonly termed as rpHash. * Added option -S, --session to specify to specify an auxiliary session for auditing and or encryption/decryption of the parameters. * Added option -n, --name to specify the name of the nvindex in hex bytes. This is used when cpHash ought to be calculated without dispatching the TPM2_NV_SetBits command to the TPM. + tpm2_createprimary: * Support public-key output at creation time in various public-key formats. + tpm2_create: * Support public-key output at creation time in various public-key formats. + tpm2_print: * Support outputing public key in various public key formats over the default YAML output. Supports taking -u output from tpm2_create and converting it to a PEM or DER file format. + tpm2_import: * Add support for importing keys with sealed-data-blobs. + tpm2_rsaencrypt, tpm2_rsadecrypt: * Add support for specifying the hash algorithm with oaep. + tpm2_pcrread, tpm2_quote: * Add option -F, --pcrs_format to specify PCR format selection for the binary blob in the PCR output file. 'values' will output a binary blob of the PCR values. 'serialized' will output a binary blob of the PCR values in the form of serialized data structure in little endian format. + tpm2_eventlog: * Add support for decoding StartupLocality. * Add support for printing the partition information. * Add support for reading eventlogs longer than 64kb including from /sys/kernel/security/tpm0/binary_bios-measurements. + tpm2_duplicate: * Add option -L, --policy to specify an authorization policy to be associated with the duplicated object. * Added support for external key duplication without needing the TCTI. + tools: * Enhance error message on invalid passwords when sessions cannot be used. + lib/tpm2_options: * Add option to specify fake tcti which is required in cases where sapi ctx is required to be initialized for retrieving command parameters without invoking the tcti to talk to the TPM. + openssl: * Dropped support for OpenSSL < 1.1.0 * Add support for OpenSSL 3.0.0 + Support added to make the repository documentation and man pages available live on readthedocs. + Bug-fixes: * tpm2_import: Don't allow setting passwords for imported object with -p option as the tool doesn't modify the TPM2B_SENSITIVE structure. Added appropriate logging to indicate using tpm2_changeauth after import. * lib/tpm2_util.c: The function to calculate pHash algorithm returned error when input session is a password session and the only session in the command. * lib/tpm2_alg_util.c: Fix an error where oaep was parsed under ECC. * tpm2_sign: Fix segfaults when tool does not find TPM resources (TPM or RM). * tpm2_makecredential: Fix an issue where reading input from stdin could result in unsupported data size larger than the largest digest size. * tpm2_loadexternal: Fix an issue where restricted attribute could not be set. * lib/tpm2_nv_util.h: The NV index size is dependent on different data sets read from the GetCapability structures because there is a dependency on the NV operation type: Define vs Read vs Write vs Extend. Fix a sane default in the case where GetCapability fails or fails to report the specific property/ data set. This is especially true because some properties are TPM implementation dependent. * tpm2_createpolicy: Fix an issue where tool exited silently without reporting an error if wrong pcr string is specified. * lib/tpm2_alg_util: add error message on public init to prevent tools from dying silently, add an error message. * tpm2_import: fix an issue where an imported hmac object scheme was NULL. While allowed, it was inconsistent with other tools like tpm2_create which set the scheme as hmac->sha256 when generating a keyedhash object. - Drop patches already in upstream: + 0001-tpm2_checkquote-fix-uninitialized-variable.patch + 0001-tpm2_eventlog-fix-buffer-offset-when-reading-the-eve.patch + 0001-tpm2_eventlog-read-eventlog-file-in-chunks.patch- Add 0001-tpm2_eventlog-fix-buffer-offset-when-reading-the-eve.patch to fix the offset of the read buffer- prepare running the test suite via %check, but leave it commented out, because it is broken due to LTO linking.- update to version 5.1.1: - tpm2_import: fix fixed AES key CVE-2021-3565 - tpm2_import used a fixed AES key for the inner wrapper, which means that a MITM attack would be able to unwrap the imported key. To fix this, ensure the key size is 16 bytes or bigger and use OpenSSL to generate a secure random AES key. - Avoid pandoc build dependency, use prebuilt man pages everywhere - Drop 0001-tpm2_import-fix-fixed-AES-key-CVE-2021-3565.patch, now upstream - Drop _service, unused - Drop unused unzip build dependency - Drop autoreconfigure call, no longer necessary - Use %autosetup - Verify tarball signature - Build against efivar - Drop %check section, tests weren't built, so that was a noop- Add 0001-tpm2_eventlog-read-eventlog-file-in-chunks.patch to fix the tpm2_eventlog command (boo#1187360)- Add 0001-tpm2_checkquote-fix-uninitialized-variable.patch for a better fix of boo#1187316 - Re-enable lto- Disable lto to fix tpm2_checkquote error (boo#1187316) - Update service file to point to the correct revision- Do not BuildRequire pandoc on ix86 architectures: the haskell stack is not supported on intel 32bit archs.- add 0001-tpm2_import-fix-fixed-AES-key-CVE-2021-3565.patch: no longer use a fixed AES key in the context of the tpm2_import command. Fixes CVE-2021-3565 (bsc#1186490). - drop fix_pie_linking.patch: now contained in upstream tarball - drop fix_warnings.patch: now contained in upstream tarball - update to upstream version 5.1: - Minimum tpm2-tss version dependency bumped to 3.1.0 - Minimum tpm2-abrmd version dependency bumped to 2.4.0 - tss2: - Support in tools for PolicyRef inclusion in policy search per latest TSS. - Support to use TPM objects protected by a policy with PolicySigned. - Enable backward compatibility to old Fapi callback API. - Fix PCR selection for tss2 quote. - Support policy signed policies by implementing Fapi_SetSignCB. - Command/ response parameter support for auditing and pHash policies: - lib/tpm2_util.c: Add method to determine hashing alg for cp/rphash - Add support to calculate rphash for tpm2_create, tpm2_activatecredential, tpm2_certify, tpm2_certifycreation, tpm2_changeauth, tpm2_changeeps, tpm2_changepps, tpm2_nvdefine, tpm2_nvextend, tpm2_unseal - Add support to calculate cphash for tpm2_changeeps, tpm2_changepps. - Session-support: - tpm2_sessionconfig: Add tool to display and configure session attributes. - tpm2_getrandom: Fix— session input was hardcoded for audit-only - tpm2_startauthsession: Add option to specify the bind object and its authorization value. - tpm2_startauthsession: support for bounded-only session. - tpm2_startauthsession: support for salted-only session. - tpm2_startauthsession: add option to specify an hmac session type. - Add support for specifying non-authorization sessions for audit and parameter encryption for tpm2_getrandom, tpm2_create, tpm2_nvextend, tpm2_nvdefine, tpm2_unseal, tpm2_activatecredential, tpm2_certify, tpm2_certifycreation, tpm2_changeauth, tpm2_changeeps, tpm2_changepps. - tpm2_eventlog: - Support for event type: EV_IPL extensively used by the Shim and Grub. - Support for event type: EV_EFI_GPT_EVENT to parse. UEFI_PARTITION_TABLE_HEADER and UEFI_PARTITION_ENTRY. - Support for event type: EFI_SIGNATURE_LIST, which contains one or more EFI_SIGNATURE_DATA. - Support for event type EV_EFI_VARIABLE_AUTHORITY. - Parse UEFI_PLATFORM_FIRMWARE_BLOB structure that the CRTM MUST put into the Event Log entry TCG_PCR_EVENT2.event field for event types EV_POST_CODE, EV_S_CRTM_CONTENTS, and EV_EFI_PLATFORM_FIRMWARE_BLOB. - Parse secureboot variable to indicate enable as 'Yes'. - Parse BootOrder variable to a more readable format. - Parse Boot variables per EFI_LOAD_OPTION described in more details in UEFI Spec Section 3.1.3 - Parse Device-path in a readable format using the efivar library. - Support for logs longer than 64 kilobytes. - Perform verification for event types where digest can be verified from their event payload. - Better support for multiline strings. - Fix handling of event log EV_POST_CODE data where field is empty and len is specified. - scripts/utils: Add a utility to read the cert chain of embedded CA. - tpm2_getekcertificate: Fix tool failing to return error/non-zero for HTTP 404. - tpm2_nvdefine: allow setting hash algorithm by command line parameter for NV indices set in extend mode. - tpm2_duplicate, tpm2_import: support duplicating non-TPM keys to a remote TPM without first requiring them to be loaded to a local TPM. - tpm2_dictionarylockout: Fix issue where setting value for one parameter caused to reset the others. - tpm2_getpolicydigest: Add new tool to enable TPM2_CC_PolicyGetDigest. - Fix segfault where optind > argc. - tools/tpm2_checkquote: fix missing initializer - tpm2_convert: fix EVP_EncodeUpdate usage for OSSL < 1.1.0 - openssl: fix EVP_ENCODE_CTX_(new|free) - test: Add support for swTPM simulator to the testing framework and make it the default if mssim isn't available. - tpm2_unseal: - Added option **\--rphash**=_FILE_ to specify ile path to record the hash of the response parameters. This is commonly termed as rpHash. - tpm2_nvextend: - Added option **\--rphash**=_FILE_ to specify ile path to record the hash of the response parameters. This is commonly termed as rpHash. - tpm2_nvdefine: - Added option **\--rphash**=_FILE_ to specify ile path to record the hash of the response parameters. This is commonly termed as rpHash. - tpm2_changepps: - Added option **\--cphash**=_FILE_ to specify ile path to record the hash of the command parameters. This is commonly termed as cpHash. - Added option **\--rphash**=_FILE_ to specify ile path to record the hash - Added option **-S**, **\--session** to specify to specify an auxiliary session for auditing and or encryption/decryption of the parameters. - tpm2_changeeps: - Added option **\--cphash**=_FILE_ to specify ile path to record the hash of the command parameters. This is commonly termed as cpHash. - Added option **\--rphash**=_FILE_ to specify ile path to record the hash of the response parameters. This is commonly termed as rpHash. - Added option **-S**, **\--session** to specify to specify an auxiliary session for auditing and or encryption/decryption of the parameters. - tpm2_changeauth: - Added option **\--rphash**=_FILE_ to specify ile path to record the hash of the response parameters. This is commonly termed as rpHash. - Added option **-S**, **\--session** to specify to specify an auxiliary session for auditing and or encryption/decryption of the parameters. - tpm2_certifycreation: - Added option **\--rphash**=_FILE_ to specify ile path to record the hash of the response parameters. This is commonly termed as rpHash. - Added option **-S**, **\--session** to specify to specify an auxiliary session for auditing and or encryption/decryption of the parameters. - tpm2_certify: - Added option **\--rphash**=_FILE_ to specify ile path to record the hash of the response parameters. This is commonly termed as rpHash. - Added option **-S**, **\--session** to specify to specify an auxiliary session for auditing and or encryption/decryption of the parameters. - tpm2_activatecredential: - Added option **\--rphash**=_FILE_ to specify ile path to record the hash of the response parameters. This is commonly termed as rpHash. - Added option **-S**, **\--session** to specify to specify an auxiliary session for auditing and or encryption/decryption of the parameters. - tpm2_create: - Added option **\--rphash**=_FILE_ to specify ile path to record the hash of the response parameters. This is commonly termed as rpHash. - tpm2_unseal: - Added option **-S**, **--session** to specify auxiliary sessions for audit and encryption. - tpm2_nvdefine: - Added option **-S**, **--session** to specify auxiliary sessions for audit and encryption. - tpm2_nvextend: - Added option **-S**, **--session** to specify auxilary sessions for audit and encryption.- fix `--version` output of tools. Since now autoreconf is called and configure.ac attempts to fetch the version from git (which we don't have during building), the version was empty. Fix this by replacing the git invocation in configure.ac.- add fix_warnings.patch: fixes a couple of build errors resulting from LTO linking and -Werror. - add fix_pie_linking.patch: fixes an error in the build system that causes the tss2 binary to be linked without passed LDFLAGS (like -pie), which causes the binary not to be position independent. - update to major version 5.0: - Non Backwards Compatible Changes * Default hash algorithm is now sha256. Prior versions claimed sha1, but were inconsistent in choice. Best practice is to specify the hash algorithm to avoid surprises. * tpm2_tools and tss2_tools are now a busybox style commandlet. Ie tpm2_getrandom becomes tpm2 getrandom. make install will install symlinks to the old tool names and the tpm2 commandlet will interrogate argv[0] for the command to run. This will provide backwards compatibility if they are installed. If you wish to use the old names not installed system wide, set DESTDIR during install to a separate path and set the proper directory on PATH. * tpm2_eventlog's output changed to be YAML compliant. The output before was intended to be YAML compliant but was never properly checked and tested. * umask set to 0117 for all tools. * tpm2_getekcertificate now outputs the INTC EK certificates in PEM format by default. In order to output the URL safe variant of base64 encoded output of the INTC EK certificate use the added option --raw. - Dependency update * Update tpm2-tss dependency version to 3.0.1 * Update tpm2-abrmd dependency version to 2.3.3 - New tools and features * tpm2_zgen2phase: Add new tool to support command TPM2_CC_ZGen_2Phase. * tpm2_ecdhzgen: Add new tool to support command TPM2_CC_ECDH_ZGen. * tpm2_ecdhkeygen: Add new tool to support command TPM2_CC_ECDH_KeyGen. * tpm2_commit: Add new tool to support command TPM2_CC_Commit. * tpm2_ecephemeral: Add new tool to support command TPM2_CC_EC_Ephemeral. * tpm2_geteccparameters: Add new tool to support command TPM2_CC_ECC_Parameters. * tpm2_setcommandauditstatus: Added new tool to support command TPM2_CC_SetCommandCodeAuditStatus. * tpm2_getcommandauditstatus: Added new tool to support command TPM2_CC_GetCommandAuditDigest. * tpm2_getsessionauditdigest: Added new tool to support command TPM2_CC_GetSessionAuditDigest. * tpm2_certifyX509certutil: Added new tool for creating partial x509 certificates required to support the TPM2_CC_CertifyX509 command. * tpm2_policysigned: Added option --cphash-input to specify the command parameter hash (cpHashA), enforcing the TPM command to be authorized as well as its handle and parameter values. * tpm2_createprimary: Added option to specify the unique data from the stdin by adding provision for specifying the option value for unique file as -. * tpm2_startauthsession: Added new feature/option --audit-session to start an HMAC session to be used as an audit session. * tpm2_getrandom: - Added new feature/option -S, --session to specify a HMAC session to be used as an audit session. This adds support for auditing the command using an audit session. - Added new feature/option --rphash to specify file path to record the hash of the response parameters. This is commonly termed as rpHash. - Added new feature/option --cphash to specify a file path to record the hash of the command parameters. This is commonly termed as cpHash. NOTE: In absence of --rphash option, when this option is selected, The tool will not actually execute the command, it simply returns a cpHash. * tpm2_getcap: tpm2_getcap was missing raw on a property TPM2_PT_REVISION, and it should always be specified. * tpm2_sign: - Add option --commit-index to specify the commit index to use when performing an ECDAA signature. - Add support for ECDAA signature. * tpm2_getekcertificate: - Add option --raw to output EK certificate in URL safe variant base64 encoded format. By default it outputs a PEM formatted certificate. - The tool can now output INTC and non INTC EK certificates from NV indices specified by the TCG EK profile specification. * tpm2_activatecredential: - The secret data input can now be specified as stdin with -s option. - The public key used for encryption can be specified as -u to make it similar to rest of the tools specifying a public key. The old -e option is retained for backwards compatibility. - Add option to specify the key algorithm when the input public key is in PEM format using the new option -G, --key-algorithm. Can specify either RSA/ECC. When this option is used, input public key is expected to be in PEM format and the default TCG EK template is used for the key properties. * tpm2_checkqoute: - Add EC support. - Support loading tss signatures. - Support loading tpm2 pcrread PCR values by specifying the PCR selection using the new option -l, --pcr-list. - Added support for automatically detecting the signature format. With this -F, --format option is retained for backwards compatibility but it is deprecated. * tpm2_createak: add option to output qualified name with new option - q, --ak-qualified-name. * tpm2_policypcr: Add option for specifying cumulative hash of PCR's as an argument. * tpm2_readpublic: Add option to output qualified name using the new option - q, --qualified-name. * tpm2_print: - Support printing TPM2B_PUBLIC data structures. - Support printing TPMT_PUBLIC data structures. * tpm2_send: Add support for handling sending and receiving command and response buffer for multiple commands. * tpm2_verifysignature: Added support for verifying RSA-PSS signatures. * tpm2_eventlog: - Add handling of sha1 log format. - Add fixes for eventlog output to be proper YAML. - Add support for sha384, sha512, sm3_256 PCR hash algorithms. - Add support for computing PCR values based on the events. * tpm2_tools (all): - Set stdin/stdout to non-buffering. - Added changes for FreeBSD portability. - Bug fixes * Fix printing short options when no ascii character is used. * OpenSSL: Fix deprecated OpenSSL functions. ECC Functions with suffix GFp will become deprecated (DEPRECATED_1_2_0). * tpm2_eventlog: output EV_POST_CODE as string not firmware blob to be compliant with TCG PC Client FPF section 2.3.4.1 and 9.4.12.3.4.1 * Fix missing handle maps for ESY3 handle breaks. See #1994. * tpm2_rsaencrypt: fix OAEP RSA encryption failing to invalid hash selection. * tpm2_rsadecrypt: fix OAEP RSA decryption failing to invalid hash selection. * tpm2_sign: fix for signing failures with restricted signing keys when input data to sign is not a digest, rather the full message. The validation ticket creation process defaults to the owner hierarchy and so in order to choose other hierarchies the tpm2_hash tool should be used instead. * tpm2_print: fix segfault when -t option is omitted by appropriately warning of the required option. * tpm2_nvdefine: fix for default size when size is not specified by invoking TPM2_CC_GetCapability. * Fix for an issue where the return code for unsupported algorithms was tool_rc_general instead of tool_rc_unsupported in tpm2_create and tpm2_createprimary tools. * Fix for an issue where RSA_PSS signature verification caused failures. * tpm2_nvreadpublic, tpm2_kdfa, tpm2_checkquote, tpm2_quote: Fixes for issues with interoperability of the attestation tools between big and little endian platforms. * tss2_*: - Fix bash-completion for tss2_pcrextend and tss2_verifysignature - Add force option to tss2_list - Make force option consistent in all fapi tools - Do not decode non-TPM errors - Enhance integration tests to test changes of optional/mandatory parameters - Add --hex parameter to tss2_getrandom - Fix autocompletion issue - Switch tss2_* to with-"="-style - Add size parameter to tss2_createseal - References to the cryptographic profile (fapi-profile(5)) and config file - (fapi-config(5)) man pages from all relevant tss2_* man pages. - Fix policy branch selection menu item from 1 to 0. - Documentation * wiki pages have been removed and data has been migrated to tpm2-software.github.io portal's tutorial section. * Fix the problem with man and no-man help output for tools were not correctly displayed. * man: - tpm2_create: Correct max seal data size from 256 bytes to 128 bytes. - tpm2_nvread: Fix manpage example. - tpm2_nvwrite: Added missing information on how to specify the NV index as an argument. - tpm2_unseal: Add end-to-end example. - tpm2_nvincrement: Fix incorrect commands in example section. - tpm2_hmac: Fix the example section.- update to version 4.3: - changes in version 4.3: - tss2_*: Fix double-free errors in commands asking for password authorization - tss2_*: Fix shorthand command -f that was falsely requiring an argument - tss2_*: Update tss2_encrypt to the new FAPI interface - The argument 'policyPath' is removed which was never read anyway - tss2_*: Remove the additional '\n' that was appended when redirecting to stdout - tss2_*: Update mandatory vs optional treatment of arguments according to latest Fapi spec - tss2_*: tss2_getinfo now retrieves the correct FAPI version from Fapi_GetInfo - tss2_*: Fix the error handling in case of multiple inputs and/or outputs from stdin/stdout - tss2_*: Fix syntax errors and update content of man pages according to latest Fapi spec - tss2_*: Add parameter types to all man page - tss2_*: tss2_setappdata now reads from file or stdin allowing to store also binary data - tss2_*: Memory leaks are fixed in cases when a returned empty non-char output value was passed to file output - tss2_pcrextend: fix extending PCR 0 - tss2_quote: fix unused TSS2_RC in LOG_ERR - changes in 4.2.1: - Fix missing handle maps for ESY3 handle breaks. See #1994. - Bump ESYS minimum dependency version from 2.3.0 to 2.4.0. - Fix for loop declarations build error. - changes in 4.2: - Fix various issues reported by static analysis tools. - Add integration test for ECC based getekcertificate. - Fix for issue #1959 where ARM builds were failing. - Add a check in autotools to add "expect" as a package dependency for fapi tools. - tpm2_createek: Drop the unused -p or --ek-auth option - tpm2_policyor: List of policy files should be specified as an argument - instead of -l option. The -l option is still retained for backwards - compatibility. See issue#1894. - tpm2_eventlog: add a tool for parsing and displaying the event log. - tpm2_createek: Fix an issue where the template option looked for args - tpm2_hierarchycontrol: Fixed bug where tool operation failed silently - tpm2_nvdefine: Fixed an issue where text output suggested failures as passes - tpm2_certify: Add an example usage in man page - tpm2_policyor: Fix a bug where tool failed silently when no input were given - tpm2_getekcertificate: Intel (R) PTT EK cert web portal is set as default address - tpm2_alg_util.c: Fix a bug where string rsa3072 was not parsed - .ci/download-deps.sh: Change tss dependency to 2.4.0 to acquire SAPI handles for cpHash calculations - tpm2_policycphash: Add a tool to implement enhanced authorization with cpHash of a command - Add options to tools to enable cpHash outputs: tpm2_nvsetbits, tpm2_nvextend, tpm2_nvincrement, tpm2_nvread, tpm2_nvreadlock, tpm2_writelock, tpm2_nvdefine, tpm2_nvundefine, tpm2_nvcertify, tpm2_policynv, tpm2_policyauthorizenv, tpm2_policysecret, tpm2_create, tpm2_load, tpm2_activatecredential, tpm2_unseal, tpm2_changeauth, tpm2_duplicate, tpm2_import, tpm2_rsadecrypt, tpm2_certify, tpm2_certifycreation, tpm2_hierarchycontrol, tpm2_setprimarypolicy, tpm2_clearcontrol, tpm2_dictionarylockout, tpm2_evictcontrol, tpm2_setclock, tpm2_clockrateadjust, tpm2_clear, tpm2_nvwrite, tpm2_encryptdecrypt, tpm2_hmac. - tpm2_import: Fix an issue where the imported key always required to have a policy - tpm2_policysecret: Fix an issue where authorization model was fixed to password only - Feature API (FAPI) tools added. These additional set of tools implement utilities - using the FAPI which was added to the tpm2-tss v2.4.4: tss2_decrypt, tss2_encrypt, tss2_list, tss2_changeauth, tss2_delete, tss2_import, tss2_getinfo, tss2_createkey, tss2_createseal, tss2_exportkey, tss2_getcertificate, tss2_getplatformcertificates, tss2_gettpmblobs, tss2_getappdata, tss2_setappdata, tss2_setcertificate, tss2_sign, tss2_verifysignature, tss2_verifyquote, tss2_createnv, tss2_nvextend, tss2_nvincrement, tss2_nvread, tss2_nvsetbits, tss2_nvwrite, tss2_getdescription, tss2_setdescription, tss2_pcrextend, tss2_quote, tss2_pcrread, tss2_authorizepolicy, tss2_exportpolicy, tss2_import, tss2_provision, tss2_getrandom, tss2_unseal, tss2_writeauthorizenv - tpm2_policycountertimer: Fix an issue where operandB array was reversed causing faulty comparisons. - changes in 4.1.1: - tpm2_certify: Fix output of attestation data including size field. Now outputs just bytes. - tpm2_certifycreation: Fix tool to match manpage where the code had the -C and -c options reversed. - tpm2_gettime: Fix output of attestation data including size field. Now outputs just bytes. - tpm2_nvcertify: Fix output of attestation data including size field. Now outputs just bytes. - tpm2_nvreadpublic: add name hash output. - tpm2_import: Support object policies when importing raw key material. - Fix overflow in pcrs.h where sizeof() was used instead of ARRAY_LEN(). - build: - Fix compilation issue: lib/tpm2_hash.c:17:19: note: 'left' was declared here. - man: - Fix manpage examples that have "sha" instead of "sha1" - tpm2_shutdown manpage was missing, add it to build. - Fix manpage example for tpm2_createak's tpm2_evictcontrol example. - Remove fix_bad_bufsize.patch: is now contained in upstream tarball - Adjust fix_bogus_warning.patch: one hunk no longer applies, upstream code changed.- add fix_bad_bufsize.patch: fixes findings from compile time fread() checks that indicate bad buffer size specification. - add fix_bogus_warning.patch: fixes `maybe-unitialized` warnings that are bogus, since the variables in questions will be initialized in any case later on.- update to major version 4.1: - changes in version 4.1: * tpm2_certifycreation: New tool enabling command TPM2_CertifyCreation. * tpm2_checkquote: - Fix YAML output bug. - -g option for specifying hash algorithm is optional and defaults to sha256. * tpm2_changeeps: A new tool for changing the Endorsement hierarchy primary seed. * tpm2_changepps: A new tool for changing the Platform hierarchy primary seed. * tpm2_clockrateadjust: Add a new tool for modifying the period on the TPM. * tpm2_create: Add tool options for specifying output data for use in certification - --creation-data to save the creation data - --creation-ticket or -t to save the creation ticket - --creation-hash or -d to save the creation hash - --template-data for saving the template data of the key - --outside-info or -q for specifying unique data to include in creation data. - --pcr-list or -l Add option to specify pcr list to add to creation data. * tpm2_createprimary: Add tool options for specifying output data for use in certification - --creation-data to save the creation data - --creation-ticket or -t to save the creation ticket - --creation-hash or -d to save the creation hash - --template-data for saving the template data of the key - --outside-info or -q for specifying unique data to include in creation data. - --pcr-list or -l Add option to specify pcr list to add to creation data. * tpm2_evictcontrol: - Fix bug in automatic persistent handle selection when hierarchy is platform. - Fix bug in YAML key action where action was wrong when using ESYS_TR. * tpm2_getcap: clean up remanenats of -c option in manpages and tool output. * tpm2_gettime: Add a new tool for retrieving a signed timestamp from a TPM. * tpm2_nvcertify: Add a new tool for certifying the contents of an NV index. * tpm2_nvdefine: - Support default set of attributes so -a is not mandatory. - Support searching for free index if an index isn't specified. * tpm2_nvextend: Add a new tool for extending an NV index similair to a PCR. * tpm2_nvreadpublic: - Support specifying nv index to read public data from as argument. * tpm2_nvsetbits: Add a new tool for setting the values of PCR with type "bits". * tpm2_nvundefine: Add support for deleting NV indices with attribute `TPMA_NV_POLICY_DELETE` set using NV Undefine Special command. * tpm2_nvwritelock: Add a new tool for setting a write lock on an NV index or globally locking nv indices with TPMA_NV_GLOBALLOCK. * tpm2_policyauthorizenv: New tool enabling signed, revocable policies. * tpm2_policyauthvalue: New tool enabling authorization to be bound to the authorization of another object. * tpm2_policycountertimer: Add a new tool for enabling policy bound to TPM clock or timer values. * tpm2_policynamehash: Add a new tool for specifying policy based on object name. * tpm2_policynv: Add a new tool for specifying policy based on NV contents. * tpm2_nvwritten: Add a new tool for specifying policy based on whether or not an NV index was written to. * tpm2_policysecret: Add tool options for specifying - --expiration or -t - --ticket - --timeout - --nonce-tpm or -x - --qualification or -q * tpm2_policysigned: New tool enabling policy command TPM2_PolicySigned. * tpm2_policytemplate: New tool enabling policy command TPM2_PolicyTemplate. * tpm2_policyticket: New tool enabling policy command TPM2_PolicyTicket. * tpm2_readclock: Add a new tool for reading the TPM clock. * tpm2_setclock: Add a new tool for setting the TPM clock. * tpm2_setprimarypolicy: New tool setting policy on hierarchies. * tpm2_shutdown: Add a new tool for issuing a TPM shutdown command. * misc: - Support "tpmt" as a public key output format that only saves the TPMT structure. - Qualifying data or extra data in many tools can be hex array string or binary file. - Add support for specifying NV index type when specifying NV attributes. - Support added for tools to run on FreeBSD. - Skip and notify of action that man pages will not install if the package pandoc is missing. - Fix precedence issue with bitwise operator order int tpm2_getcap - travis: bump abrmd version 2.3.0 - tpm2_util.c: Fix an issue int variable size was checked against uint - pcr.c: Fix buffer length issue to support all defined hash algorithm - changes in version 4.0.1: * tpm2_checkquote: Fix YAML output bug. - changes in version 4.0: * tpm2_activatecredential: - --context is now --credentialedkey-context. - --key-context is now --credentialkey-context. - --Password is now --credentialedkey-auth. - --endorse-passwd is now --credentialkey-auth. - --in-file is now --credential-secret. - --out-file is now --certinfo-data. - -f becomes -i. - -k becomes -C. - -e becomes -E. * tpm2_certify: - --halg is now --hash-algorithm. - --obj-context is now --certifiedkey-context. - --key-context is now --signingkey-context. - --pwdo is now --certifiedkey-auth. - --pwdk is now --signingkey-auth. - -a becomes -o. - -k becomes -p. - -c becomes -C. - -k becomes -K. * tpm2_changeauth: - New tool for changing the authorization values of: - Hierarchies - NV - Objects - Replaces tpm2_takeownership with more generic functionality. * tpm2_checkquote: - --halg is now --hash-algorithm. - --pcr-input-file is now --pcr. - --pubfile is now --public. - --qualify-data is now --qualification. - -f becomes -F. - -F becomes -f. - -G becomes -g. * tpm2_clear: - --lockout-passwd is now --auth-lockout. * tpm2_clearcontrol: - New tool for enabling or disabling tpm2_clear commands. * tpm2_create - --object-attributes is now --attributes. - --pwdp is now --parent-auth. - --pwdo is now --key-auth. - --in-file is now --sealing-input. - --policy-file is now --policy. - --pubfile is now --public. - --privfile is now --private. - --out-context is now --key-context. - --halg is now --hash-algorithm. - --kalg is now --key-algorithm. - -o becomes -c. - -K becomes -p. - -A becomes -b. - -I becomes -i. - -g becomes an optional option. - -G becomes an optional option. - Supports TPM command CreateLoaded via -c. * tpm2_createak: - Renamed from tpm2_getpubak * tpm2_createek: - renamed from tpm2_getpubek * tpm2_createpolicy: - --out-policy-file is now --policy. - --policy-digest-alg is now --policy-algorithm. - --auth-policy-session is now --policy-session. - -L becomes -l. - -F becomes -f. - -f becomes -o. - Removed option --set-list with short option -L. - Removed option --pcr-input-file with short option -F. - Pcr policy options replaced with pcr password mini language. - Removed short option a for specifying auth session. Use long option --policy-session. - Removed short option -P for specifying pcr policy. Use long option --policy-pcr. * tpm2_createprimary: - --object-attributes is now --attributes. - -o is now -c - --pwdp is now --hierarchy-auth. - --pwdk is now --key-auth. - --halg is now --hash-algorithm. - --kalg is now --key-algorithm. - --context-object is now --key-context. - --policy-file is now --policy. - support for unique field when creating objects via -u - saves a context file for the generated primary's handle to disk via -c. - -A becomes -a. - -K becomes -p. - -H becomes -C. - -g becomes optional. - -G becomes optional. * tpm2_dictionarylockout: - --lockout-passwd is now --auth. - -P becomes -p. * tpm2_duplicate: - New tool for duplicating TPM objects. * tpm2_encryptdecrypt: - --pwdk is now --auth. - --out-file is now --output. - -D becomes -d. - -I becomes an argument. - -P becomes -p. - Support IVs via -t or --iv. - Support modes via -G. - Support padding via -e or --pad. - Supports input and output to stdin and stdout respectively. * tpm2_evictcontrol: - --auth is now --hierarchy. - --context is now --object-context. - --pwda is now --auth. - --persistent with short option -S is now an argument. - -A becomes -C. - Added option --output -o to serialize handle to disk. - Removed option --handle with short option -H. - Raw object-handles and object-contexts are commonly handled with object handling logic. - Removed option --input-session-handle with short option -i. - Authorization session is now part of password mini language. * tpm2_getcap: - -c becomes an argument. - Most instances of value replaced with raw in YAML output. - TPM2_PT_MANUFACTURER displays string value and raw value. - Supports --pcr option for listing hash algorithms and bank numbers. * tpm2_getekcertificate: - Renamed from tpm2_getmanufec * tpm2_getmanufec: - Renamed the tool to tpm2_getekcertificate. - Removed ek key creation and management logic. - Added option for getting ek cert for offline platform via -x. - Support for ECC keys. - --ec-cert is now --ek-certificate, - --untrusted is now --allow-unverified, - --output is now --ek-public, - -U is now -X. - -O is now -x. - -f becomes -o. - Removed option -P or --endorse-passwd. - Removed option -p or --ek-passwd. - Removed option -w or --owner-passwd. - Removed option -H or --persistent-handle. - Removed option -G or --key-algorithm. - Removed option -N or --non-persistent. - Removed option -O or --offline. * tpm2_getpubak: - renamed to tpm2_createak. - -f becomes -p and -f is used for format of public key output. - --auth-endorse is now --eh-auth. - --auth-ak is now --ak-auth. - --halg is now --hash-algorithm. - --kalg is now --key-algorithm. - -e becomes -P. - -P becomes -p. - -D becomes -g. - -p becomes -u. - --context becomes --ak-context. - --algorithm becomes --kalg. - --digest-alg becomes --halg. - --privfile becomes --private. - remove -k persistant option. Use tpm2_evictcontrol. - Fix -o option to -w. - now saves a context file for the generated primary's handle to disk. - -E becomes -e. - -g changes to -G. - support for non-persistent AK generation. * tpm2_getpubek: - renamed to tpm2_createek - --endorse-passwd is now --eh-auth. - --owner-passwd is now --owner-auth. - --ek-passwd is now --ek-auth. - --file is now --public. - --context is now --ek-context. - --algorithm is now --key-algorithm. - -e is now -P. - -P is now -p. - -p is now -u. - -o is now -w. - -g is now -G. - Support for saving a context file for the generated primary keys handle to disk. - support for non-persistent EK generation. - -f is now -p. - -f support for format of public key output. * tpm2_getrandom: - change default output to binary. - add --hex option for output to hex format. - --out-file is now --output. - bound input request on max hash size per spec, allow -f to override this. * tpm_gettestresult: - new tool for getting test results. * tpm2_hash: - add --hex for specifying hex output. - default output of hash to stdout. - default output of hash as binary. - remove output of ticket to stdout. - --halg is now --hash-algorithm. - --out-file is now --output. - -a is now -C. - -H is now -a. * tpm2_hmac: - add -t option for specifying ticket result. - --out-file is now --output. - --auth-key is now --auth. - --algorithm is now --hash-algorithm. - --pwdk is now --auth-key. - -C is now -c. - -P is now -p. * tpm2_hierarchycontrol: - new tool added for enabling or disabling the use of a hierarchy and its associated NV storage. * tpm2_import: - --object-attributes is now --attributes. - --auth-parent is now --parent-auth. - --auth-key is now --key-auth. - --algorithm is now --key-algorithm. - --in-file is now --input. - --parent-key is now --parent-context. - --privfile is now --private. - --pubfile is now --public. - --halg is now --hash-algorithm. - --policy-file is now --policy. - --sym-alg-file is now --encryption-key. - -A is now -b. - -k is now -i. - support OSSL style -passin argument as --passin for PEM file passwords. - support additional import key types: - RSA1024/2048. - AES128/192/256. - -q changes to -u to align with tpm2_loads public/private output arguments. - Supports setting object name algorithm via -g. - support specifying parent key with a context file. - --parent-key-handle/-H becomes --parent-key/-C - Parent public data option is optional and changes from `-K` to `-U`. - Supports importing external RSA 2048 keys via pem files. - Supports ECC Parent keys. * tpm2_incrementalselftest: - Add tool to test support of specific algorithms. * tpm2_listpersistent: - deleted as tpm2_getcap and tpm2_readpublic can be used instead. * tpm2_load: - -o is now -c. - --context-parent is now --parent-context. - --auth-parent is now --auth. - --pubfile is now --public. - --privfile is now --private. - --out-context is now --key-context. - now saves a context file for the generated primary's handle to disk. - Option `--pwdp` changes to `--auth-parent`. * tpm2_loadexternal: - --object-attributes is now --attributes. - -o is now -c - --key-alg is now --key-algorithm. - --pubfile is now --public. - --privfile is now --private. - --auth-key is now --auth. - --policy-file is now --policy. - --halg is now --hash-algorithm. - --out-context is now --key-context. - Remove unused -P option. - -H is now -a. - Fix -A option to -b for attributes. - now saves a context file for the generated primary's handle to disk. - support OSSL style -passin argument as --passin for PEM file passwords. - name output to file and stdout. Changes YAML stdout output. - ECC Public and Private PEM support. - AES Public and Private "raw file" support. - RSA Public and Private PEM support. - Object Attribute support. - Object authorization support. - Default hierarchy changes to the *null* hierarchy. * tpm2_makecredential: - --out-file is now --credential-blob - --enckey is now --encryption-key. - Option `--sec` changes to `--secret`. * tpm2_nvdefine: - --handle-passwd is now --hierarchy-auth. - --index-passwd is now --index-auth. - --policy-file is now --policy. - --auth-handle is now --hierarchy. - -a becomes -C. - -t becomes -a. - -I becomes -p. - Removed option --index with short option -x. It is now an argument. - Removed option --input-session-handle with short option -S. - Authorization session is now part of password mini language. * tpm2_nvincrement: - New tool to increment value of a Non-Volatile (NV) index setup as a counter. * tpm2_nvlist: - tpm2_nvlist is now tpm2_nvreadpublic. * tpm2_nvread: - --handle-passwd is now --auth. - --auth-handle is now --hierarchy. - -a becomes -C. - Removed option --index with short option -x. It is now an argument. - Removed short option -o for specifying offset. Use long option --offset. - Removed option --input-session-handle with short option -S. - Authorization session is now part of password mini language. - Removed option --set-list with short option -L. - Removed option --pcr-input-file with short option -F. - Pcr policy options replaced with pcr password mini language. - fix a buffer overflow. * tpm2_nvreadlock: - --handle-passwd is now --auth. - --auth-handle is now --hierarchy. - -a becomes -C. - Removed option --index with short option -x. It is now an argument. - Removed option --input-session-handle with short option -S. - Authorization session is now part of password mini language. * tpm2_nvwrite: - --handle-passwd is now --auth. - --auth-handle is now --hierarchy. - -a becomes -C. - Removed option --index with short option -x. It is now an argument. - Removed short option -o for specifying offset. Use long option --offset. - Removed option --input-session-handle with short option -S. - Authorization session is now part of password mini language. - Removed option --set-list with short option -L. - Removed option --pcr-input-file with short option -F. - Pcr policy options replaced with pcr password mini language. * tpm2_nvrelease: - --handle-passwd is now --auth. - --auth-handle is now --hierarchy. - -a becomes -C. - Removed option --index with short option -x. It is now an argument. - Removed option --input-session-handle with short option -S. - Authorization session is now part of password mini language. * tpm2_nvundefine: - Renamed from tpm2_nvrelease. * tpm2_pcrallocate: - New tool for changing the allocated PCRs of a TPM. * tpm2_pcrevent: - --password is now --auth. - Removed option --pcr-index with short option -i. - PCR index is now specified as an argument. - Removed option --input-session-handle with short option -S. - Authorization session is now part of password mini language. * tpm2_pcrlist: - -gls options go away with -g and -l becoming a single argument. * tpm2_pcrread: - Renamed from tpm2_pcrlist. * tpm2_print: - New tool that decodes a TPM data structure and prints enclosed elements to stdout as YAML. * tpm2_policyauthorize: - New tool that allows for policies to change by associating the policy to a signing authority essentially allowing the auth policy to change. * tpm2_policycommandcode: - New tool to restricts TPM object authorization to specific TPM commands. * tpm2_policyduplicationselect: - New tool for creating a policy to restrict duplication to a new parent and or duplicable object. * tpm2_policylocality: - New tool for creating a policy restricted to a locality. * tpm2_policypcr: - New tool to generate a pcr policy event that bounds auth to specific PCR values in user defined pcr banks and indices. * tpm2_policyor: - New tool to compound multiple policies in a logical OR fashion to allow multiple auth methods using a policy session. * tpm2_policypassword: - New tool to mandate specifying of the object password in clear using a policy session. * tpm2_policysecret: - New tool to associate auth of a reference object as the auth of the new object using a policy session. * tpm2_quote: - --ak-context is now --key-context. - --ak-password is now --auth. - --sel-list is now --pcr-list. - --qualify-data is now --qualification-data. - --pcrs is now --pcr. - --sig-hash-algorithm is now --hash-algorithm. - -P becomes -p - -L becomes -l. - -p becomes -o. - -G becomes -g. - -g becomes optional. - Removed option --id-list with short option -l. - Removed option --ak-handle with short option -k. - Raw object-handles and object-contexts are commonly handled with object handling logic. * tpm2_readpublic: - --opu is now --output. - --context-object is now --object-context. - Removed option --object with short option -H. - Raw object-handles and object-contexts are commonly handled with object handling logic. - Added --serialized-handle for saving serialized ESYS_TR handle to disk. - Added --name with short option -n for saving the binary name. - Supports ECC pem and der file generation. * tpm2_rsadecrypt: - --pwdk is now --auth. - --out-file is now --output. - -P becomes -p. - Added --label with short option -l for specifying label. - Added --scheme with short option -s for specifying encryption scheme. - Removed option -I or in-file input option and make argument. - Removed option --key-handle with short option -k. - Raw object-handles and object-contexts are commonly handled with object handling logic. - Removed option --input-session-handle with short option -S. - Authorization session is now part of password mini language. * tpm2_rsaencrypt: - --out-file is now --output. - Added --scheme with short option -s for specifying encryption scheme. - Added --label with -l for specifying label. - Removed option --key-handle with short option -k. - Raw object-handles and object-contexts are commonly handled with object handling logic. - make output binary either stdout or file based on -o. * tpm2_selftest: - New tool for invoking tpm selftest. * tpm2_send: - --out-file is now --output. * tpm2_sign: - --pwdk is now --auth. - --halg is now --hash-algorithm. - --sig is now --signature. - -P becomes -p. - -s becomes -o. - Added --digest with short option -d. - Added --scheme with short option -s. - Supports rsapss. - Removed option --key-handle with short option -k. - Raw object-handles and object-contexts are commonly handled with object handling logic. - Removed option --msg with short option -m. - Make -d toggle if input is a digest. - Removed option --input-session-handle with short option -S. - Authorization session is now part of password mini language. - Supports signing a pre-computed hash via -d. * tpm2_startauthsession: - New tool to start/save a trial-policy-session (default) or policy- authorization-session with command line option --policy-session. * tpm2_stirrandom: - new command for injecting entropy into the TPM. * tpm2_takeownership: - split into tpm2_clear and tpm2_changeauth * tpm2_testparms: - new tool for querying tpm for supported algorithms. * tpm2_unseal: - --pwdk is now --auth. - --outfile is now --output. - --item-context is now --object-context. - -P becomes -p - Removed option --item with short option -H. - Raw object-handles and object-contexts are commonly handled with object handling logic. - Removed option --input-session-handle with short option -S. - Authorization session is now part of password mini language. - Removed option --set-list with short option -L. - Removed option --pcr-input-file with short option -F. - Pcr policy options replaced with pcr password mini language. * tpm2_verifysignature: - --halg is now --hash-algorithm. - --msg is now --message. - --sig is now --signature. - -D becomes -d. - -t becomes optional. - Issue warning when ticket is specified for a NULL hierarchy. - Added option --format with short option -f. - Removed option --raw with short option -r. - Removed option --key-handle with short option -k. - Raw object-handles and object-contexts are commonly handled with object handling logic. - Support routines for OpenSSL compatible format of public keys (PEM, DER) and plain signature data without TSS specific headers. * misc: - cmac algorithm support. - Add support for reading authorisation passwords from a file. - Ported all tools from SAPI to ESAPI. - Load TCTI's by SONAME, not raw .so file. - system tests are now run with make check when --enable-unit is used in configure. - Libre SSL builds fixed. - Dynamic TCTIS. Support for pluggable TCTI modules via the -T or --tcti options. - test: system testing scripts moved into subordinate test directory. - configure: enable code coverage option. - env: add TPM2TOOLS_ENABLE_ERRATA to control the -Z or errata option. affects all tools. - Fix parsing bug in PCR mini-language. - Fix misspelling of TPM2_PT_HR constants which effects tpm2_getcap output. - configure option --with-bashcompdir for specifying bash completion directory. - changes in version 3.2.1: * Fix invalid memcpy when extracting ECDSA plain signatures. * Fix resource leak on FILE * in hashing routine. * Correct PCR logic to prevent memory corruption bug. * Errata handler fix. - changes in version 3.2.0: * fix configure bug for linking against libmu. * tpm2_changeauth: Support changing platform hierarchy auth. * tpm2_flushcontext: Introduce new tool for flushing handles from the TPM. * tpm2_checkquote: Introduce new tool for checking validity of quotes. * tpm2_quote: Add ability to output PCR values for quotes. * tpm2_makecredential: add support for executing tool off-TPM. * tpm2_pcrreset: introduce new tool for resetting PCRs. * tpm2_quote: Fix AK auth password not being used.- update to minor version 3.1.4: * Fix various man pages * tpm2_getmanufec: fix OSSL build warnings * Fix broken -T option * Various build compatibility fixes * Fix some unit tests * Update build for recent autoconf-archive versions * Install m4 files- update to minor version 3.1.3: - Restore support for the TPM2TOOLS_* env vars for TCTI configuration, in addition to supporting the new unified TPM2TOOLS_ENV_TCTI - Fix tpm2_getcap to print properties with the TPM_PT prefix, rather than TPM2_PT - Make test_tpm2_activecredential Python 3 compatible - Fix tpm2_takeownership to only attempt to change the specified hierarchies - use a _service file to sync with upstream tags- update to minor version 3.1.2 (FATE#326270): - Revert the change to use user supplied object attributes exclusively. This is an inappropriate behavioural change for a MINOR version number increment. - Fix inclusion of object attribute specifiers section in tpm2_create and tpm2_createprimary man pages. - Use better object attribute defaults for authentication, preventing an empty password being used for authentication when a policy is set.- update to minor version 3.1.1: - Allow man page installation without pandoc being available- update to major version 3.1.0: - the tpm2 stack introduces an incompatible ABI to the previous version with this update. There is no compatibility layer, libraries have new names - install-man.patch: dropped, because we don't really need it - tpm2.0-tools-fix-hardening.patch: contained in upstream tarball now s etc. - upstream changelog: * tpm2_unseal: -P becomes -p * tpm2_sign: -P becomes -p * tpm2_nvreadlock: long form for -P is now --auth-hierarchy * tpm2_rsadecrypt: -P becomes -p * tpm2_nvrelease: long-form of -P becomes --auth-hierarchy * tpm2_nvdefine: -I becomes -p * tpm2_encryptdecrypt: -P becomes -p * tpm2_dictionarylockout: -P becomes -p * tpm2_createprimary: -K becomes -p * tpm2_createak: -E becomes -e * tpm2_certify: -k becomes -p * tpm2_hash: -g changes to -G * tpm2_encryptdecrypt: Support IVs via -i and algorithm modes via -G. * tpm2_hmac: drop -g, just use the algorithm associated with the object. * tpm2_getmanufec: -g changes to -G * tpm2_createek: -g changes to -G * tpm2_createak: -g changes to -G * tpm2_verifysignature: -g becomes -G * tpm2_sign: -g becomes -G * tpm2_import: support specifying parent key with a context file, - -parent-key-handle/-H becomes --parent-key/-C * tpm2_nvwrite and tpm2_nvread: when -P is "index" -a is optional and defaults to the NV_INDEX value passed to -x. * Load TCTI's by SONAME, not raw .so file * tpm2_activatecredential: -e becomes -E * tpm2_activatecredential: -e becomes -E * tpm2_certify: -c and -C are swapped, -k becomes -K * tpm2_createprimary: -K becomes -k * tpm2_encryptdecrypt: supports input and output to stdin and stdout respectively. * tpm2_create: -g/-G become optional options. * tpm2_createprimary: -g/-G become optional options. * tpm2_verifysignature - Option `-r` changes to `-f` and supports signature format "rsa". * tpm2_import - Parent public data option, `-K` is optional. * tpm2_import - Supports importing external RSA 2048 keys via pem files. * tpm2_pcrlist: Option `--algorithm` changes to `--halg`, which is in line with other tools. * tpm2_verifysignature: Option `-r` and `--raw` have been removed. This were unused within the tool. * tpm2_hmac: Option `--algorithm` changes to `--halg`, which is in line with the manpage. * tpm2_makecredential: Option `--sec` changes to `--secret`. * tpm2_activatecredential: Option `--Password` changes to `--auth-key`. * system tests are now run with make check when --enable-unit is used in configure. * tpm2_unseal: Option `--pwdk` changes to `--auth-key`. * tpm2_sign: Option `--pwdk` changes to `--auth-key`. * tpm2_rsadecrypt: Option `--pwdk` changes to `--auth-key`. * tpm2_quote: Option `--ak-passwd` changes to `--auth-ak` * tpm2_pcrevent: Option `--passwd` changes to `--auth-pcr` * tpm2_nvwrite: Options `--authhandle` and `--handle-passwd` changes to `--hierarchy` and `--auth-hierarchy` respectively. * tpm2_nvread: Options `--authhandle` and `--handle-passwd` changes to `--hierarchy` and `--auth-hierarchy` respectively. * tpm2_nvdefine: Options `--authhandle`, `--handle-passwd` and `--index-passwd` changes to `--hierarchy`, `--auth-hierarchy` and `--auth-index` respectively. * tpm2_loadexternal: `-H` changes to `-a` for specifying hierarchy. * tpm2_load: Option `--pwdp` changes to `--auth-parent`. * tpm2_hmac: Option `--pwdk` changes to `--auth-key`. * tpm2_hash: `-H` changes to `-a` for specifying hierarchy. * tpm2_getmanufec: Options `--owner-passwd`, `--endorse-passwd` * and `--ek-passwd`change to `--auth-owner`, `--auth-endorse` and `--auth-ek` respectively. * tpm2_evictcontrol: Option group `-A` and `--auth` changes to `-a` and `--hierarchy` Option `--pwda` changes to `--auth-hierarchy` * tpm2_encryptdecrypt: Option `--pwdk` changes to `--auth-key`. * tpm2_dictionarylockout: Option `--lockout-passwd` changes to `--auth-lockout` * tpm2_createprimary: Options `--pwdp` and `--pwdk` change to `--auth-hierarchy` and `--auth-object` respectively. * tpm2_createek: Options `--owner-passwd`, `--endorse-passwd` * and `--ek-passwd`change to `--auth-owner`, `--auth-endorse` and `--auth-ek` respectively. * tpm2_createak: Options `--owner-passwd`, `--endorse-passwd` * and `--ak-passwd`change to `--auth-owner`, `--auth-endorse` and `--auth-ak` respectively. * tpm2_create: Options `--pwdo` and `--pwdk` change to `--auth-object` and `--auth-key` respectively. * tpm2_clearlock: Option `--lockout-passwd` changes to `--auth-lockout` * tpm2_clear: Option `--lockout-passwd` changes to `--auth-lockout` * tpm2_changeauth: Options, `--old-owner-passwd`, `--old-endorse-passwd`, and `--old-lockout-passwd` go to `--old-auth-owner`, `--old-auth-endorse`, and `--old-auth-lockout` respectively. * tpm2_certify: Options `--pwdo` and `--pwdk` change to `--auth-object` and `--auth-key` respectively. * tpm2_createprimary: `-H` changes to `-a` for specifying hierarchy. * tpm2_createak: support for non-persistent AK generation. * tpm2_createek: support for non-persistent EK generation. * tpm2_getpubak renamed to tpm2_createak, -f becomes -p and -f is used for format of public key output. * tpm2_getpubek renamed to tpm2_createek, -f becomes -p and -f is used for format of public key output. * Libre SSL builds fixed. * Dynamic TCTIS. Support for pluggable TCTI modules via the -T or --tcti options. * tpm2_sign: supports signing a pre-computed hash via -D * tpm2_clearlock: tool added * test: system testing scripts moved into subordinate test directory. * fix a buffer overflow in nvread/write tools. * configure: enable code coverage option. * tpm2_takeownership: split into tpm2_clear and tpm2_changeauth * env: add TPM2TOOLS_ENABLE_ERRATA to control the -Z or errata option.- fix build after adding install-man.patch: autoreconf is needed again (sigh!)- install-man.patch: even after update to 3.0.4 the man pages are not installed correctly. This patch fixes it locally.- update to version 3.0.4: - Fix save and load for TPM2B_PRIVATE object. - Use a default buffer size for tpm2_nv{read,write} if the TPM reports a 0 size. - Fix --verbose and --version options crossover. - Generate man pages from markdown and include them in the distribution tarball. - Print usage summary if tools are executed with no options or man page can't be displayed. - man pages will be shipped for SLE version now, too (pandoc dependency was removed)- disable pandoc for all but openSUSE, since pandoc never was on SLE- disable pandoc/man pages generation on SLE-15, because pandoc is not available there (and adding it would require two dozen additional haskell packages)- update to version 3.0.3: - various changes in tool options - man pages are now in section 1 (formerly in section 8) - tools are now installed in /usr/bin (formerly /usr/sbin)- update to version 2.1.1 * Potential memory leak fix when tcti/sapi initialization fails. * tpm2_listpcrs: use TPM2_GetCapability to determine PCRs to read * listpcrs: remove one redundant call to tpm get cap * listpcrs: fix for unsupported/disabled alg in -L * build: use supported comment to suppress GCC7 fallthrough warning * kdfa: allow to build with OpenSSL 1.1.x (bsc#1067392) - drop patches (upstream) * 0001-tpm2_listpcrs-use-TPM2_GetCapability-to-determine-PC.patch * tpm2.0-tools-fix-gcc7.patch- update to version 2.1.0: - dropped 0002-kdfa-use-openssl-for-hmac-not-tpm.patch, was backported upstream in commit 788a17abbe0000c560935ef9f31c9a6892d9ea33 - this version now can interact with the new resource manager tpm2.0-abrmd - Upstream changes: * Fix readx and writex on multiple EINTR returns. * Add support for the tabrmd TCTI. This is the new default. * Change default socket port from 2323 (the old resourcemgr) to 2321 (default simulator port). * Cherry-pick fix for CVE-2017-7524. * Fix tpm2_listpcr command line option handling. * Fix tpm2_getmanufec memory issues.- added the new abrmd package to recommends, because the tools will otherwise not function- 0002-kdfa-use-openssl-for-hmac-not-tpm.patch: fixed unexpected leak of cleartext password into the tpm when generating an HMAC in the context of tpm_kdfa() (key derivation function) (bnc#1046402, CVE-2017-7524)- 0001-tpm2_listpcrs-use-TPM2_GetCapability-to-determine-PC.patch: fixed tpm2_listpcrs aborting saying "too much pcrs to get!" (bnc#1044419)- tpm2.0-tools-fix-hardening.patch: do not disable fortify, do not use -Wstack-protector as it warns also for non-utilized functions and then -Werror fails. - tpm2.0-tools-fix-gcc7.patch: fixed gcc7 case fallthrough errors- Major update to 2.0.0 - dropped fixes.patch, now part of the upstream version - a set of man pages have been added to the package - Upstream changes: * Tracked on the milestone: https://github.com/01org/tpm2.0-tools/milestone/2 * Reworked all the tools to support configurable TCTIs, based on build time configuration, one can specify the tcti via the --tcti (-T) option to all tools. * tpm2_getrandom interface made -s a positional argument. * Numerous bug fixes.- buildrequire pkgconfig- Updated to 1.1.0 / 016-11-04 (FATE#321509) - Added * travis ci support. * Allow for unit tests to be enabled selectively. * tpm2_rc_decode tool: Decode TPM_RC error codes. * Android Make file * tpm2_listpersistent: list all persistent objects * test scripts for tpm2-tools * tpm2_nvreadlock * tpm2_getmanufec: retrieve EC from tpm manufacturer server. * Copy 'common' and 'sample' code from the TPM2.0-TSS repo. - Modified * tpm2_takeownership: update option -c to use lockout password to clear. * tpm2_listpcrs: add options -L and -s, rewrite to increase performance. * tpm2_quote: added -L option to support selection of multiple banks. * tpm2_quote: add -q option to get qualifying data. * configure: Use pkg-config to get info about libcurl and libcrypto. * configure: Use pkg-config to locate SAPI and TCTI headers / libraries. * tpm2_x: Add -X option to enable password input in Hex format. * tpm2_nvdefine: Change -X option to -I. * tpm2-nvwrite: fix for unable to write 1024B+ data. * tpm2_getmanufec: Fix base64 encoding. * tpm2_x: fixed a lot of TPM2B failures caused by wrong initialization. * tpm2_getmanufec: let configure handle libs. * tpm2_getmanufec: Convert from dos to unix format. * build: Check for TSS2 library @ configure time. * build: Detect required TSS2 and TCTI headers. * build: Use libtool to build the common library * build: Install all binaries into sbin. * build: Build common sources into library. * build: Move all source files to 'src'. * Makefile.am: Move all build rules into single Makefile.am. * everything: Use new TCTI headers and fixup API calls. * everything: Update source to cope with sapi header cleanup. * tpm2_activatecredential: Updated to support TCG compatible EK * tpm2_getpubak: Updated to use TCG compatible EK * tpm2_getpubek: fix ek creation to follow TCG EK profile spec. - Removed * Windows related code * depenedency on the TPM2.0-TSS repo source code - 1.0-alpha_0.zip: removed, use tpm2-0-tss directly. - tpm2-install-binaries.patch: not needed anymore. - fixes.patch: fixed random return build errors.- update description- initial import of tpm2.0-toolssheep66 1651964769  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~5.2-150400.4.65.2-150400.4.6tpm2.0-tools-5.2-150400.4.6.x86_64libefi_event.hfiles.cfiles.hlog.clog.hobject.cobject.hpcr.cpcr.htool_rc.ctool_rc.htpm2.ctpm2.htpm2_alg_util.ctpm2_alg_util.htpm2_attr_util.ctpm2_attr_util.htpm2_auth_util.ctpm2_auth_util.htpm2_capability.ctpm2_capability.htpm2_cc_util.ctpm2_cc_util.htpm2_convert.ctpm2_convert.htpm2_ctx_mgmt.ctpm2_ctx_mgmt.htpm2_errata.ctpm2_errata.htpm2_eventlog.ctpm2_eventlog.htpm2_eventlog_yaml.ctpm2_eventlog_yaml.htpm2_hash.ctpm2_hash.htpm2_header.htpm2_hierarchy.ctpm2_hierarchy.htpm2_identity_util.ctpm2_identity_util.htpm2_kdfa.ctpm2_kdfa.htpm2_kdfe.ctpm2_kdfe.htpm2_nv_util.htpm2_openssl.ctpm2_openssl.htpm2_options.ctpm2_options.htpm2_policy.ctpm2_policy.htpm2_session.ctpm2_session.htpm2_tool_output.ctpm2_tool_output.htpm2_util.ctpm2_util.htoolsfapitss2_authorizepolicy.ctss2_changeauth.ctss2_createkey.ctss2_createnv.ctss2_createseal.ctss2_decrypt.ctss2_delete.ctss2_encrypt.ctss2_exportkey.ctss2_exportpolicy.ctss2_getappdata.ctss2_getcertificate.ctss2_getdescription.ctss2_getinfo.ctss2_getplatformcertificates.ctss2_getrandom.ctss2_gettpmblobs.ctss2_import.ctss2_list.ctss2_nvextend.ctss2_nvincrement.ctss2_nvread.ctss2_nvsetbits.ctss2_nvwrite.ctss2_pcrextend.ctss2_pcrread.ctss2_provision.ctss2_quote.ctss2_setappdata.ctss2_setcertificate.ctss2_setdescription.ctss2_sign.ctss2_template.ctss2_template.htss2_unseal.ctss2_verifyquote.ctss2_verifysignature.ctss2_writeauthorizenv.cmisctpm2_certifyX509certutil.ctpm2_checkquote.ctpm2_eventlog.ctpm2_print.ctpm2_rc_decode.ctpm2_activatecredential.ctpm2_certify.ctpm2_certifycreation.ctpm2_changeauth.ctpm2_changeeps.ctpm2_changepps.ctpm2_clear.ctpm2_clearcontrol.ctpm2_clockrateadjust.ctpm2_commit.ctpm2_create.ctpm2_createak.ctpm2_createek.ctpm2_createpolicy.ctpm2_createprimary.ctpm2_dictionarylockout.ctpm2_duplicate.ctpm2_ecdhkeygen.ctpm2_ecdhzgen.ctpm2_ecephemeral.ctpm2_encryptdecrypt.ctpm2_evictcontrol.ctpm2_flushcontext.ctpm2_getcap.ctpm2_getcommandauditdigest.ctpm2_geteccparameters.ctpm2_getekcertificate.ctpm2_getpolicydigest.ctpm2_getrandom.ctpm2_getsessionauditdigest.ctpm2_gettestresult.ctpm2_gettime.ctpm2_hash.ctpm2_hierarchycontrol.ctpm2_hmac.ctpm2_import.ctpm2_incrementalselftest.ctpm2_load.ctpm2_loadexternal.ctpm2_makecredential.ctpm2_nvcertify.ctpm2_nvdefine.ctpm2_nvextend.ctpm2_nvincrement.ctpm2_nvread.ctpm2_nvreadlock.ctpm2_nvreadpublic.ctpm2_nvsetbits.ctpm2_nvundefine.ctpm2_nvwrite.ctpm2_nvwritelock.ctpm2_pcrallocate.ctpm2_pcrevent.ctpm2_pcrextend.ctpm2_pcrread.ctpm2_pcrreset.ctpm2_policyauthorize.ctpm2_policyauthorizenv.ctpm2_policyauthvalue.ctpm2_policycommandcode.ctpm2_policycountertimer.ctpm2_policycphash.ctpm2_policyduplicationselect.ctpm2_policylocality.ctpm2_policynamehash.ctpm2_policynv.ctpm2_policynvwritten.ctpm2_policyor.ctpm2_policypassword.ctpm2_policypcr.ctpm2_policyrestart.ctpm2_policysecret.ctpm2_policysigned.ctpm2_policytemplate.ctpm2_policyticket.ctpm2_quote.ctpm2_readclock.ctpm2_readpublic.ctpm2_rsadecrypt.ctpm2_rsaencrypt.ctpm2_selftest.ctpm2_send.ctpm2_sessionconfig.ctpm2_setclock.ctpm2_setcommandauditstatus.ctpm2_setprimarypolicy.ctpm2_shutdown.ctpm2_sign.ctpm2_startauthsession.ctpm2_startup.ctpm2_stirrandom.ctpm2_testparms.ctpm2_tool.ctpm2_tool.htpm2_unseal.ctpm2_verifysignature.ctpm2_zgen2phase.c/usr/src/debug//usr/src/debug/tpm2.0-tools-5.2-150400.4.6.x86_64//usr/src/debug/tpm2.0-tools-5.2-150400.4.6.x86_64/lib//usr/src/debug/tpm2.0-tools-5.2-150400.4.6.x86_64/tools//usr/src/debug/tpm2.0-tools-5.2-150400.4.6.x86_64/tools/fapi//usr/src/debug/tpm2.0-tools-5.2-150400.4.6.x86_64/tools/misc/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:SLE-15-SP4:GA/standard/ee0e76df27efcc85179cc94cb4b2af10-tpm2.0-toolscpioxz5x86_64-suse-linuxdirectoryC source, ASCII textC source, UTF-8 Unicode text/_jӍM tqutf-80d9459510833e5bdf3c73db32a4ef07a1f0646c7fccebacede0782bb4b94f579?P7zXZ !t/] crt:bLL itto"jܚ~XY1p/.6f1;>6w)I,t;W0즴 (o4g] 3cb<.M+`fe&jxqcJc\zI"۞HóMo <׷G0iTKӏJᡋKxן44@_ D:$>X!k2v8Wd5A!G_'=0ŭ 9>`ix+%|ebG8I5T9v[=Q~O*5+Ξ |s$eSkl#iv-z%\U2Z5L o=&Szߓ#< jyI/G`%3rzBa*=] 쪓\V*90ce|kWh`'lh]SU3y4"6SX\Wv z6ز,+m$k3y/ کeNƵ| ]ygfecto.ƍUm7)tXIeRM"C ށw+"[|bU ~ <Z#'T "_]kR$S_ ;$Fš崝+jϣֹۢEp%b b_m$;5WM"h\.SqX7&(+C)!Z{o 4 PA_rHF 6TpLøAA@bRX!}nq7+)GPRj[@/Y4nq$3Bt'Q*X!կD dY (cv}j^JilpFPmDD Wd߫]ěcO\18g۪/Yj}cg~/c_jKA+,:z~ِ<wHhQ*I:"a/YB`8yPD܎r6sˁp.+-3L;Y7)puVP=mo~7yo.BDnTJFb66 ɿZl՝I7a$bDU}.>!-"^pE|ؔuC3l9"~pl`bk -q]os%6ޅw$ǁ|CHPM\,bn5#6z76iX?R!u2`d>^!*f>z^)_o:d6O@/Op#Ͻ)H\| Og NmYrc);gRl;KގtV]M =o׎Q9,;0LYē͈%G!6RR Tevv qdBN3wc[^iM8.(8iauȑ8TV}Bw2HPx*%`϶Kc1 2z5ONk^1AFzJ"Mv_!^PnwQ?:GJr*>Z]uYc- 0Bjәث4n>wB ~Xk2! _"J"4> >kcG̣Ԍ"ѧ㘒 ~7sJ[W$cÆR@V˱qBύ(/ڒ+-R_N{.BJ0i̫* }6R-B(5[Vt7AZ B3Ջ6@C:Ǽ}ZjE`Hj6J0l$1X3E+X+۩Dy{p$9kPT[z75,a~EtUJ6-uחWV:44G٩ @3¿E!X,x٘&>63o߹{IvI3ѫd o3kt9Dѿi˙cwa_ѣfv#ÆGyS<<4;!#i w`cHK[>!+K}>8)LL"*E7@5ZX߽tT73?ۮً=rUȷQw07O1 k+yj;V\v(A1݀DRPݟԝ.02m7<劮s_8X,Խ  ==ܖ\{|3@4Tq#1ȘXuyL-YdJgl`"N\jGΞ9熃VAADpP"R$|,?t}fI}H/9ׄQVpƻã. OoA<ۢuOiƞid=Y&heWRx;\ ޚLuOxW$uŠ\ Ay? [,ݛE؅|Z._Yz眲Jk91O!aPiruɮ;+A\^ 1wj2a|a,uP5Tkeeg&׀w8Hh|jq濐L1LУ$Tקh|ݖ(fK`\_zaDjgd 7#3P|$͑ƅi?t%@b nbHֆAffO-DĴV2/VvVb׵Mv~ y9Wʚr8 -qfp]<턯o%j|!RG36Kb d-b'3Y8+Hb7Q;ptl^1 {)"NDR|X[؍gl;~DOYıR1D% {8VcHxL&z6AP(-^ &NUI氇ޫ!q.tObkg4B`6,*^ `yD >x ;|,1+!>=q5Y^}!:Ta/IVC8HP씛/I8Hqȕ&QnD]Z"6ba<`~IWsgpFQEhhʒj x?S$ߧʹ,$>V\=+@LpY@1WnBX n"o+V|Kq)9m{|P|ڢw]f%pi쎐 i0_wȖ)GLьftbYT3~lLa XR%:&x\ KY ^(+mXqF2hFz E)X?9rQGF \sFYºrGqxTWϦ@%{mmHX],#Yk} Լ"⬴6G cT1hJ05O6&$qbTy<?w5,ʙvѭ,\gq5ѷ~@Ԁtkha;Y;~uz3@QĿbΗoHG:2<İYs]%Nm'L-Q_c NT c4pĈS8`5Cæ1<0hpBmuBq**`9[m'W7p:ԃa"޳ ;V p'GV-i?H#FvMcK>|E[¹xZ)" ?[#^~CN^zn;&ypِi ~.' m钖8/;MJ2vH!n5xVYZ<ЮW:?p"Lk-"O#[r|=aI?c;ǰ[4'԰g_iB .KŇ 5 &Oegvvx U@w'RkM K]]799v_[1]ebx,+'7X/>R0zkwevFfL@KczYy4Rik*B:#rJATVwMuB?Mp'ڱ7~|!OTzb)T]DW3y8W]詰pD3_Z`X T?ƻp=kFuݧ(4*o:h~@E? $*w(ߏ0Qs&拒؀'$SDѫ"&̓86br`3m4DΏv`Xwt!} cf)3?ZnےF";BNk.bub Vm&IԿX"#?`yHHb'^cTg%E z""xkyЏ v63 lyu^y5𢹾^YO%e2I%U 7koy'QN?O-s]O[Xl9\E+G%~q'7rIV:mUTi'6*'}l×#.9 QP1(YEvŇ0&=YbzAd>ul<=qRf4BXW,YLQ?'B&^ON#WrZPȐ*YB5/8x:{+ϷnaC)4SS),x|xoOW>9h`I'FԌ\1" ϫ X*]2<;xQ܏Qn d}ugroE?1Q}Cypcᚱ9'zA-`;c_n|CN8Mzĭ_?HeuOһ1vMכn Qo[`%XR)D Q۹; 4f#~,!UCS-}g .#\,ޔ)Hi.y4KnAff:β0S5cx'4ЕRW_s~ ;{>Ux)-^(PyZ Ikѩd;vw ?OSEЃO"tPWe°fAӟp+46Zs@HRy)Qn!4`ym} 0 K*41=VGb@+ĊW#y9_"㧠D^6Ge@HT\20uTɹsnb@6}0O: b{:琋3$/؁e3bާ*~lojHo*z''f݄aZ2 šE_ Aq*-\]^?NCZ'oWJ.GcZbD>5gU5B/Sk< 5e~,֝ѬmP`2uƋvCWL«FO4\ܼH K41BxJe>Dpq]8[#L`'$"g}^ԥr:[G|gd~ luW=(b0`W`Z_e)V=_9ʷP1#zXS\#75JR E^c(@ Jpj:cÔH(TMƌIV)B>7WfxlIH٣4.tl& IbO=xŠd2Dfs{7Xj[鮏tѣ,4`xs[7@ε[Y]K>*F]^(BACgԑ#'lϰG ʼno!V1/(Z5Gê=d_]x,JN:s{mdxDos L< }T݂L)j,Eg̸gH^BlT?4~v`1~dw6tw$lCP /3fq3mAd=[3뾠6(2>rVY^a<) Ķ!-ײMNj%*‘yh2RYǯk@RFU| TdD$sgTP091+%&g? ޢx}(8R)G#yywT &Geb=<){Dθ v4`G8& MQ o&CG:f% Y7ÌSCp:K1KsOnGK#Н0.؋Kl{!jBļ5 ~u2HJE^l:9?UjA*i$ul8dgVa`˹xURmV+JyA.yb`y)^I^Q->4JT!ȋ%R%T * Ϊ[6K6f ea K6'9{hLZb-H'wJ_9 HO O~ޗorKORRe7[F$ s d׎t%T"m{ dFE v]g[;~~"hH\ETg>u< D[cm \r/"OqoīR: 2> xksu`?kt1>J ظbױ+m<wbd1;-g2/^-CV|*nrhjX8Tdy%іOu7N+©F>FM9 $SȗqCzP]wGM|.HJ k콟 M>qpvwy|p뀽<ͷ3M]!o\KUGg/wh`AU|ˎN_P8,xҜa6("Zc[Cr>xKA}kv s%h/]2c/"aͫ>'R;8n$G4D-΃bt9H#&y Yͳyb[y0e 5QZ:<4n᝺a o_k|ܔsi[Mh4e{&Kk^W 5N3Z`! ܡ-;+W.n 壦w'?ĕs UxQt V<J2p,fDR{(7 y`z/ wY|J鹙a YdkW 6 XF>HeR9OJv2a>Ϭz[:.Mw ba#[rzA%+iH71ק6ѥe>>f3D " G˼2,7PA/XTX2g.eպbk i@m=`iTS)>fU-P9LA|_?9Y!EV:\S BrTMRB5"2YvˋiE XD [:h[UiX.~1 8ofR. 4GwDI[P{[sm6بVqMiS;Ŧ FiculAc9%zG>km 5CR`[.:VSpcFv4^/ \;ym]5;TDַ=hUjtkW:2ϻ?"b蔯)MHP cQIWz`D׾.{TXxQB{!P[=yQ uJ^7e,nHYρ԰qo멛LT()L0\7.67*V_LZPC_'H nSM 9ů~]N$e[I&0/L0Yp,uu&mlzzV:q%[!НPw![% ߑ֔O*#do?em\Q 6E}7RORxL}*L ˛"#2?=,bFI&ejL)\)bv Xj%JYgG{'+NjFm ģu`Ơ><(Ie< 5eT70[Zw|Lv?i= ~ߠC׮:P/Uk/`k:HRL))W6 {ږԩx|^u F+Ř9#gyٷQ4P?hH>kD Юi28OS vï9 g[XS,.|/9,c6..+x VܭRV !f#aJRZku]`8gjy'\w 2h|(W8Gz,+X7%yd˖4~ro{sACn0C<djHXW$JgFl){}~$};$7O*jy(EoK+O)7@%(߷0"1xFJ1#̋FNQmb҃ZL5QsMg Sb5PL!Yʾ?O⻦]0_dÑD?3/]P Z:!9&L6ᷗ#;UcP$)4SC)/æQYXJ9|>)s U6O7`C< B5,?.m!&cqŒF*@EaO>=S~.2")Q0QMѐK%Jk@*SrIMpxڿGN|V0+ >¼F&~-.o+v"ËJCyz9u,*ݏLE+VjA)va(2q3?UZmXս|阽q:4}AY+6Bd7M Bcnޝ XWm,e Px&h$['_{pM(L"k'9՝YaЊ{yM g/b :~j- L7AaՌVz(„^uuivi?ql8:+t-Ԯ5'p][.Ĩ;C 8>XkdGv-t&T<ǬeGHGWEbH>54i+^unbMڨ']d.pr6PF}09ɪ+h_#}eB@9eA= +𠄢>5v0i`b7=Yv\L|`11TN% !| *V3R0K.>Zk #!zyc@4𱄾J&~} V?\)po-5O~敬gZz݂>$2 9[#.Xod룧 q,$.8? ,Y5J4| ;rh#Woc6uQ\PV G?N#$,y7P6x~Q=-<|`>J+;>tގO-"[gFo,)# W!  W#P8"A[9")W_#1*! vJ=J`!<# g @1J% R*gx1 \c xDh\ Da59ѧG-|nToս{,ϒknF! F{CZ,fwGxdLoF[6ocq6P`<{H#z.pMA)p+SMR`+BӠqh=-#-˗<鉢k¡Kj_TM̎9:v:gW]|-WLQ!rz9l(}_7ǔN lZFk]vE,*+ W3mD= &V5Tm&| +x]ˀ6Uk:yϧ(6.%FCL_K]uOi-cM.=ϖΘ;>Ʊ~+7 #ԣd|5ZSByZp,vָtW:g D%6tl<5JHZgHJqƘ10R7Ӈ>'n_JGtE ~Э.ɺ&o D"ИÍN^Z.? ]J䶵Z`KʝΣ~@xir1tj%Rm~ۮIvq0) P^+7|j}zDq60 )5 =T]-Uq X}wl=t%iZ5 &' [t?efB\#E127 E2> e!H"!yđO \d=oDEGY* oۗRI^0N(  -i,7Xp}W>Iߪb;гpmu7>Zɾa'nx6z"_va0Rd诘8Bm2"c+ht+QZǻuN|c[آjHUUtXB> &Xv}1VLJ [E[;5t1H|rVOWL!R*45q}=z}sNYU2Q֯n''L 'LOϝ,Bӥ3F豃X5W˻{ [`t61I7q~{+Ox8Rޣ󬐻τ;ܵrT<97zS:) 븴7S{|qؿ֕]cUGNcE7pnSh;sQܖw;w䌅\"(u.x E%\1~lqSL{:L_8s~H`Z~) 9_YL` =dMz :*.pOLeP"ŶWՔFs5 7eɯC#.%h;|9^(ə0&m"mˣ?J_>4ab1!E Kr-|fNMrf3M|I>ŦNlH*AB|urh/![ p7cD q_(hl/+fX> s?aHpQ9Mpacf v琗iOxB_j؟OyL3['_YAtukXw;$NNx(UǬ˃Zfl^ɺP#~)7rL!az,u<ޟ] O x~B \BkxPTIL5Y,3ŝ~BygS^6h#lQ|A7_UQwb* s;=b*YK޿䰽!QYWŃSۼsCճ5f E?ޔI0a/bpN8KpGM[QSӞ| f#`y< 1]iuw"N&=[ ]8\x|o54{C&۲Qvp\yR;qo+B [Gf ߍ!wCҥB{>Mڌ:8t0AP/8&2Ǎ0i,,AҳF*7&t9lnTX$똕{Wk~*u:‚l':lm%x|c})v_Ɔ;,D ;-2AޠϏ$rc(&żD5ĭwi{#og:9B iz~mXU !6LA*"hb);U,4V#_{tKVwJҥeh+ P&MPڵ$z!'M81t.qOc PS"ÿ~@*[n PStl_az>]\i:ۋՁg),bQ!HhQ n pA3aLC`-({n,`JB*u2Cd%y1p6L }(BlrkCt(j| (%CNDq ]WN"BE Ym#o_A95]޲SԈ1V-}a3^'$!W('= /|ꋯY%̊t=3$5o9AaYhGaU؛4oz(R Zv/ԿCs ^74svw$'1k?ŃM|2]u_i"R WGճhMZU*_Inz:ؾxҲSx66E͖%T Z󄀰& qR@˜Xh^tdE{*\,}, H_u6v%zA!?r;CQ6V{|k%(/̩۶ס\$=p£#dQg0R`WuT)qH-?NRg#2K6Ox^JA~Se4n 3oⶠBCpy8ι,As/rR=1iT;'U/!'KO.YM*pF۞9FTV ̤w {Y!q/<=W=ȐmRI®YymYaHE:nfGPZ`2{68ީm͝r r&bWUݳ: i)+c;MnKN݅}7hi&P8-oG 5`U _2 j4jxnsuBPACb'ul$BZuRCjus (ZK@(d "EBcs*&:1vwOkIa++[ meD}_Ϥf>WH3f_Oi߫KzYZ]ŮzQ$MCZT&JLHHЇ:x$hܮ풀D6N3bQn0^kgkuΚ攞Γdfԏ,0cb ^A *,?TuzƯ vvY9PQL>̱)"?lX"JJ#'0^\ 1˦` L8q\NID\h[O^URԨ+kG] I=PiC[KgjX~й>%ԅے3zh4fMG,T *m#^t`fUS:33[ߡReCS喀p5;?,Nu,t:Zk-xAnM لlΔt))!fU }ǚC_bfJ7%@w|XH[.iLfV kh 5c~){2 Y_$oM&T`LƏU($u:* Ŭ;3ÅB*'S YfÆa]Y䕱s)OT=V$$Hޑu~[Z vI0^{iIJ4N~|_ʺFmGb2ḟo84OVU t]iL[_I/NȽۥ^@663IǞ[ ec1?(sIue#6C{|Za,_)xևDU)Ű׵+=U#{ޤY522ݡIu_()ϴեLdؽeZ}Km3u0+?<̢6YQP6[a]Zt+yYzEͤ|C3U恷]j=)58Zߍ ?s$..J0T98ثa. ;'Mbɓstm muHe~i!+}!EʇT)po &U} ZB1ʠs= @ffwZģ)*0d r%箒?+ı4R6t]!{)b±݋%J#/*-Ź^cY5lX[,"z^U:bÐ[,!Y0ksi=gBa M= ̞l KE%Kh^Ӆ>kZWɺ&dGcM\_wF}7d[`H7[ 1$(m{=WH5Pٚ$/KC\.Pqlo3e7M9[84 aB@7Wz5\}AF[A'Xh2W!;#w!YiHy)be۹ V5嚃r oɜdF<U -7w'3m]:#a[;3h]8-n_S~?'`n?p1_ݸC9&0X)Ӑ>p8rɑj &^Nly@of_Kv3s-Dyo#o:Yv7Ժ E\)]KU[}Xٞ+mKFJ=2!=^!Lol f}n;1:zmܼކfHq:c 3sRo)PNl㟿Oj0[;:mdjs\eЊ51o m? JLM! "մz'[ہπAdLꥸ;2$}K N{,vٲ&v]HNoP+5^y2 h^7P@UbY}pWD$p͐YP<%/DՐ0VC2"ҏc`&iͯǯ,lM@.$伽0^Èt b{tgrĶ>T ʷWUķ"b7e{J:Z&(Q1`ǀ$[6:%r)m8Xᬣ}*.zPxPl -8H-Z/dֈp?f"IձWox{c 4{1˼bO_w щZUk ?h <1b32^i@DR̚TeF]ؗьaصoX,߉.7ۛWMpㄡ HdCa &/IhT}W2"Kv>>v$sFKؼnkk8*{_3\Xpo&v'a^jJ>xTI𪩍=T,Kx_b)3C\ CGJ7]%TQ} )9jg HJ:&J6} ynn7xǹ !H 44L.`l?fW$= cStG\gxx4*d$hHzF6MႾ`lo U~i9f SE)anu$GK3Pxp͆U:ɃPb,Ö&P9;/Y.$؀jùA.?%iwmcO#Wϛfcv5HwCNљSmauvjb? ꣞i7?n뉺$VO$K;}x'p7=GO^ŕyaC#ΛHL&cTsF-oV>>h'ZOi=,T}Q="{ⱁT06ƟLA嬉hF|8P,$0p C[bk/鸆CC[K1-[('b[ƾS4[+*p`C.C i~W-\g݌{[3H#zUzz}zaB㻓Y\k$*҂O^',#%2 {uX"?u?m~4A %4֛0:&HDQt"sWloMD]* βEZ]beGx \'iMk'~ /{01݋+[5Mƍ#Š7xU.~$.$]{^Ţùی2}f:Q Гb &MlNje>ޟ$|XWM#pXaB&x*5P x܅"f^{}9)s|i > Q-SzLY)|'G)K4vU|P{kkUdj烐)Nr;O]qcCNcY;@9 F~m/& 7p6ۄ'MV5'9yvy$dN}> k; :'#ɦo/Vq`-E {M\ȳ@&A&|8/Bͯ<Á z=&_x >91R>R˕GdA'd2L>H?ĸc L@-m7g rfg DegMxL-uf+uXlޡږ*ކ A)hN qc>/J@וTM`2fe ʀ'-ܠ*ʋ$z@wci\'wգ?n A}{|i%Uh/RJC9:Q,?*+EQN?ۗ犱MIY}c4arhMs\\l1c"MYHE^J,Hr➬ )a90aM;8|\kV }g>l͌vUh_%ehi-4&O:惈?f[ {GAhJZ\s I%^ձb&H@*R4h!MEzڴj%&I+s\sc%ȕ%z-a /,zJ7(+FR<ܸO4Ǫ&őڪB'jgI^vP WMҀ`mϻ3KVt@ d<˩mFC d?UtAnbVYAʣyOC[fi}'cOIak+y1l {tj_uZ~\m@QjH؛ (?}s?ˌ/QA%1E1zWʿƒP& Mmu<3-ն!9xzh0u-j3O _"}<ϳU:aEt=@kG:5BEfx 5nQ4l_ WAGt;ި\]d)Wo- hY듖{J 1>tEk>ýimBT.S D'FO]tF;;{t,#w^K^dʆB|\68d?ղx"ɬF+\߭۰xSo[h\cNpͻgI_ ۾A{m!1lM+mn2T'&ҾM%adlWﻸFPlF SV§tnlr3+kb ål9?z+ S ƅ73Ķkv6ZXQ8>ՃAUuT. Oq_P(|ԩa_}*`/*}ZRۋCb[!Qt PnNng(ޱޛ(̞K%ŧ@du/;$Ժth0ǰ#ǮfR4'ONx8h/~8R{p#D]oZ!Җ . gA'XQq2nKiSdk 'iKTtYKrKeladuNHM'Wquymӯ?naI|?4 <>Z8fSOf犲֬b|6p{F4yp 7LNQ3VWe1 ,@%{| X''Om$6%^;>$fXj./qU3,w(i2fE!sg<[V$r:W':?g|`%[ tk͡Oޱ )T>50 .OI|bW,(n by)#R"p8Iۋ巤Ӗ/LNB;us>1$Kde}7^``h-L >^A 3wI&&"'99 e?٬jUjg̿QF[+@CV,{W]eG4oςծ;9{6hluYvs%bT<ny3za{pZVs?|U 9Hov~rڟcڭ<2 SiHt%pݛ(d3=sqK5S剡@ ka/+A+ J]yğ0C˹S)j,oaO]Z99<95F$h8 #]AĦp 0>d ̸͑ = GFKI栂"+/mb^c$s)ųE&J$U*E\"o )1zjHji0%euzGW$Wk7i [\ȓaÎa|bٲTrhSG;زyAF-RKt$amHCadiM'Sᝉ!lys vdsf}2{ gGhоpfGl6Xq\5ZCY /:4?JjӣQ5iaʣǽ}Xoqёkeg 02[ .} 5hQ{[O$(~JrbyAggO<ĺ9f,qmj=b?wB 淉E#,3zʙ7#5~Tjb}2r3}EJnxsm 95^ڪ};>SBÛZk|.Ǩw?My{jxZrʔĠ_HTGU#YrvM7f\uq0WE)B Ub| ?k{Lo/j{̖,k),h:D[{&55|\rID(Cs_l?J:OAU}41ets!Sn`t+B?QbN. x%`UUڞ  3t5!W;9\kBZdv̞'pӴPv^~tG?"6&7I܂rx^33=ĚBKXBnlI׻vkz>~=/r ;>&,J g~vI2ƆwDTyსT,0u`f|E-5LtRj Y"ۘ'ݻ9n%ϥX~n s@KE)癭C '㟔Q;5'Yt Ed(B[Znf 7 Ku14i}j"⭖n?M0fdѣ320UQ׎kSpg~B;YVZ '8ஹJu#A=@t(Ez-KIL+v:%QKB Z+]!5;L0KAҒi09wCn.$GiFԈD]| g|XYm-eR5ǍZ̏ ND@팫0vHXkT@Ƒ&&c{M@G bD~>1V5rZoą-=NәaDK8d;dmIOE nv>/@|~d5 Ա-Rr*w.Q-fN ¥&[(F^;B VUI-lX]l^)n.a50"jn$Ҟ'?Z+=q!f Sv\emB)9EXLP>adx|a |B=MBIfʄd/H6*C%T0>0l*x,n^ 4WavijͿ/kS y}[mR ]}kz ~p4=ڿBdtĚb2ˎ<뽳 U>xWT8-i*47R\`Q&0%1W] ^BSg97qbtc SXu^Nh} ,ę=T,*ѧͭQxB̯}=j+G@g4HV'),kVm<=Eq9P9A^v ʭ{fj}"|-U,I`@<*_Ht&uրgzoYHOG5^`:kF+W+Cܱ>hR~=zPjj־$1:yl5V凙d46۩WΞOgh8F$P,i1IY]I?Bɤ! ,:"f Tѭ|4y j (h\bմm4mdmI.,DVqAB t)ֳp\xk:{W8*'`*Av21;Ixȓ\mEryJ0EsBEv}P%;Uc^*-]-p LWIq~Q2odʆUґ~9Z‚<(@֫xO q)sQ+.;hHpɌ]G4?33N$MAz][ ;jSWnt^a؏ץ0']vߐk2:]&u:3{BgE cntX̴iZt~i&1dCAS{' 뺑 p";|U=D>cկ5de偧r茑1'jƍ4Zڃ+*^Hn]ENed a*a%GV-kvRn\R}(c)%[QjohOch*ؿyG;n5]i_|kn}hqUOGX9ֶ~\%7\1!Ah;٦me)g z("f廦Q掸 Ϻ1ɓ ^ g?%3 V8j|0 Dpv3ts0gKwNiM!;\8.&D5p\Kw,ILk\8$⟴tfѦVܥeWٝL FI)Nq4NznYs! lGQf:c>SB<nVh3l|N I5#tUt,-ypHa5IwEH<=Dv bўDG_௒j?dž(i^$ttdz+]!/4*ό.3s"# h GBIuv +(A_Sj";iA Ur$l);M-!%eDo>shרӐh9m#}@aG:G2 VJA$eMW*oԎ,ŕt賑BQ6 F7_)%;Ӻנ=keGPA<J|z9tHE2i ߘkQp >Fü`~}U"c-bz*Ѹ4;"d &'F X\g2V(prR$NGc6IW舉[SaįАt8YMKO/ x4]G0˽s `O:@[o&EkI᧽棟|ʈg&b~Ƨ K{ d0)27 B5=1~úkUd?B7Bc=W"L\Tż:v .@=k=_r Y["$\ۧq!sxRGPd</ihlHH5Fp'2b}܏ȔY;Fm |R)4S? iZ.VJL.o} |;5c&1 dHQb'ulb#6*t Ą%pʹ(ck3L!VZs[G;@$TQ M)~ʯ9 *ľzc痫oy?ԫw45&9O[RQ֐Yo8h\xA5š|#Zj xe\}E^-zhЅjaqAlǒѰM%AoĆ! zM87<%wҚ(Tv:.H g=DXSgP[< 3oK,ӵPbOx#`JG^(xp{ ‘=4+NƜЕ*2>k |+aK[[D L#7KE.g :RFC `LTid z1GYԸWUVj;&`GB7Nq#RE'a8V@ s.^\|nr vBH! De7s³sbarѽ<荲;9Q<^Yu *.CӒn.آ~/!w[J~3ap -4LgD=Ao q$Db8`J0+u:!0Hl£Q>giSnO7 •H^/3brӄ/ MNN}- 礄]QtH=zGTyL锖VKK@/xf: 52=5N[ԕ{ͷ-!s`Z(9/ LZQ rNG8BIaaq(27R9H/w [ʉPJ<=F1,^=QpH݂?:bp9}ެ~V aʠXu 㚶:Lݲ$M_Pc Жn_‚B͆4Iv-YԁG=ĎW-zk[mBa]P}Am(:;bwgl?du[BC,.XBխClvs_YG/8VF!HTpFcBHTHPdϼ\;KI!K9oz&XMb(cܮHvWt|*ÍC !_^%A:5\r\~V=,Ho2T]QM&vw#Siᛅi}`|Bs6b%? B_0a-m91b=$n#GP3~;08{(W9PВ:?D؈11R+7:yq,=!t%l3+ EzP V(QR_ʂEHpx_o=ޖ'ɏTF,쑴I4 H@ͪ Ȥ= +_PaP-S$~bd4żٱ3e, oD4f-dhj9]5xױ'O\8hz*Ph1O" FQpASi'[5jL N/Ŷgp!͌_]3~i [^c0dfr{;Ia-ՇBۧ=k>CC,wBX+50G4Cӊ_K™n3'Έ8;*A27ؗsDG2{!iˉѥ4w~B)"*\O tI^nF>(Ob+DX%(d)bFܶL/0Ѷ:?.ho}5-OOnÅ׆&rX=*کszTGCAmhOq{*5W?څR3fJY[m ۵Lr[5o`FoWX9]F5,6۴YNYz+G`I%Jƪ65#H3m-yL%~GR̗Aד5G5m͎Sg^,}bVٛ#{v$rWj9J[I6NMepn>N.fZ[O`tLLZ!6vVJ%Oc`unK ]齊y&<'_ [D`b@4כMQ*E)@;B~'spy rT)$/So5sSM%3'+C i[T :t":VbQ&T,]*y(h)!T[Xl3:Z5t`⡈c%eeC%~>~ o`9#fGj,]JY7-3=e¼ZyvELD+߇3Tˈ28Ok (3 pEp4uN\؆3$-4J{'fmک:ňZ\1l-PxNĖ% O⧅bEr7Nb9 %GD7jA fF(YpKvIR61&D㪊s8nؖxԨ킀aqwqYmIrљ罴"xw d:_>/QyU.PjXvֲ% |mOp(OH>"\]bxl&|jM;; j让H0 Uo1Z1GXe7].vJgVQ3qR_1/;xy 0#j ǁ t_gꦼ pm_fK)A|n5o|ەFTz P8OL7Ȅ5cMۊAX)9FZf/& ^,njպ[ E,'xUgAgc0\ҶÚo5uںI!C6lG/4dG#>H#"MKb}0>bVv{G sL=tY@лfҫ`Zs璑8wÎ|$INȕz\23Qol s!2s^~3v Uory_r^wɒ6AXLMSXjyEyŨU:&r㓇(VA.at{fbW|x S\h1!ޒMJ:r&K\ -49oM5l3!妲ъâZ mrۘ[7(1;:mm P< c*Yn:l ]x{@XvL!G֭,V{Fz!eɻ䖵sETA-Y'NSד8n!}*X#.M骯;'.j'Pg%WR.t3?ReRZZ>қ/= xO*}McWmӞ&x:МZ{|kb%z*EMk}s9̼m^Fl+l\TUWa){FgM$`iN}_4cXEg,w~(٦~ `x,htVlsqRv5WQS8ԙP Ħ[]0>s׭7xuI} Z}Pw9a0YeU?2 )zݕo"N{ lY)DM 6lW[o!}p@ßztZ&:3P= [.ܦS5B)TI۵96%NvzWt2j,Q7zP|3BP/޷}18;4Su~+mjP^~K!_lΚ-$^*DiZv&ss!36 vI#N"{%R4vFS{z+Amɖ9G"01[T-a5 ~Q&B-Dtji>`J 3w^.[BШh$Gʹ*o t=T7jFȿb, ] ?B rLvwNܦ p`l]2`[> CauH(3N!#㪣o Km1%~i΂Flg7m)J#ͩc/~gOx@8 gjz7VabN@[ȇWڦ3|q5%}Ж7xhRf3UoUͪTZh1䒾CM dKw~wS/hI mVc59*JgOS4k싢yHSHspqV}n9\ɑ_MCtQxE3r~0CfށǠ*۾q?LjbQ~j%_l1Ao@z!r:pGC~& 2F%qTkռ<|8&F+E. zX5+@+PTQ.D΄z"chJ~*X< KxDP )i5XaN<y ~qҳ| ;nPl' FpPHl{{qݝq`ōlBF{ýEJ|e ̛l.W;&g+d]yd/nImRJf@PQg]+@ {pE{lj恲?=$,y,WL<4iajO/|h>~l]qgb3T 8G`~m>*s.E~ q}I*^1j( S90S`sf`XWAѳ¼c1O.=Ȍ,xw# 8"0v:J\T,kհW")=kLP+AI!˗2Y^l]\*3apEkgqa-|j%[[W^tN[dx Uܘ9H7y'\fx65?f'V2'VL=E+XKa9Zl[*A&\^HcyAy9A\T \D 5W؁bg&x/vpxWȊqcWʫi?P}:"Ņv0)_Op1yhHX@s$D8HuQAhc"}>CI j4s)GIK{7lH[}!w&pga-Qkkgyq)~ޱn^4pN5 X慂0P'%B}IAZ^_K)vdnÉYl}iLlg9ssS-Ph6_K+p]C:M 'D@FK\o@>P2~.Sr@wmdR2`23>!%uEe>!+TL={{_ϗRWC`/(ZpT I5`1=Ou@q-e[! `-ѿBAVƂ#6N b$ q4Q +ޏgwWƔNI# :uU]m[Tz_G +HXAx2\9#ɌOe8;}_w6 tlCU5&ڴ$?E&́(QtJ߾w7_GR>cJg7w=<.Ggs#x&1?=a!v ix $` js!!6>(ν,/K Zrhet֔A['X p!m;<(moAd|;x|aqFξf>sn|>6K_f?] 3#s_ ĆG=2q2 42U9Y(j"$ fܛ1jV7§X}-҃9-\9¯eǣ8=?ÿO]ؽdRUC7I\"haF[XaACSD+{aba I<;:IiԖJIΰ S[w%|n@ǷI 0M:@z{PKu2)_b.^ɶyYXiraI 3%s]۲$H4rh,?m/MT~݉`Ody0of䓏^ǢYƪw #C sޙ;kG#L|k͎`$nVԘ$QƕYV;O .LAj`o. :+^C k^]KG< *ZYHU K!]FiwEzֺpGOF0!t'7䧎XyPGӋ? [\c2iwշtPl_h"!䲑Km#7P;T뤴ՓXZsfo(lhT|S,fM6 ,Xߗk9 g -][X ~ |߳KpQKRUеoWq1FymбPu#T>_R >LStHx::篇:-ӗ冮WM@pզ^KS]XK`@Yr̒c"o$kH.-woű[X1&y~LnX[^*DpxRL<E7oa7s%R11u{ٓ8GDaPϮznH`[xXb I9^Jb =7@-t}Nlq #$i_x Ӕ \MQ8kz/$^q$ݟqꎃ*?4I:q!܅LfͭyȄ[U\N`j4޴w4XgB8} Zgfݷ:L&T@bM! FiD!Yi^Α剟$eڴ{~ݘz2UxV8 ֔YջS]m\S /)_1yF"(\!I_Pͪ#ZoahO vi ٿj_57ǕwBEՂ4-&~ _GC Pg6 ;t'o_}=@t$ r~~x.J Tuɺ[5jl] jfb]m5WRJu( RU3^jEf`fS$it3z[5FqПR[VJGʠmCLd-(~*'F_m`HNA2K0{" ?o{r{TgLzr_šf> [-0Q* Qmj8 f4c`~TPwj]xEQmaW7@겜&˒ȡf|]؝P5,KtÍHPG E<8Fy.x"WdU=P~-&ܣdV[ZRH:bLH4d#}ڡSV"ɶp{ s߮doT)Ay \~[ GsxX6b-$ᕿ߮pi? x_R޷ZrOnrb*jkI_߬$⯏YmRCVzU=烆W2B8{";l[%;z_jCټt/^ZI.obS "s/QLO*UclLem"ɟ gV}%nׂ쑕NA+w@CcabߘөHqڍx0NT10us˧?;L<=N=()L5#!ՄgfI<1v)CD‘^Ws&̐Qo w-ԘͿȌŢ~CQTaM 6Zy{|oʹD33@K*?^/vq,a?99Ih*m8{b?+{%\>K2qFsж gu[T|Ye=8{yGρkޑWx9XpXИP+N(}svR] K$;*WG Qf@;?ڹKԮ2 %8ߊ/n1RҐ/HKAP%LgNoFAiQ&K}>)ί&`zlg6% -DT #^ A2]~ f c, Q'P_XM+ɼTv2j9c!( uM=O/u TA zO_+M잭:$|a#Jݤu5ȅX7nF9X͋rx,8ܷ܎<񿻶Ij=wu]flcv;osɈEsc[XL#-&z- " J \:NׄkoehDfDd+e=)NœS\ƈ#`3L̀x|n.ªy۠'1VCi3"#`DiINm.O6+ 5T*dȦLtϙm!@͔Birч>| /@i_nE1 ZsMP22NJ=:P:pfgxStP龉N}ci/ȋpKM\:+͹` M׎H@(r6u7,KiqIDk`(ZQUV0ڴv,o 3PЫ`x2f#XVb#N\ X ~ b)ˊ+/?aS~"9'D{L6qO”f/Sr}_|4#bl vs+~! \gUrLUA ¤\:h%%ڏEf:rQRlKzWY-'fghpE63\L|6GpS?K<<%4`Z*Kw ڍEx 񵱖4 Tб>:N^cR5&:kۃ /=n)!̪UBCTۘ9i Y{眱oc!:4 (O_k w:+KGp.Ok6o/ +w)6%y³kWZM$4S` (2i=aј0̜sq:`ge}Qպ^nm"unX xUǶIRc+gs154@ȶ~IٙMV̹`oӗogxr^WLW6*1p2$8:xy1oG1 +{[N>q]9q6ؗs9P!xE$`y)@.|j&?F#?WjzL"x2jJʎy04+aً$cNg )%6 n\/\ "O[)u/G[b :DO*GV*--EB0@[8G6&*b-HFEe= }~`e+D\IIz0YgiVWwg-{Ȓ-(d _-Rn'MOsh$kn w+\9|o)HRvke0ȿ+sԴ_+\lŤuL23f!i=6 0zP?/>& $oY=2#WJ<73.+G;]7ݾTRjA'mL`zwcp0t&mN"! "a0^<:8xrZehY,q=c@ E2#6BoiS"C|E5/R)!مkF1e1I阳Ա-_3)+;8J,; lVakWH'D)*fP~ӭ)yx^.Ost6̜#֭J5c4!k4 $ w܃WBt݆G.s3x1E pV:NǕWGhz9Qz6ʅJ!7z^wĴ\ՙz?^5^IѭpoL5sj?v֩v2"؊F~Q^$4ޯm^ֹy;mh/\cL!jBԏ$UPw rM,!r"t1̱GLf[/&l)ۇYܯ#3V⎚(#e8{%tLjL ) V`wZ '%8}YW;{ JUކ;݀@hBv) kQL_`ُx(cCKOo rqB>| K>_䕏8^T{=;6JvځP5KNc&ѱN'z[amgS[jU"f' V2FAeްYDV|z-_Y6FJ2ϾoB©vfQw9 è TpEØG5&}3N'QsJN%t%p?+cW;1CoU-P`ydSSTy4P/lv(CBoPv1*tPputAO%u (<}xoG²#4ew4]dfNC8_ 8[t2ƅdQKJ-U/:P veZ2C 56<J}4!?zz\$ ޓtyIߥL֚܄sU{DoD=O`RlRy26=iH۸ aB$"i/z_\ՠ/! ]JhDPl+2HImA %A}Qoqk$d_>o[)a>"v)y20NJrەC׼ʱ|>m|6ge=uby< >/jTj/o} /Sl%G/Ytb* 6fF@Q]\7QI`- _ +Uwz:E',o=2~#޼,R_β.~JoθZv:{γ#md*k嘞?ΰ[SNɣr>Pաfڅ] uWTqo-&-Df7+56W'F8n*̶m#itma/>N`΍P wE'ã Ӝ)x[A#\c 6k\&2OCo 4/g/S,IIp6ASR "IOc[}} M.ntޛ*H,iAI|`$ N.z/+`;rbw;Th5kY_ YCRtK4.︡aM8k \J}6# +"),(M2.D1@.Bp=ceʎ%{j̙IWQ$RXH}ԗxhoʤ|mb"y4{n'8jc|{(k^cUzצ&zY$M6 X%YB]-Ti<=ED%8En#3V|U~w׼HYvCCU=9ǏT9f)+LF f[\ Kk> px>4n&N̳V9}uwBW7tSQh4ttn |)"r3H*~ߠ: 5LV:rfgazV"s*S^>U=l- ׷c*>P4!xx߽[LxdDZ:|)ޜ)d4CY'Y 4ue{W CF4݊Soþ[{y'+3C3RF{ew8]ȺL#=ŬaRhOq:paLZLjڳ:[gwha 95`և.G'T@(K/>%0'f;1a0(h{EjDŽ*C_@݁ځm5iG\1wr&oE;TOS}d:Ͱj4Wk.hRp,]+ nnbi퓪[t h{l?^Rt=쪳 )(!gꃪCh?^3V2wvly'$K?U+ Ƥe7~.qږ:!c%? *IM0(lНҶ396ve4[Eྷv(,X&5KBUt{4e7TGe6چҩ&_C/yuF-Ϟ?t0'Ӈr"w#\ߴH 5s!l_WR2h4F{EU100Oik7X?dd՝X!+m03~tIWz; dba/;ѐE@lcT<)< *eu]$YRp7 PRݜGR~v` %I.{OC3 uGVTaՐoI1aQҐXz\ L5Y@'ty%C|1FHU yT453:Hbs'We=jXn1˂fgov==m!%g__+M!x$,Xإ1*2.+jPHBȿ/jbV[L0+`_aIYI#Nw-2N)yHIB¨lуUt ږ1C'(Ay9*Aoӄaў&z!q` ʴsb B?$*4Ih`ܼ7*T!ӛ,N?;ZX!valO-z<'ͧ#8U#ߧgp^GKa[mg<{hJPK&Ŝl\G  p ᫊8:t.fw!$#XZY~sc 0^F^[@z)N@|@㴸|yAÒx+׀#:PZЖC1">84'zd.,,@ash Es)UqNCƹsD.IBrkc`p:)Df50OЈTm1(߼%)2>M[=`!I}'ERTFS}LfG 7/:cWgdiʦ(n#|?Y|YtZE^ERU[dF'9:$J6\ R"|*3z SJ:@OsuQ_.! CVM )EHn8V{t}לyȖm]YSnFJ]['\awqFRK-C \u+) a]r`UUB8&n %;2nb/;.CjvGS5+t;2ba"J3ᯄ䏏E-_Tp8^ygw~&f?^;Nw޼SD^g#eweأ?rBv~1TiKH I7RXUQ|*O(iuX{{cҘv=c-t YPKOGV˻ڴDG, vDϭ;q`rTN[Eš~E9xˣ=&'wcrz~[WmE`PB- Zm'(FApm3p {N3 =$$i!GcBw0Vg *tH}:,2t- _3. @'a=8!U\ jc=m1r !Wye&,R)V~[قk(\ҙwk%X .LK1^ֿ XW.j {,lB[>'ФD3䞏P?lXl|ou^2sYm1hJ.ǿ ̃|hm8mr32X"/ً$kڼZ!JƱ/>rtps@2'ZB&jVfu1m]ĺGxtQueM>rZȡɗڠ6%n:"qS1}U ~.XИ&! ~_%4ݺn^}KjG|A۶#[1\CvX@քߔ\ mg^6*g9LmF A%&4j,kR̿&'85|0ll, [Ѱe_x3_ NRcŸu번rp K!@bM{Qp\%'cH. 6<˄N›;T0blEh<ɠ}]ͽY҆$\1/=jD pe[vJAFAF/$B8Vo|[7 w @eW#Aerԭf>\63*wB]?*u̓m@k{qdR#eG "CŞ1@fK3VKuYkO2ٯ:K=3wàzq9JIT8CC;4Gq) pNLk`z_<0Ca`VeaUT#_TB^+R/ès"/d ~e} 1&ј̫kz6j7^GחÒ/D#Y73vq -Os.F^UΏhd{(`kUAJ>ŬNe,䗗YDЗJgog75˓0+h<&1э>r@v $**]T5RQG)D~O  p7b$U[zb%MJ܆t4~HoZ31d><kB-IuLM%3Lj_ GkvvffI ^t&,ֶ\yxd'lCF-Rͼ,2t|~-Ǣ%?2<gM}#+XIɍ<.#sAyhh96S" ~pbd>DGBRV5oV-Goۚ@>Rs6i=Fr&TvQK5y>pZɑx; UL`s"/}ˌܾM&ÉvH|W$SjF2R$u Ʈ6ZiڼK5,צJz"N5WwbPiU_OǯgA?u N ;qaahKG?m!#Zf[pNRȿ6OHrS0^ZJ5C<};y@2*}c>IZ#6X@2M|JQZkw=>Uض)AFL[C scIxre ͏BpC\:QCȹo* ɍX9Eo0aO*؏ێ耳4KmtBVpN M=8Y҃AL"\5gЕ isԪ֙޹Cn 1:x HK} =[ C9yJ(l>램=pl܄u $ b+DR̃` CdLQֱ?=OMJ }y;Ա.[&^\ˊƧeNLCUNJQFn W}v."aA2{ Wcc{[u`E*{Кgx)@qթNEKV'0A=l&Bز9F^cB;?HCVictjK5XXCtq -+eP["Ղ+ĕG~[$Qc-6%\R<!H#?( r{{wz0\?emEȫ}\^ەa鸈1 Q,?Hvg-R[+$S#j.Ir51Ny+izv fC%Q sNF̈GĭVrhܳ@S҈g Wʼn1pDS iJ jꬵm(.+8U]MCfO&]߫`H8*By~hHՖɽV{t7!PDc慅1Y >6'.BT6{խFa_~0fj]~ )^i~PcRe㳕 |0=& Dj^(}3 0+v.3J (Ts0cMW Z(ٯ玛s+s<,%XBcRgCD;i[ 'gmrud{yf4fz)g*\*L4gF\-# *Zɚ{,']"SL}Qπtnَau{c8 Uh|Y hVZd#ke 5[B\޼`3_ OU SI]7߰x(Wvǻ 8_ݙ\}{0stM:,5ʽ v߷"fȗ bYYsy(V{ngXCRF^@6Czf:NIDʖ y&M{!TyHڏ5u>qAQBK/bV}jNtOӅNI2]'9:H:c'=J?be=-`9F-W|e1ϧ{aAYQ\:J ^X-;5=eg _xV,qWq=&=k`!P<B r8Q! .swSԜ>d2PBmaJJv- Q<6uD[i&_T(G dh*&ԈTS0ހӓ ׊;y>_]яI[•yz M!%gܠQ)7b @j2̐Ж8'5EC1hoH>,YD EЄEb&9ȒH[UYKrxI5J{{ֳP5,k9S)]䝾SQ#Lg,} 1'6_L!]fv\@8LLpp#m%4?cNۚ~O9zEsL*hK bC; ?/Tnc%X2w@Y9: 4HXi9ې4  nik@͂#۷Ҷ'gGÖs.y8Yj% ]j <`K5ɫxON*brâY/ M,Ȇ wh"Zq0'n}"З;Y Cn_z_ksxy`"%f)$>[̬ ڳط|_*PjDEPSNNyo=&4|6o $פ~+GXfT񎴊iJ"! AUUiޡNϊנSLζh?l@m`@`r]l@0^oO{W#-T|)tda/#ǃoJLul4 .9W[+b@Rxv?I"TjM/Oouvv#c:g؞?V]46>bƫD^eDl- -EwJe۱hMFZ7=)7[pG>5K{ZgoɣRiWnE({TYުUԆʣ+:K̰%K쯿TQٜ_tQU[A~+ߵk^:JEK0Ѽ{hfEʼngpvYhD㎵c9јZ91tf5f355P5kU| O6C=%GLºorpOJ GŜs6HdeijjhAKhDH KhFn+֯žQ7M)xq^L$*"N؇&ɒKZ-4U|շi5r~^sHKY#yTWϪ6SL3?mF0P"*Ym8HfIS٬J cC?qw5PהݧzMOvjxF@X42pc>$_\ \\['rhǕBL%WNұ^֍h~h%OAQ7a'6{P<1M)uJ 2ko?'h۲CV@O+*zBCn7;]߹i ŎHwj4~wBXCo2<>i~[˗5AR(Xb4A2kaH=y Ym~L^[ D a/{ 6ݿ0G"s+u`0fG9zca,IZms;Ĥ#Fg-Zr`,i,Ot0R-'ԃ`l}&[q0 oJ:bԓ euމQ)LtYȡH0ogb>+db -DiJ;UQ@="VQHp77靆ڣt4yEIgœP@A")f83Nij=k02Ђy )?gAKt7f.<2M@9/JDrTBhK%[ABb<ܑUQn"zjEq!?̋֯bdD-!t 2 gxPJ(`L}Otr.;:iTJJhS~Kj|/ -i9 >Adމ\LMtr&̍⾿'CBOGTFUBc`fœd,㹅 i_4:,s>ZF{cbD"YrS,['*x|tvlS|.@z'7$&:pG Rф8Ɋ#AO`K˜ч_Б50ƥƾ996sz. D}c;TiXx| `879+{ 1Q% iDX!~}P`zWe%;sA" `e4-p$en"'f2W|^.npݤ.6z%.?𩃅-2 ͣZ|B?W_!8ۃg`<>E*1O02R{)xLAu@?cXs%Ο3J;i<צ <PY7a%527cHZB~u*IoėawKWP#omWaW"<0PҊxDWhRGe*]sS9Ƿ ljD]>w Y,ñ8G6rsj_"IƀkDSp~?"=]CAP Sa l[ ;Rc:pU=+]iήK!)cUiO`$Su|ՑLTS㏵.ԸUܸM&4.$$%V&9K[x Q=3:}N#todyuߩ}> 1OiUE76±8zzf=4uDk7v(FWA@wj3z{l N5iFޚ9h`r{K8gRVa_gseW-]iþMxfgtŴI8 D O79XTr'`a°F>IJ>:6xN`f[!@_UH SPXVex1,u#vWyE{~ëaM<;AQB emƗHzG2ݏ4@wE0;SFM]^J1Yn4ٵFUI#/nˮ?FR}j@ UN&~/ }P`KKjخ!Ln_}X;)@C \Y5Ժ f}qU׵~Y[D 5) ]'aj_apl= s){K^FVHUCmwCŷ^ŀ՗6j:14a] ЄI 8nL& lrmm v8?zE4bNߊ|R2$8&e}LeL١*F^pNkSfPv@V兤Ջ 䗈.ҵS-5:^stjRǸQm䮻v }_QaW`d2]+EmԐL)}ϷȌ)OzWy~!{XHqӑ >O]wdksYMۣ ٪jgg8\̹NIѹ ,фK #ϳ6~q'tii}^r\}\ t!by1!-EH ?"vBHoPHtg{^k@gؠtz}U#Nr2EN{2?hx, ;0' $RhD&K3!5gD FNReCF,:YyD'Wa7:mpPakJkԪ DwNo@_,f {cUC.bQ-6 ޭ(TqǝtcR~O[5l{ݞ!w;gUQL>2믣Ww vQ;q[/2e`ӂW1kRc*/IP\h3=Ac -_,n;-qk-9/j &:͢O HT ca] 敟'M( -:kKw \I z,&[ +&¼Gj*e 06,:{nx=yi)©Մy6֮٭фTRډӎPZJv!s; % 4(&n äƹ $Ts =uT=F;5HѪ A0$0 -7(׈ĘXGм8T~='.V5nL^-w6射JP=U.5]oofkSϧ4;I2S C./~vQʁ*!hMm9g"O;(:)JòR=sUc%AJR|X6b*@@gws 6POj #3nc~2nlM''xnX>u7PMUHKI.Lb5۷Jtؔ֯4r2md|7d; eU 7:`qpӶl#n N?Yu*<*Բ&z" ." XN ash/▋R%G3DcL$Ү5fW0t6ԓvџ)=+};{CAD BT^{H_@  coh@Q&dxTVvjAG!ZGTe[t2t"1Otl|jc wlEO"]"͍52,#;ZW{'גL }$ݕ稆Y~+r]o'}e["ԚϪ~{؍ 7r1=lU7W:",Z@5*36Taǥp%Sug؇*o\k_+r$o˪YV: Qk66`Ŀ0-f0I,+))(6-@T*0aQy A˸trDZ#՝AchҚ(swGթV}#_ %K9qV"Q3pF3.3JMHe<ҧ UMya@ KX%nuppxUF:7,Lz]+sξo#cnIOި_TOZj$Jr| `$p&I#_2ӗ̚؃W6R)֋ů=k٣ ?Qx&Z|9|^Yݾع1&v3uPk1O f?TBP-J(חl&7Ѷ8G\RDp'/gy%rh ^xB!aAOv)M>\.wxYs޷}T< OX|Q{h4m3N!蘾cmx?[X,@=18\UzVHo kCY䴯6H 5WhzQ(>i/f;4O<qo4[k^Bubdbxp>@s/ -})`͋ ih e02OL%lHc]Oi4>{vT)%[BoyXn-=GpR)<|5!4pNPgHQsX ;;,qUq":!JVDO~s7lzDĵx y\\i`Y i3jIs>^,wmSu[^ë4=Oo@0< ;R6aLFC}Om ySZ/p} 9 ?)9>9v`Z2Bj}RfIyUI|Sc,CM@HzJTX޽wR$g2]놈7X؇ L*8<55ɯ o hʏVzjo2] >O#H220˗85/6lguoY5m{^&D__ҌUVߏE8qЋqT|=uTU~vb *NE#vG .'Yo1HT5u,aX٫ >[1; x:P|>Rjyx5}YN#]*oY9qECXc53/KCk7&?aG<L2q〤OjS_}O+Xsi c@2kTBkmVtN{tkEgrmu`Ih^\GC)Diyؖ%[ʬ)8ԕV-XvG}b9.){y ??NrySBE]E\3&V{jsCv~3 E z'D"Xs~;DsFqm⼀}NڜW*K ?Ipģ-mG {8,%^|' -t(P-:+LcdP!Yaʨ~YӂK~jl/ ; GeIDFIK} d0@L-OnFfx{h:,ɾ,~}@.3K SQ @,߂gb/5؅/߉0zMՠQ'ي݈ Z RgLzbDTu>J )?՗s?Fd (p<}@4gc `0nq[bn+A9n\7O WM_~ }Js]ֳ:9`PA>Q 26@Xr# ,A&:^ϚNZ; lqyX~|8yW'?xvaxougi1H! fl.\!"|3h4c&NȁyLBv.\!W_pNac`j<7CYyf\?jhU2y"W[὚ۄ1k!mMIfEmgS'Osu/lD+ۺQ~{^d\WI(iA Gh㟉W@?EzuI|n'/8Sߴ> 5I;%G]AJ~.67й/@dг)܃ ~G! tr;o5w/fJ(J':.D+@^^At:z!+mz&S0(/ p|Jyb#|xrtt@ V 9}Ү4LZݿDӝ"P; %dA v9|/bfHᾟh"%2[,PuD{ЭV`/4<34ѦvL o$He-rd`J)ɔFkꚋ2ȱ`LF?1vi)zDgy>3[C ;tqFj\Y}s+r`S;FP4dj[fAH(nˍ@fSe}`D"*$hu+>/0O]vVD$b7_(X9:!Jǧ/VYY CvShW}z-@:C߬k*c+v3IZ# |DӚhNDTlG^䉬*4g]g e%~Ob)<ėBl@?-ؿf4V)=۬f&>ZƏ01F}Yr'H:1pz%;ЀtT?KfF%[Y)֟67v}x*s ?҂}UZ(ol( C'.pNH$/={{Q(9w{w]Yo&KF5Zk_8K3I#G9ٍG!:*,6`. }ٰF5ϡVL,px3&b&&s趱9a>;Xbs3ZËE&7i8KC-e9m'HJ.ɑEP43"4wabB58!NUT1^ܰ.BP pG@Cuoǻ^ ܀r̍LzIVIb"KMױBK_\MSt4zyK?d9'Z[.(Ͽ+qʇw[a7Eҡf UUOql=z8eIv",0kEw~潛vKB*7.Տnߋ^g|;ƸF/x̦µ _s\I@w/V /*Ś):;-~ϙ)T"p_,蟾Ƀ1|z1wnhpm?qy9 (@淿採]~r6qLhMjX6DDP-(a3H١dR_6Lt&gpF#Xf=d띟A#hʴgY|oCmLre)ٹw3','_$`2b6`,Ҕӝe&kQtVѢp+K4y&Iu[NOq}\/rirk+NW,9{o7 H#*^;o|wn17+׎TTM1m[]Ô:zX.Ql׀Y4aiUjjw/S[VsPQ=Q5}c {`o`L42,Yb^K*apҎ(--$ C`!1I V0SEMQ+9U"~\C.J~.Dc(TRkd_;07U1?۷(^@73_rBw#b$+"z" [NGdr9;erz >Wū>NEXq{k72PՉ<쌸S\bΆO qI2ܬҥ1 %Fva7ȟ܆rB=3V-0GѴ/WLzC{8)?\Ť"%\ɬeJQ1(pT@Lx?3`R ZVG^'TŸC %Am^QT9ps}rvTKL| gU @(dcg^'a$!A&{!V0#z @\X#T,PnDqUPFA?d5lj&QDz C;]GO_ϏՋc5PK Ә 6f MeogPxjX.6F0&#֠܅)FF7jYiXpS^w/ҝZ_kN07oyPjCRT4ńcY9֙y!5Vx )Ǹf'sFۙ%4|Tu3 `nԙ*PRnz$EyPUa=wߢɚ/.ɍ0me|p_z"?<`0a\wvFq7zGf7rkh>b z.ށ&t- ]|ƪ[gu<9ǧE./V=qd ´1$HKWkvXN'UFehY#]?i.(E7j8 ZGTgZز,7 h >_ $DKG7hI6AQPcຊ'Q? &~ )q:B'*Qg`?E.~Z#6-};I|-oS#6J1eꐓhRPwÞbT6*!I[z [qI殲Rr-b*cFwmrca#KS|PENu3$L-K.QeU +rAύit)'!`!Wf\_G8fQpey焤Oe#weO΍4Eлya/\0j"Ž#\ reEV/c ՠ=8AЄL;}r<Jhckƻ)/y*ꦞ!&=NMQ*:Q.<v-Gb0oEeI8PJ~:_#5&;~ب8Ֆz|F(ibg~:)7SjK/}z `$~UTWlɇ j!Xnv-^p̣ _GIr0ۉnJGsd*ryЁAwa(C?x _E},}θ9ߒ7 [>ٖ$m V]`O%lfk['0څܫ6k8vΓ$wwkEߺw*;{xIdanK2DJ{$͵2:bBv"H$AdytrH)ݾ-٤R H6DٮbYDX+a<ԳÛZ|WxKdV5ƿj$FB~*5t9z}]_Rs 1/QF)1Js;BўC adpx"I>r04 U(úN6qc<k&ywUq j?a.!3=C BF7ExmYx#(pVʗ$ކc\-*z$ĀԄ%^g'ԄcG6@ު[&pI7ZYm0m^Z }Ӳje3?\YY,Ŭ:S VE::AӌʭVp?hu{?G/6AaN>whhsMo`|EJ r-ױJP"ZP4IjW}߾:s7{At|}dGuap V!0 ̀-<^ `Q'=|mTieOm$JGhZ`鲔ɖ>ZD}FZ?(b:ary ҉PHVc:K$J{{@5M!@` ~9jQPx3bK ?τ)>! @eIR*-]M:;q|S~éBZ|bGȲ@jRۢp 'y*2׺ZcB,"it;Xb㓆b;?5 FQ|j9X+_֐4)eϛ56ѫQj*:2 d@1 $]%Hpv|Ϧ!qWYE* \VNhL e#!@"\UF0S(Ni9~V(dWd*4Pqo1vǹiv:OJ̿LĤ!H?-}k9Ҽp. +n߈_8Gm#P+7aH&I܂\tOsdlSru$<=e#N'qMLՖ,0q8Mp+~^[:ΘƊ uim5_i֟Սi LWpJR[e$&%pD{ס}*{cj\'Ԏ_,M<:1T4sw~-zE=MSL(ZkxQE kh| k] )ZdAX"\ XfKOgǛ JLeR|.!P"a }6ҫ5F!+,LTέ3 .(%j[{0q,{瀤%8ޭʉU?9KiN>P+(C!YZ&o٬G\+Pg|zv#?Y N]*AisiM 7HvRL\x@`3ejaYcMU rU<ٲZp:1iP4ޫes'{"`}[4:9w$ lئS)]rט @w)Ik6gc8]ߛ]UY N(~ЂauM=)H(x`[!'Gݾ3؟,h!,_N 1hJ1oK~uNMwGr&1ؖc#0EOf?$4] Tّ@BfK\fl4%Gdu.¬?kzlAAwN~/|8__Xxॐ3ԫmS9̲mGF.'rM9>s)2&̪u\GH8(ͳQ;OZy?j`CGcnQ_c1-/9ŎO`ʀR<uzj,'ZHqo `xxRNH#2 3@9R^ c5'pWzT`iOg4U+ x(n/$ E;QJVLJc WX :/g%e M^,`vHDsj|TbYt5q򂵩 rZ]޹|$ vШY+:,#w4 {@D~(Ayx?{}Kε!;C7_,X„W$Jx'c f;>,N]Xfiܙ# f¼(XϾtAvWV[=8(S cZL+y! Y7rC $.|N#4MPsO*nL r% |$i%zDE&|}MX;F?u2IJW͡2?̌q;fpf~Q ObGb9׮Jf1p>|sݹ"ݦJߐdO) ],zA_.g-$- \Q}F=;;l)T,BUyֈog\k"lj΋8HQ4Ocs'a!=TO(Z2(XMXh(s-/X;|,;Ȯ^[KLn P>0ED,h9&pA*\Rmrrn)):hYyE1d%=_t_~fbZQ6g# ەC;Ŭ&'F6(->1|Uy-޾e7x TByGo$'hra0z(dP\ x*ҡ?~a&ȹpFy *cb|5V\ 6jt?^6Oh( Vj'jUZBc7&{L1#HqCvsPNxJA܂j_)wf,7::ծQ{`vr]m»w)d #g9[7aL1˷w$őՙ˗@b> l6B&ouz06bpD%?BK$kQ$2s\LMɼ D*\[ƟCnI~4X@>9Dت);FW^$ ijw8a|"1pڄ40+7L.D۪]PK׹UѻC1=4VDqS6_5v9&w B ÇF'ޖ?)*DQ 0ׅ=RVo(fhPaL=|.Cv[XXjC>(1b-T[4.pV l{X2ZVi*R1凑ghUV&R3T܇\ʩ@V7BF$꭮65%bB*rÎܴFO0\q뇚Kƀ}0U+ !+]3Ռf9SM(,uҼ=13Zڷ2z젬2PXW|# |i66^dEzUs cY`\'K,uE{tX>[F1ԟRHmvb0\~5Rs!Fd8ӹ#H/DpVݤt] AJE rb(p]3 x`+ {(T`ٯ}Y|'5e%Mac,34 %5]I 3e{>0B 41BF)IzN~VviKr{Hx[e(J,i7AW!a աN-Y\?䶌-El%F.+)z͆0bLqa=V:p HF<`H: wP7р`%ex0QѺ%mevQ쟟g_g>nrCΟ-\N@Rހ0 ;*mZʟ㙛_8wH"e\*-8K1m*;DG_dMr!&5wG2[7Еa'zM%@QGGҒվ?vͲr0qKFM cJ:X(Zz&8Q,eVzgR Zh9J-+||z nR Q3b셑y> 7R LJMH*@$>6R&zMnHA^-jv6-}$ A2J(ʬ =楂^zKJLoY0MQɯ  o0c 24|H4q>>Q]7MV[JƓ+fWKĬ_u\)Q`hɽiҸ ճ5W8 ‚߂̞M ?nrOH<_..l#%eN[Y]7ߩg30C`Gt5BW-#add X}jbr |8. [7lk .W?4p&XEQ="m:ĝڵ/,.qxHvG]YvBF:;䰇yٛ52M~]oFkwP1~&4A^ҟ4k԰!X N;Y/K*: y%f@|'Jdo1n4C:OFFmll I5,)F23*/ƛGB/ЏA1){\}WԦ"$EGXtMh ߵi/q>}W!p#8֠C,)A B'b& Q\wz^Pg?W=9 z3v->wWF0k\ Ż폇4-ySj'8jK ^?N3E$\'Fm&hX`9 9h|5eK0r;d^F5o{FSP]1g0"=bXI$̤\B\65?tlƪe! 1XJSZXzK[]k}dd(g&*#qHHԵ(1}ڔv1<{Ia|Wp~9/h} iLf iq1 t)֙, ͢A5EO*~R p{K?o]w0 NŦ@J-6v@RSی' D&Z?J@Ҁ ֳ{Mͻ@ނP$O>l]M9yLFy'*A-dEO  _55hUw:R66XuףZhA AQdd3)rz o#=}\b[79&C Y9"CCU$[9 4S }Rgدu]"[3E#֨z bFTzMȩ.*VO\=dVeot_%8@[\z9gC/e)zQגN&.Z6[$l ,u$`)ppL ?P?(!Ɩ,4(NP[OO%lhU2dfrݕ,uo"}&m)@'>%gQrhak'ɵM7;BnUNW;wbRuȅ,dIaĩӫ¦d Q#[<ѪKσd_u1,c3xp:E$AӍtʘ_3Doz]XՉ sF.= _RէbfE%Nom9?r-g(vkr9le$Rڇs]\<j]+ٖcb"T$oTOEAe2H zT4w= mįvRL8) ;%-| qs쳾@"J8VUz h`'O$28M~4*|^ƓyBhŲy6,bʸ^| a$3iyɬԞ1ns3^qöVN.81ޫWx<%/KgkNJC ,S_[XQI`h( ** @ubNJ닳G}orUKKY企g j%/t;4p)`NjˤVk&?\Pų)G5Ѐ^y[#$ljXSL3@G~@e,Qo&{F!+JdtcbR` 2M D'hU :Ig@w( S긙".Ƣ}%1 ǿ Jx_'46.@lFY1WӥȜWOJ.uK;`F }YKI=< uV9b+w7EUm#mMtH#f>R ILe7 ۫~!Jw[]kJջvP_P!:>zo_Dh*uؓ=WEluHvPwVҿE`GqB0m#V8ሂ *Ϧ72jV{?6|'^9uF(UaD<2#q|,FP2H\M'CϚ!p-tu~zZ,9wM| c8LV+"O񡃉߹ݦINf {AM9S$w%S\W \VD|cQ1kXB2|qm@sFiMw.Π9_`N]{{$"jƢ ׾Qg=E)|!I  OX‹6kG'12N\|3t߫\~v Q|tPp0[k@$\%[@mo]me.kT E+ <\9/aT4.o.غB?0,K>{(ұl^/*H~ K( V/a_oP>Sզ'soX=+g%%A~ _(jS+NE'HaZa94wFP*]ܯ%31|ٰAj\*Zr*XL[W6%cVcn-lvNսpβ "R.!fg~VWOn,c3b T1UN-X‘U_Tq/[5k|R.wx {2Qp pF P\Ze-Bvkҵ&|aqS aH k G67()CMZ:6 _w' [xefkZU1[9ᠻjc7`pVÞ+:84ЎYeB Cݎ G\%/qNʎrkA5&vAYЫF3A;L@KێHlk3D5}ՇOƵVxa"z*ѧ.װ '⨌FPi5w-nqqվ68eAL,O5ʷXK*1ik!w/w6"X)jV6ب1w_-"a)~ҟ{$hq5 jKW!"Z]@GTF \wX9O 5m:n̓R]$4>l\gɦ7)s.Bt*qM4~YMg(ik%"mg1"_'wcVYTe5kd~=C"ۆLٜ /pgߕpˆzIZ]0{GLO`ГQeRضi:mas׮k$7P K9hM|$Ʌ1H 6y(tD5A ϑ7R'zhd $3:J;5 }Wj}]ډWd5 /@Gzl]'kr┵P?:cM"'ڃ)xyhJ{~/3>W1<{C*pI"ޘB|&ة}!e~KovO(L6l~P虼r{j]0UپF M(t̹n=sԃ> L޵<J_(^W&&zCˈGu5Z8 -Zgw>f?~p+>tMiy~?1^ ,=XﶕIR2b'9ux%g}Hoe6Ww&8 Ƕ] 1U"XL%󦑕=4!h9?Lx;pI6)s@J"w#p0c,{sU cT;ȱ4%/0@SkIw[[G.<$; .[zZU7.ogA-qTgUg `հElazryԙ ƴX/8θTs8wd=5E!P |4ֲ1>D9! |=aOBqQNxZq ʝzB/v҅}L;e)[ւ{@1I~,5 .{jɐOR?}zn~БB*қrCr7kt[+@!.0|2CpOaU{X5}2%\,!ˑ(X; uAN䆐<ǎZ@Cݵ7 mVhAraCZPM&3Bhe%٢!/6bΗaQRhzE!Ȼ³9J"Lu)/?Hjz8_[0ItI{{9bLYs*M `gv3s F^ X@!>̚=A_;@N8R&Z} tIqYYA|4_LS RmIh냮gu3-UL>EF4rm0(Q[o.LYkfɝo}ՂBqFL N[~E)~@_d6&J&bU<XD;ǺXS+ˢO60ڍ ™9Ia >fiIU,Di0̷8R"ޱ@ay(m= {H-Hb*5eaeZ%Ҩ rGk(?WFjvQ=SAWVzf'$*Ü7c]RY+N 8ۉϲG^{ N!E/?{@vUo`nr&0QX2 GD5!ϣN`sۨ􌊼w2*&1cҍ쥹%] o\Y/8ojrG8WA70 5Jܣ3)J̼V;Oe!)i9׼Ԟge JֻNi3sV6c3vI975g۫EQ5ZD~!?Rڿ{wH4 d%)Obu&F%7IkOc o8>)t9>$eoNp[@H5h+̓jE^Wm9P$3/BM9^΢rtF5=+}$BOz(yHV0J@_$"1; MH|C>?]F9*Ax?K诋:W 9||'Ou/: o[BxFj! HhApq˵pD2o:DE<-|v1nbTKg*ϳ},( ,hRHnI9LvD'Q?q v)PvJX>[E ~8C96Y% 8(O,ŀ6րsnaA-+~iVIP0Ejke*ESgP{h%*F ݍ:ZBEK)q`ǧ7ڪ 3yEw6·gyRh}^%Uy#AmZ^bR-M&.$[4;ŒE1 3qܔ!wq &>L,]\M=|%N/(FYMA̶.;#eu i!jsS&Aۆ\cJ0g[rx⽧<'6v\(hODEg8g-HpMeɇa#Bi;!ExtQ^dCU4}^:C;" õv'ҡ" L#;^Xúz T nhuA9𖨣6߃kcWkM jRĥ<)k]{乮" @ԩf'ܮ6'~q X,q{,J3 <ʽ:_,+;I  uq_чAkNx{SU]FT lg {<2rdJ Yfˆ,jm_$ikGVhBSPX%KH5w;^lז"էK60ҝuTy١ 6~;ȹd4.P~ӄ6wD)AU׽\bWmvVZ=*Pm`lj]-sZL /!*ACH wo2Ribm}Sx5* )?ɓĻ@yel3 9nd'#XdD?2[kPST ,/"9eF*ʽ'_a'Rk-y`GX`#%x" |PWʜm>gQ%rS ,9#eM2V/LVqZãq(sW|m`M Pa(f$oc|PWK#zы`v!Eehi _'4|%$*4ާZ 8*hzV {K/Nbjr,iyBI} T%h[;æ PkQسV!@:$Fd4 P\}Cd r~Zz+-?.ffykK:9:F@_H}[ |&vB/[ ײdU{[6o6,}XKnUr%6'M`>7"i?ƕqU#77!YFA;L|kц|b{ġIדB`+"4$3gl[UI6H~ z=ޡdxi.wI^UsDi{<)s6#ON}ޮDqu>= r!Э)on݅[c%˕(P|jVN= FC|EI/̶f$h]83mg #_yrkR~ QBV#LnX5pä`1eN4A*?ݨR3#C3!Ꝋ}+RQy ~ gG:-W7jGχJxLӻDD:V+mzL(SKz%)|XcNٗfk,,(y9$Dlǯ70eIӲvq*rZ l&;ʞ"ij4̀rЯ*;HSH_x{[nVXxۃPi Ii>eݠ^[s[Osʓ ~GxfSUlFO/0 ;#+hsFkMl5M(IL3E>g{Q.?}#|,ᵸ眶;3Xhx!:'=A-RTqĀz.s+T*h<`">xWpnPk`;70@Eە5%9 2:|EҏЮwrr"5F'}9m) qjMظpo2iH ^v'Fߔ&OUoiڝ!v]!{"$%DV>CKN.OdFA$R+$08Z)N:K7Jk29N~EZ(pNxRSTJ_7\DS$ȃ3m;>C,|YJroi۲bU O <|Б`8i`t`n6髃O,'Ui5$k 8A>±%Kb?|EFSNjfEPbc^yTQG{}NдR nۀ/cXVc7m#X#J5%ջae$Nӱ|C梻$^O[9k6v좖̍NH ±8!Y6^dJhD°|3}9 cx' 26Cl8ڲe?\|v{A6Df'@{*13OPN̩]yfucɢȹE,pu!5TǗ21ǃb{ޢplMSdo15ώcV^'╶6iW y*&.U C'|yG4ogɚ7`# ŏEڍ pT׵>.=aC6-F}3ke#!Is#0mY;z6"qԺ>~L>eVi 5AY ;J(Ȝv7^0CmԲ!)xU<0];Qr}m9BВnA즊(QDfx3_?؎m_x;ʲΙ{e+0Y 8>i*\FǴa(1֓X9bԊvl V(y!& orc$zke_cH=q(R o6>%lwnK M>MՕ"Bs/L6Uʖ)&'Q} ?.}QT^?/GOdkfO=3s%]WnXP ,L ~jL)_3]* H;yřs_"DDgl c]Z@piWtCr0ۓl*}z^jHeAK!wFG7$PSl?!3E` 20pWǛqF}C檹3,͟dz1S>wyNz >v+{HJƢbdm!G] OdLː2<9WMZI"t *@aR`eֻwEv~{>g?X eKMk Ho(; rjU$'wT߷4fVl onvQ$݆^__k \M48ƅj\Xփz!ow\w1KI3xGgY;ܦGC[#nY^:I/+]O @*>V&(_uZrЄ(!E.exL%r, ش|@τcw$U>uTu|msRI qc= {[Yt|p S(a-f7#O+$l%:Kd1X.D[r8!zkARayWr|9;rMa7Z`M6 AXR] ě0hT1i(>6ۭMU|S?<2(Q@*}oH\!x$f1h%ڄBaPD\{#,LAX8(o|GX㩣bn&HOcL@͠ͅcʂK7æ)GJ8M3jcAQ464+ \hGG7[EvxӢqzfGTݪjMCFÁnw*rn>UwX}ˎe# 4lA_:~? C{Z fMGSڤH 9Ds]g߽}̇ooǛ'E rӦWeҲr.=SS ҇-i2O@K.t..^K'wdTg"YݷgR{GDuI&| ǁ#tBRo|E24L.Zt3pQC()zry0B$\ː7zEA3Ms1A/TZaHrlz'~+2,yK-m'4tY32}ΡɁɂ7F˂A8|v%; ̮E>,%km .KgwCY #f a{Z 2-FǤWϒo3L uZ% _ךh _`O>Ѓ04$vz'yC k 5BMa43> c~DIy{u:'j, nP ip7 FNhJ]e9J-U'ZxYIJ)95{Za 6[yO˒[RP\52_|:^S Fa w[ ak-5ui2 0gU,Ng]Jr0i/Gq_$4wȟT~ncߐ %3<8:T#uVH\5rB;Pt+ M_X0 `r9PKQżZX\ct P::>\aiҡA ŻI\Y+0^X m~o=؁>c暷iAd篟Ψ4_!5i6 _c3/ Ol+ȐS|cc z$pS%0o`ӰeP;0|y4X,e{13 3i:QSOTtF>WSK|:>8 2c;w\vPy0; >S큺ylE$tk=@P1b0+6de^,ۃ.S<&r((>LKGQ1 Ľb{4FdGJٜ ҪD?RSJę>q S$]1k QY9C*$iblR&Xɠ-S1=pGKA?Xe*@~@͓9ZO)13z!D+րaSu']6 *n2u'4xڼpފ'wx s QZA i9`R}.d, kc6j/SS b 5n"C2V K$˳o$3~BPwKLD%e^VugUU貣X;pJ"?X?2Y8-aCa^r?rlC^ Ϊ_ Oٽfб47$}໸{2F=t<n55S7-CX~iBP5/е^pL[+9 ]vuQ6TRKJ>vÉ<>(J*i1EX+4T}0<'vOe4ӱo'[_Sicl"6Rq 1L iQxi&ML}\J.~J_yr:~KvheZ)O aEzYtK4F߱ EJ"[tXrfP{֘p&X#6zJ6Y Z:9 WE;{)t>Ib S-}4Fdpu5nN鮡Dp\6|Ty"rWkǃpf#>~s+ʎ =ƪVq6JUI6lU\55n&FZƕq eMnCx 1㷒Q𔲼,[Uy coQ<'u$2OeyiMüdXpn~9b% Q'VkzHޙX4ΆBUQ%T~mjXh rLyY.6b':j1ɮz/uhL$TO֮=MtslߘZ;}"03U&cݬ`tEv%$x1Y f0rD}}M[򝑏.ghyAҕ`xwh~X o ai.+ٌCYd/+1td7/nvyCANkofN/ͨJnL^5iƒK'_&*p̥o5xjNfUii ,)/D3x7`c,r_\Pyz*mG#&o߸zeg{CtgnTl0)K7cN$E:f5hn:].e6K+cV:݃oޝSV'[JE=GNC,|Wp6E.(9iӬfrC:DF:@Ll7  {5;Ekz+Ed WV;>|}% %v7yD٧ǻ&ו)exaFMb,t؉G?Ms2.MSA80zMБDo]jT\ b WcS4hoEj};Qu%[ .pTXN8UmsRdame;s_ap9k\6Xˑ!ȕU/-1kE^-#KⲸw9ԔÆ}f_S ۍX:D jtT(,Kav+a/~0FV\L5}tmTP3JpEǎvJA|g Y-%GZUhXV<8ƣm=oNlbT5,SUcex}a:]';sd=u[e5uhNJ5ˊCmF v84ptx-K!髴'1Zȳsg)azmѨ5 iyͅ"p#S6FXY=SX>͢Wv 윭<\gvX$ 5e/&&#}쏗( 2_"T0ق&Dx"%>ߖ~E ȵ=v9ypdfQ|R;\5 ~g+%/Sž3ԏѢ*=Q#nsB$Q5&PJG.`!ĕmjOg-%S l,H*‚edI)@{ic#Ꮐ(s(NIe/ttuP h|H je8Pv1^HZI;\bMErpw:J'I*F,d3#%)n}%ڮycXHRz{497׾rޠEzHN`1OV%`XK`)^%@sV-oʣ_cKarY_S4iWap(T&`T "D,߄dn[2W=BPjMeA3Acr}3[N$4H 3Jުjv@cGwtϭtZaGql 0Y &̐L[?齡pF v 37PW%eKڀ x l8)fČWAvx.8>aZ3b&.Y=#&i/Ef! ,.n1 eD/u+0jXq ׊K+Ef^Ze8<{ *] ?.ij$2} k|Urhr=x;_͹V)Z.WΨ͍9|_!CyPΎzxjgE]\miifOQRq#=oyX$/RM'W-k}RCzZDoClMϏZ6μwEfd+A (c /wKDKS:PDpI_dFDòP\q/ڦ v-[-?YM RMq$ l\ G _ҺU ьrFUlC]FaAUrKzd}3l$>H{VV??OsMRҬ o9H\[}ܚwl1oYD]c21M7ʯRu,,Ϗ4%yEMC8 @_Gi4$}1szPe<8d2rzw>& ͔eȼ() 2?/RXWB zMf;BSbzxy\A/UZDZ?>ۧ?,J!N p^@krQ81 Sk4᪌`/HW>xni*1*aGB{@Yh_ qǩNчܸ~Ȓ})N }Cui, l(uaSbvkcgQp㈁$ֈOo#8[r>F _<pbYE>') mlnLOo ڪo *|ިNZ>6""{ƺ9EZ> H"~]`L m[gٱ%Ab/tb-HunrS,-guѡA h , 8BT˨ĊƏ6;2&ۨ)+*A_'"EI X׭H3nEbs7r/X0%LW*/VF h'Ly쟲iozm(wST`Z;v6K:N' a)'<_ 8׼ݾ;cIŌ?99 M!ta,nK/$k#!\Ȏ~N`#Mzr]L6f4aoarՌ-hi9ija/Pi:pSa@"FjlZ\~ГP@H=C2 3&L:‰|#xYЊxwpf][CX J@}xժeez? }`bл(7]s PB!d}!d ?#.$9[]Nzr*S&xr!N1+~LKA?B\78J'J\ zTOʡ)(_:E+8n0 N/gLTmgΑ~ >WYq($@x!$jiq0v\a\:;3`東t3uq}[[M@">oܸ`2ރ,y,+tUSg[ypZ.*ڏepiT]!k8sbK|Z..g38_9cHh=e\ 4o*)"D4Xc=]g;=JU*PQ*[ٴ(ڤ]0rקɱ/HگrX!!z@.]PL#ĤZnej?M޾|0^a[Ȑ@+{PrNjmÕh:VcW⚽)2lޠ;v&6b)ѺDR%[=|2AH)-J_Ɔ͎'L .aFb3}j~ğ"iFj-L:B|xHCflLeN:i[aO _.MF N/Mdlj,7Ca*H@(R4A)GXp 3ճ7rǢJ0#?3YW}ަ:lL aa:yଢqz{ro W]ً8DDnjKUAvkzpoy˕x>Ef 1Vb Bא_R_2 ԧ=m#Q[ kS?+pG(.>chÕ1>Yԝs_d{ va)^6+9ct4ڭmvSBOMe?r>:ׂ|`%p)[:?#l4חck %(k ~ 9#$*' 2q 9F8l~7Q/RMҏBY>pm=$!N #J[[K:WZW@=ئ-˼x[Kx & 0n *QH]OgyT H֤8>nR#+9de|imu$=gN,W)=fn0]62Q =-6 ym'RXw(3Q'aH`vW&RlFQ)њR2MYu]Zل 禿u-DhKwEN4 (#ɟDMZfp w+.dǺ00DžsDlCk OxHE-yk2 (J4mq_ļ<kϹdpgU.vHJL4 ,\q OM6p8I9RיneVFv1f^YN_jm߁*l ,^ѓ ve\h ڎQ:nKZR^i!~"܋lg4:9ka#=|f=zSBEv正aq-k(Dͽs!=IcOdcj,z879EƁZ1-hGs GrGR;d^Z/P{KH<mi)tXyUS{gl]=8%̧#$?:G>.tKO7-d8 (ϸuK мV@LjVlNM^;)i4nTկb8&2s`mrPh% W|PMq .۳l䖕cާ=ZV7BPPlJ}3 @jߔ2zM-jj`̫~! g҉7#vցn4A j"G*DܮY"PA"v* ruAߌN?%4)O򧖵,( Wq[x_ 4{ bSh쬂̽OZWX6* T[ YiW%u(H&QoX4]OPgŶH\LC-`ص(^8c¶Ihe"_]zIY ^H)) i hxڶ!fT *;LXIS &0wLsc̪*DeeRsW&gݭFti2c3N݃7TJH UTԮcF: ?K?uOȷ.iW QNƓ5ɵ-YYZE9-!\fsV&-!mf#^Ed#ͽԈcs( q? 2fsM}ջ- 5aqZ0rt Oh2 )i'y;ͪ,uP qB / uUM2z\=FI,M h˧;N)&4=_ì"jPv~mb~]V6-mxG!ltP2pkm4^AX&4>PGحeЫ=lfeuLi紈LVL*h~o?! 1' m~R a&v1qpdB/R`;ɨpG tOG)hEP ! V.lө&-Kܗl)~+Oz~_{DZ*c uEԋwT!͢H8m]LMo1"5v:ou*~pmEeuǠUOT WUdf0)J½gMJL-UH,'[sŞj+AԛrrtBj=_.LdդpN 0C4ᲆëx~z0M%*?o=М%pV> J{ai $IFݗi` ҇2Ky wLIeVY#ƦK=Y5dKC LD@ ?P<[#cAlggޢ)soGZqkȘ$Zyh+H,up8ZCASzdkk'UqڍwKM8DxO>;:}6b7 gmpIZ({&D1DeF _kxCݯxK$ӎMq/U~dY_BFU 2P؍~KK:@б #⇶xH@A &7z._)K;1h$˓H_L>/!8. Nb6KFWMzv[uAi.7Q.0ҼQNZ2p}K=sJTE[OeTI9ݵAivI^0*ŀ $zi^u{5iP/9Άm4"4 ky1PXᎵR mbTibee.i85{445ߚ(=PB+0\0udlN Fr*<5^G_{]<-™Od?7NYڵ:*ʧk"SΙp H |N%3e%~{^y " 'i4?ڃ<|VQKp{M:ɰ_.+yt)AOZc&oZ8$q6ї|?p"J? zͣFê_)d̞G*b+OK :MO%O0ɠ[ Eo{k7[r<+ɬihs½ѸY҈:SBƽ'v,MA,N9?|٨k;ԑ]u&zC-vXFa)_Up1t & c?^0m dr{4!?K>6Eq%"| TJ*-rzJ4}~lHhe$OSy3۵`VmpiZspwCi} +q1?&M탈&`ް$r#3+fMXE"S{IXRglZ ɼYŏB-F%?e" mU$J`C/A겓)Hȁ A--6DL1y5\>S^[uXt:pMj׽>tZỢ*y#JRB Fkp{;3D!S,"8{by_~Tr ]ա!5ҫC,n\w{N_eK>n`jH2;Yw Tyn29VXZ4rF1r3boJl!4)(u[O르'l\NnQbG(=sPT E=XJsEb8D-X0KuJVq-S(^X\DZ6w[ULt%Nk|Ǽ0\Ҝ,V{KK`[a 9h4Bci+w@e.ঀ2ʞ[G/= .|8$삧Ȑe巈"Co><$+rYņjUG~]}y\5x3 !a!Y=%I-(zx¡%g{.M8Ixaީu_|̈'MM8''Lk'v )5tN8:MA>I 39K%5lǛm^TCq/ 7Sn1&C%%HUո2h.Ff=eP5a=0Wm[#4ҘP'G IfyQTOt[wȨsF7Z|N{P(.u@Lo7ڌ\HAi9CE|7Ig/eށ4cXRM|%aV=38Vt@" 䤲?d9ZbjG %Lv45lm4k·Ń+Ɋ~,뾭a$k.f^(]%l:e'. l<uaGlY#rb?W5*a|EHYz0Z>Fl [Ϧ vvH7AXI̺{PZ,эy.Uo5&1~u?,>KכIeNID*$PՐ( [E$ow8dR6Cy/3%C yuK\5{4tMϚU-vn`Bk>I홺c{pNI(—S⸉zMɖs_~z#a!bdloѰNIYp=kۢ{QhkDmi)cXӿO4ĔTд/kaFw/$_+灰5 0|RrIiKVkl>*gChе\Pbse9NTsx%izB=cTΛO+$1}à'(:C9lr)$gOn+z쩿ϑJziLջVOS-#,L^UB`:ݩx,+;\p?A/Zk#E3CEJLƮ$_qNJ+m=v~3{꪿z[g3}?Vު !jK{s]>Ǘ0CogJc4R:!(wESp GVk#'Adْ-o"dg?\+IS5N^u-Q~z* BB@%o!G%ELrlu4|_#Gkr6odQbnwaJ2ph:(dz 3 1։[8:+$]lnPc;uxy wd/"39'<#- ztLo"Ա{~B3)BO'*0N"=O >\@pؙA9ARy X]1CR+@﹙}Ó(RUi4;Q@Y˜ibZJEwaX韠 hl8e h(pɃQ '?ͪƙ#Nߤ ;%B-!j$-%,{r٠2T?bbWҨ4G֘~qPPE 8YS8ҡ;&n ҩTL'9^4X7 / }oB}D"|[1E Զf4a5dm(eR' Zt!p}pciJ١ ;pȪǻ"mY:mwQ䒻y`{Z7LguaZ0!"?pE'GNڸoa C]$P=m;#Z2!L滨qc$z3\ڹ 5:fd/v'a+pP*Lku=]qoNkҴ\ CX[EPms/ʰI)fZPԱբD?8IY2ܛL(m̧Fb [ƺitf|7=Mss>_k5 -OQ;PdX;Tbsخ RPg볣e(I" #"-fmna5(\`?'-됡zʋc+4h-ai[(N^uA-&eCuEiw Cm 0j_ujC3x"3yoStZAT~5iXH_ Ӭt13quY_ƹl9P&1*,99>''KtP/\nH_wy!+Riڸ=l񖘳6YV/G5d@> ~xfaG񗛘^IrChY/+$7eQ] J]r}I1|ٳJIƋo:^4f1RJ/KMC;(/W0ɁC j*|Y̗;%lIK,2e*~{X7{2.ڔG FmjlOf>yGzWT$jqD?"5D =yٌ5bZtx9^_FP ?M=쀵0kxBm#6 N%.P(gL.陨ijӎB+]ZD罪*eg7է# apI6[}lP '&}x*{f\ȎP]yPrDj\pjjجYūo r;vь I=AcV?~;&"_z V# Xڬvv}[4ыIۼ"S/}@7=h01ԩG1 x]:3Yx Ý8w]*[,sh4sGY'_B]06IԵ-'ɑ7z0(|X6`7-cSSej+*ѻ4U.}˧bׅכRZw̞x Kl&vtc$V** v C7x{.w^cY:8"3<Et)42CJ܉"X 3|-x~^MyqNS`-ԂUh!)ڬ*@}Cp ?>2ҀSRn-pϢ1[D^Tq#[]!ULhǹaZJo,LHbvRd~K9eb6*nY}$+g裗~ Ôjx:Z Df֢⦑̣,G! bm6|tG? pX&Ɍ wg(T ["i6$KP1%u{49!$oqaZ*\_ n=')g̞۱M6^πv~)`o(\La+S@֕[ D]FVD>Mo[6z)[9&fl0@_B ~I/-fPI(Q-*a$]^dV<K P ][ S^YX#4"G_ツXzb W@6=웖/]7.%֙}(#iΉ2ޣ eGjc/<ꏪ:w/^9A+|)Rϸߎ=Blw@7|CސTS$;ı)P7 ib@~[iPpyf|qYƛ%Q; fq5!`cį|H"mXb32t V[y,6bw6Qyj̫&HIsnʡ5)v99B\L !4x,{\b4c%$ آNǵQU G+h`?JWHq9&܋ዃP]N$i.Y|H6i6" }C F|7Hf b1Lq=pr QLjW|H条.3[}C O;Bʒ.,Ӣ 4_e7-N-X4@FlҴ_C5񤩄Oj`^^$+T) 3 n;8=kFpsϢ}ӗA8qdFgQaæq~A/ -7@:ׯ*S| Oʥ4fbYɇLvF5kNX֘>M*9xQMoJ֒@jA$&cRmV6x=Q@$>=rc9|ÀюphoxV&cPUيGڬq01R/cCND vGliнwRngk|(tU އ@>6BN#e8J>;W%sA 4mQ h(, ϻU&J:\A~ʬJOq p0Pj8P Dw߱m׭p5aAoÕß*Tzo!l Qpe5ămy ;m")"i5F_Ifv>&5'o"cv]\CZYec]ejݔLJ9϶8X @9~pGD} Ȅjs36f.rmWNC E5M!;Pa%5L*ա=T? E'cc̀" i۩Ts>b~u|Ji=0N=Xhm/ A "སS)eV T9E]߂״k05խAԤx\@ "k/,i؉fU"=Ij3?4{bAB]`!,\HR39fFN߅+;N:Gdc!H3ZM%Zkw*n&SS}hI_>2A#;u-ӕ=2DY9G% j o`|&y⑋e1rM>{bNrP>ک"7Z%b"YW< "=f0rr֤oߥe߀:]@dEex{+*\ֻk9m0"k%8}XVE t˖K_ܡvȾ"<pVD4W}b6(M[//&L/%̤Dɼr|. &y?˿knHb } ^U,n×Q퉆MXR/F28U~Ve7=LnQY T kW]FfA?*Rm:S`EԊF% Py;ȶyA3b 6Z06#QMxs:m>ȣ}ub$ZwJE1 WU$]qAsHu= k[-\ 2P0&~}& {|[SNw%T-As8L8YRTWπ8oۇ~PwCn.`K?_c$ [X0٪D%$٥_xe;:Spp{վm~ v)|1i!С0-i, Hpnw N= 3$bjգsTSx@P`F; (ŧowsKv+(ڲ٫bЂQ?NҽA?,c QuݠEJd[!Ahh.q4HrR c 쫊h*QiԫO4 6}yHC I+t_l.&HuW&o9k{BT.;TKsZlhY z4X+g 6$HvCDg{=yk:`cL ȗ0yPm+w{RJϑc!{ܩ3lmŁҷ<ڑL|R19>HP̞]ZSz\!iRK8]&j~8ZP6_̓9l 'SO}QɜSQ{@}#ͻ=%#6X[C) Ŀݣ m2-y:^aHu_6\O(%8-m=咆YЊ殹zKNC.a8 LmQo? ~~QQ\ŝ.|Q\-D=0)f"+@"=ϲU$ 2 giqA4}> ?~߱+n{z!Tbxeޒк1 Kyv% 7*CmA77ޠ)g{y=~G>HEI*??C~^[z 9nQ}U|Y$ӊq2ʏTܶY{%|jxStB988 }ueactb8k& ry}ױRdW:"ԜTJ̙aRZ,&{#t%}PSd0%72 :z[%2Jjso;$<<$(Ъh{ OvtJ{=Df4>eWQkW^ -nCOi>ժb>\mޞOUs$n ao藂 ws,=qu-WPq?MHb*]'XAee1X~W}e3V="f)Ci3.t:d:^huH < w1Gr:?0 ohhqncfg^੨[uI{ϤWBQRVJTR66AT:7[:*5k!}| IVA[4}yN4?sӦ@]Ob5HoLZzFSb*As?iޅs,RѸ1σxWV38Th!j'μUp\|=Zpr{*H j65םw` =?S=iBƗl8j?U ɂ#GH,|1uM*lf׻#l6;% yPK5?Xu)m8w{'$[l.dGrvKu{:h HPwH{Dy5f.,JZNnO增qU֟)hFboDODi` JMoգ=Nvy[߆3Aq*B֋c/ӪY>ꋐ?&Q'M6ڿnLb4;MŀoS\+x]%w3;NnWdxFmJByJLz0po" ڕ{}_:nwo  cF4Oj:5*B 5w[J\G}?,%n~ٽaR`U˴A̛7mTv}'V SK{Ա5ﰮJ=;*/%WLPPe2 4o1OC"[2jb]*@1O#L\\YGkڎݿ+q>0?sԕ`l^;m^ዄuaFq?^V%Pi`VBqE&%vȢ]@[2Ui楅_nd6 w(*ܛ? `_s <{\,k,ZL(!=Ǯ  gH~uDl]vu Ѹr.ppAkЅnN]o Tne)@ Va2l1q; :Mi*\x IB{ ~Nx+yapl?@ܫ;ss@maO_aU32Z=3uJHu+cw^ILhAd8SNܰsS6q@DrLDAg*o?`avص}4ʶU~ߎQ(haдXe@S>ѹiKx@һQN/cB)p.F g8R4 f}#wy%:*&#q^Pxi;s"睰mY߮~4}h{rgM1L1l axcc!;N̙syRBYT.{c!S[6nH*zaxÿz$> :7gӾF ;B#IDëQx@^+fKZSF>%Ȉd[oZl G2͘G iip@`[m3dޠ (oЎo7H|}\¤+r$= F ZoRWT#ýɌuߕ4T\i#{ЏXcݣڥjM(Ծ|+R=s6b%d*Ï%#’xiZ/FKYTJ\hAN`)0)7 -J!́(hLI`|Qb+t"dNn:9?_B! Y>"'XM$ I]f>*܀PHO,O.f:CNI= 5<Ta nV`7IܕM,[C[[3hzcnW[ \d[ էfGٗ:B1r&nb;?&V&H?җHrd";"Euqx3ϭh!|odgؚ`H&m#&_m]J} b44Mib??oVf_ ǘ9:bȋOue[즈 wD> K,%? 9."Υfn'tE+SU7{6xcٲ٩iu:Ilԁ*vӂ.[ Cyh] ]/L`a $Ƃdv-JFa1R tZA6YՏ-\|UvQH8 p)‰e PF VPOBA0s {ں[a^/8!5jf _ 8ŎticI(# n?Rx6 ,T,j!/aQ]A'.b M^X20 ewƅ{g/κ ygTUyK\Gm2DUidb`ē9sO2{1#w҆ߔ6ZHe}7~mfV.$FŮz/<9+~43mRq *ODY& FKpsGTg=U&[,ҴĨ9 uF/nF%g'2 oGgv7 ƒ h;s5SrR݀hyy_T|Pƥɪet] ݈ZېwXB[@NUir(hp¨>tD?љnk`"ݥ8j67{Gv=%2]TY=`܇|5zU2zf'+5Vr5+IUfxBߋtuL"9;ݓ&H2֌Q|6}\#jƌY1Œ|je_d4IH}r]u SiWټaW(NU03eeq3dʞT1*sIiOn/|5tT#%U\`ܻ]iuW|Mr'o޷O⧠ xɇR4WgsIvv {smC?bյzƾ^4kK?U= ecsNO=Kj]$ΆO>aq.n/Q|28QCcɖ,E Vg㑠΢PKF u731&ܥtlh'צ igK< _mPzk\ɑKS D=Q[?}/GYV&6ԤDX}\*mhwūO^cxLM@R"+;+B#v*bt$i"UxŽhJt_m̒-E|5j k4u\)ߏ9Av8l>=Z^̋ Uw1*8Iu><*ݣs?.&;@v/n}eMhQӘV&*R3VT@ph7F-<;SG-aU4qf~nlf]3Nqg9)Nd@w~_#O'JzZC1G^/E2#`YDD{Ȧ MBlMRSePix,MWFY(L 8'֪)S c˕g_.a ԫWŷ۳⦝e97YEء|>*'UzAzd,ꗢfB~C֯ZU7r@a7x#^~J |2o}W0s}Ёxo hռe΅, p҂JL};-ԑ#l;u A nPdzIIA&< -~oWt,)FdPR^5:}!_\l %#2j}`AO=SikV λ.T1InkWLGgZZ}/}^VYXX6vۗ㉺,xPD9u:CRBY16I@BO`9 &!/fC܉knr _<si]!e7S? z C`eŃaILnz WiFG'Q91=Wu,$Be aSXն[KE'oY0Y+v;zm঻QjKdT"J tnwK4]FӾ8׏]WBWT_y|`\ ~n%&VfPa>wJΡ`K c"籠Jrcsm}jb$D3MׄHw+{Jse>cZFI]M(< zة9d4R-ww..k({\1TK7-(˞6(.;ʿ,9- hעPO#P'녽m12<%BO;|,N9ak[ g-!89HAI4Btٓ#0ds}&֔ysˏn644u,a:IA1ATB.2rs6l[Xѭ8,(5\=kx{2<cf2)ᣴQ(>EIF8S8`ζP(`#Db v&nc[E_jnSMjrdd1[Q+|l, wg@6G*Ҏsk"h۸hSJob{\µg)79 TX&<b |b*Oȓ=zf$AWkϹDf mD_IrD[{3YAޑrQgR.h59.HfߦbK?Bm~WKg)ݏ{v8BDZ*j;JA$k3XFێv%|3pU*}!KV[/!F]q:j/5ٕ%f?[7$ɍ7Ðm'V'͌=UN߾x|QC39TscВfGn 7.p=Y95K)HmvDJ `RblRSNl1k7|E׾ K-M#f~C )Ӑmt1F)\1T*.i Y @wЮbք?;j#&Sdy;;qi wgx9Ŗ'2 0^Q~8ݛ44%VZ[nɬ]] K)maGQ7Qqgz*,o^FP,|ԺQ`jưe{;VQ6 6XdPrv92Y?jDBq†4X@ ;+i!GvҜfNcV R|`gc;A?hoT.}gJG7RL@+ݱnd&]yXDeѷnA^m~NUq#Rt7B6x!?B SI8nQuIR1x*Oqij&+͐m􆎕UE !c5nP6j Hjf=.Xuoe6l+|sN>\!b>(T)nlqGrR-!h1CG ⊮_ N BA61iMM6cV2/dl}o+#.u$3`Ц0Zė_CGR8b,QhPZL@nN;5Yw_::rZ\ArO[fUs<7E; ^Ŷ#J#QpR sgj(d,'a/cHWZ >Q藏_y?*ҸB6wmXLő?16h^Fw0ʮLZɛ&4F#(|h WU,d(,2LUQ6)(RqQ[qqըX?^vϪN^/7rOd\|?OeoR6񳑡ylf{6D}HÝHwc}).˼9Qio.lUI+ܘ3^ ؊.|rRqﭗ[g Oɂex_}tLSt6w!e[uFs9OVDp~Bw2(>x.Ē:^&8GMԪ&,|[lR(I~'upؒ3YH#mg3Lxv,>+6F⼄0C\}6?id˜am^] Nޣz1wt 5,.HG+hcCbJ7Qs6Xlr\ap&:}3+I A9$Rkâ$~ֻ=7ql{*XN/$AJ{2+`+ I(bbΰ~;^ YyenOh9*z0fF(r2tXe'Dc\cqviN(z&wh}af5SDR9]W8E|D~/(gj-if GEp?WJWz WdDahP]NJޣ;/۷KGκR# .s?d{| H@0ƶN$w=HPl/r{, @ e6, O >`a)3oEfTpFZh !.zY;j!>W8CA"l߫:%Ghʈ7K>0U奆Eۃ~4*ENYN8M$KLlDmUR0ߩP_0>=Ƀ^`c%PN"/Mcdgfd;=XnC@a@pw%1Mkli|ӤY'Aar7'1n5wҫKw6AhСhVе]V]Jt325ijq E,ʠ,*SZ~ɫI;yTXE-a')SXO 261]5amv,Qĸ˴RЂjLQO ,N^(#6D&2lƬХ8Qil{%@_o^{+5ij; w1Z;+}c OW뇿="@Rx%\mij.F,G:"DuHDc$=EBtnND2>BD 4|uޑI% 1YX6s7%}ƍp*IJiSMm*0McTa K!\*{LL޷cѐP7ھ1ZTļ'd`r%#vwIn@0_NFue7qNAxg1LԪ$hky[1$?@ fȚ>24kR\VI)NS")P^?ڦXW2>R-M|ޥI/-ZXMO&v]SYdQN\IKAKx,*aV<|}j:B\[6dqUjۉ0q"S%o!.z a=4L5q 0;#!izvoW{'g9J_,;(-*r[1c~iTߡ;"~٘e q_H1vg#q4X7]~mbJR!T<oYS-h);A xtOq\~UD*-}h. Y<ꟻ0׾dEmNn.OטWH 7L^O{#4`;u,x;$"sSAϕyr\1gxeM 9գSWs\<>(>ff@hאhR'wh,N.߼ԗMP!:*|P٨3`K|/} |ݩ~F [Կ@7%{_޿؟i"ko=G,!]2cЭrT& 5?c{Ԟ E_>p&l Gp1',_G%2,ʦk%hZx1^x!sV8dm[ktKϭFz~5 KgDOy-+li=?U?Т+H ?H:w}qc-Bݣڧt$ZvR!4U5ql~wHw?<ɴ֝S]oO6[ %= mD(hO0L9pkW3m&Lڻ yW_I;ć [Z1ZEM:X{`JYp`.:;jV <y`:<[mw^!r5 .|5D%?xJRDE5ϿAUE>FΛrPrt3=X 3heytK"|;rFLz>x d=քX܍jZ[ iF"4ʇW7O3 Bz"<$(XVmtnjg|C`mjs6EEk[RUJ*l $ߵXW.Q7Żө8͛IUq+0Lm/NË0h^JOP_'%<"AfVǔ}GlnTy9?.a=Ȳ=bC2ŠR&P`rG2Re!R'R"}}1"޸gp@Fp1wV3=ŔS:h>eD4|[ {f^hMÙ͚TQx)9ʌ3Y`tvn))YlfJa J}3O'xxIz ĉq@؂ pfҫkwi獄>+=׿?'X(11ķqt R@VJvf)\Et4I3$': |4Ƭ uco0 Su>M~`L 0#JCEF9 5D˅>WNDɆ *J{Q 6w.鬥"z8E<޷x7ZFIcY,ClX9Q}# +=˲OM7p}%!<}n=ճ>am$ez쁧Ii\AH/$"W4xz~tkuEfmf~[3&UӀQ QՈ41?q{}#4lBK֜UԌ8dGFq}臋A'$X6G$/Wn{GS $=/-oӉ<ߍ~Iz-{8S:WsvP1nXw,f0|)RiWiB<1Q7ywKA#@^D_2'?ߔDM~kR%rԘ*甭w] >SǾJ@WKgIŸS8wNK 4z?&P 3MLD _׍j)BMzp78~jMq <61e;IyA%W._4#V&^'i(kMSeݩ1TjDRh RtkwKE**֗ۘpQ׶ou0X3D@R ]3ə0ow0U'G܇o+jwp v9;S}} Ŧ [٠ ޑnJR,х(>G)q6 __:Ud!Ghj쉞̮ aT3NwRFX5+W0$zMD]Y B23ܾ7짵9 q^ 3ڛ"XrH=~L+lf&vkzxgJ XKK,;, 'u< CE|*)ˏ5J?fbƂ{"H*hEZ{M3= U٫E"A;b$e,ʑƐFa"ʢC~ 31C= .}>l(&W];F B*d@<\ҭyVQ_{vXo*YfBbZoFѕ;@89y)Ex,BG뗌=QP\}S"K@':%I+A{u˜ <13?@j! ?+@;#r8iUi-P )L(l3f%wR~׼k`Oޭ}䒐?J _ͤDNu8liJWkWҩ\/9یh/Xg6}s57C[D_oTf>LF/*zq;(t?ȑ"0 4 &c/_DNjC~51ь-DD۝Xa{LLlH/qLrIq#N>D6> `#zO4VH[ۆAdm(n5ϕ{)>nӼYr2nao?;4D"t@R0BQ> 鋾a.ei wGUh%(:v2XE(90 .xQԣ{+}ȥZsLn4ތ_>mR1C=кHvG?t]bås]I4(l//"9xx2=c#M"*~?;]&tIidgNa9D: ;]҃3D"CrgqX 7sYۍIKU3KIev ch jA|)S IJ#$ak!=i FMzLp5PbB:8!j "y M'wnu9LsT~}Sޟ9vN+;!O/ֵDG @I!K]ُCk_v8[$yyr*H{(FmCO`*I^E``)@$F Mh YOPaH{ V+?]>ӗ& cjG3z]m0L塬64-kډye[-ܫh&xr м!|&~T?/1:ӑކOk!YIaZ3xq4o !qׁWu!!|D z8DYheo ݡ:ofYRs3hM{P%B1THK{i[pŌH>"H;2TsX`.5k%N -+F.tBblS2VYa1=3OQxN#hQ"'`|5IdBD'&R哝#/HqݶɊ?}+7w(Oj1Ӌ X2*8]O3ʍ?"G5H]jVo8OM2la+@#q>|L;xP*>4q#@D=t*`MV\C~%ob+5 T)(?;TN+d*b#'ҋ<ꚥ_ h]#a .VWZ%҇!/xIM,u *,eqAt_`_/#r܋| (?#݁u9A`BVwb jKݰϤ@zGJ>rӧXҍKfDxfـ0$EB\?Udہ3qsaw!Ծ}EsjEX:'o XUvĭcU1tf +Kdwy;M 5KJv]% LĨuY+³xj++6$52?/*ÄV]=pvկ$ O챞.|2m?N@2: '2כu![Rb:$JqI/[AmVM"K:}E޼֦/hgUDZ%FrItP1i(jgiuQf0[yd1b]d.AoӠ8?º`ʅT #:Ú-r&ܮb ާM̟׸paLF qp|m 7_;ֶ; \Kn;t=j QfDf&`J!,5 N!1MZߢz|i.nEǩS]X6N!u4Xq)N]QW<@8僀jtۖF{t?yy*'XsxR`>/9*Ӓ.^@+(ߥy"f)b+gATwSB:Nw6'hL. D*B:ZkaIH߭Yl1@8n>Ba$ķClHN&!}cCyirmj,FB(];Q[¤Nئ6#<=h[͍R\F`5?%6%OK-k*`k`>(nUPFKne=31CE {t.A[+sEt<=UuuE G,-g3Dh4:)%Rp9cqAaCp:B7[XPq [ J^!/#-^Œs*NH(H4i97!{kl?x.,R\qŋBLhX$o:BED 6N 39wQߙ&*> Wfd78|l9if/$PΥJtxPޤ؍*MJi g <sa3W1u^^eJ"rpЧABV\2ߝdF(""dHh^ٴD`$t" |^߳߳')_D#`CX<(a,l^mD[0򏍞glyA0#풀,;7)¨Ras5"Oޥ 7xk %^4"~ALKĵ(lQPBrTfc-W) (듟LW(TVw{L~Z-4ǐCb 4$˭!VG׸` vL|UZ ⿢FG:U0\U59$U\xDyE& RM=泠ZP;oajȕj@Qk(( MaLu]-#-YL^8m]9P%`o=oF){abG a;NS/՚vZ%k׃F,EJX߆v9[bA]oYWVkC쾒$;=v<-{*E,eT2z, C;)A Wʁ6ПF{afz &5W1Ms̽%,tI=.+ q~ܳ(}5iyKɹ狎SSiE<6J|e[_+%YZnmf9 ~fʑ/sDyzHc>1D,?u5'نLT^?zv }_^?̡4e֜U'2CMAs+P*ou ! ǻ ~rߨnER [R ZWLg:NaFC*lC R RWy?M#,f)Mi^J "i;stj&c rZz[&B]vLJ(BMwq!EݾuM UI+н'x΍PR\ mWhih_hs`-㹺 e}lwP(Ġr &D`#p"fJp{ې'Yn a8ːrG p? p]]HY}QղZWr.T>QjkM(\mR(rW X<ZP[2F;]D}fs5gx6EF\%h|to35J1,^돘^d;yҩJq $Ү EmŕWP]wXܳ t_OcSW!B=%n롰oM؝CG-ͻF^6rf̎l H-k& Ҧ3LdRsT¸Jt[U QsBeю׭ Sh0 #:q'c1sʘ{h/&KPގD\Rf]«zvUKaz0#z$gѿ u&ّe͛bNڄ/͐WW~VO ^׎I(X~wtVT\ rxaK~DN1j#)\dq}3쇋.`X]w$3E0T.p#B,]Dɗ$HDs,0#+mEh*AºGpjL%I+s WW^C*I!9 AUOsH? lCVA S53 9( ԣ <[Ӣ+ Oβ9vR>Li mV\ϱ({`yݾ%ĕ%sό0T_'em0[RA@JP$ӟaB|f>5n#|uԆ/3CdQ3 iĦ#DN:=Yy+>H±4{rCXz&-m`*S*:UrP%A ke㊆碙=Bv%w~GOgd *F|>|p1dūQ2dS"L0ybV ="cBF~(~6ur9KSO诮*|O+DHYގ[@R\8CH@;WH{-Yo OIE~dnf+5)1}y5_#Zs㮒:)D"PSwL%-`:0nZx 5W*?i(QĬ͍dP5qy(Nz9kάNA.SᏃԭσf a cӤQ'=^ӌQlҐt͉;(y29ys.@8ߚDP]|G~=!1 o\Ppߔ~7@3ot$( h4sE2imW&PJ zשe`+J<wLBb B&:ow_kԒ H(,γ|=N +(5,)Q8'0l"z-eR/܆ͫ^RL`tVv \Z#QvjoHZZ${* +@YsQyaRߤ|C gO񢙻*L%NF0~Nq)lGa{DRR8ѓ"Q6m,:2ItF8|[@Tj65QH%t{vL{`XI4Dқa&bˈtM+u7I2 A r Ō)%Z&ȭfIS(}ErD I6Xs.{;#B{p9ӪH4_'iÉ,3*t9i~<+ڸobnE3Uѯj l~L 0뇉c~S1u9m7RZZ V U"lth]$ [{ ;GOxlI@1R1Af#;_ iq4ܐ U~G/]"Z>8sS4Q+ 2R " 0kKoY+hs-̑ %8Ad!u͡]1BԂUB;Uخn#P Q/6d(jp0˖meD&FGFc\xA秊>*$E"]o!;۷ç4V2JcKH- !\o)0[h HyW]G*y1tN!|̜ݨ+K~Eܠ2̘p".TQ̓ыFFQFK4"19A`)5MmceOF 6hq қJu RtaCʸ'Lxhu ʃq(M0,tr60;5^doeRQ+9ZT,`( PtnQxw 6!or3<Ǒ<4_\O`2M#[,b9MQ(Mxs(رĦ`$,|XPf%Ȫȴr4 =7-GP2K=QM ̋2FLaA7 Ps”`[Q&-Afцn>rhfbU?L%HkĂB+'JuԎWvC"݆(ro0S iW\%U Wt`6-k<E,? F|=GI OKdn ufʠ[ (ь0R|oQ&a.||aҩ۪R {! Aꎉ ]U`bl,NJ704@Gyzlچ { 8;񬶇~%>H]0ޑ.3ԮvE:pxjCv a򇬠JMX OÑՁ$s ukw,ٿMYrL׊;NNLnhŔQs0*wWٗvPx.6[lqy 3]B1!}3avpFpr7x}F&[F`fOZi'g]'T cep_H$~{,gzZ;CqgFkhV )Gwt*\Gp,L9[zKXY]sfTD}Ιu' >~Z@1L㩹j۴U{Y&Q5 AJǼJgd~;"ekGf͈I0 UHTJwrr;'8Nb1JI>ao|ǎ Nȍ$f'g?eM~/>!r$_(/xyDKF2((s8+"9?2mOsk6fyz@?~ѷWD4!fp~d- O?$Cr i77wm~"y0ZWf,cؓz[ Bco_VSV߫j9袮nҨn\9rwry>6x|Od~ٚ/8bס{`r{Vyw/ >{&L UWyS򢙤'*"vدˏQٛhYSF.fIShE 7%j/F.3>0Q)ǸkWMkRҭJv[9$a%9Jnp}ót$wLE1&ėr:Y@ma әwDzsR:+N{NZn dmΛPv9n׳[. pTrڰߞo"P#JRQ 粽zEٽBsPAc" xAeqÍ~2N`b^3J p!CnD8"+-lYH0hg|( u%|˸o ,DtZ34YZⓍyz Y40F hFa]\Q1dXi }kjHzs2'KYAt xxoA 669" sl]kj;#y22ի?=X7+FL^$zVGl{L!Gxgm.Qp}ohC(,`_@}fݠF"Tp`i^AFI&0(ɧ@棽^[$MLt,lp[ qMyclL]Xϓ<ezմؒH")al|C!3Vِ{+M">US\081R+?-|rxU*xN8>QTS677bչǿL !O#hXjcT"d(E@?mid9-a,e,Qt\乥_EU3Nv[ !tȭ Bcs}3oe^9՟<V)**I򦤺x"G]~us@g cp]@֍x=f4޵SG]~ۤvg$9{:Z}k|\>=G}nu6ph:]8! dVOs5g=љ'-ׂ}V~/H(nk/5ʃe&IӣؤD2h o{ wGȟtKjHKr#sXY/7r({7~ӈ H{RkЯmAjuU`i§%UUܼs/1B[Ā$ϳ:=Y$dTSqg֍!0͹?ڳtpo/"ي΃xl83~m$+{ߊLmF^|D&؆+Er₃`^7rWtĢnj2>-rPk,ض\rgh*&#r_/AA*}jMt4a2Z{hHNvx%yPkA]TKFD^~<,E(dzk)z#E7rKNݘ<ݻε CGVlP91t4`"zeȞcu3#i:8ɪeR[e03i:¥|#ԭBE 4! BۋX!\م,ZPZSeej,]cP.DGӝ>G)Ңd}PP:z'"L6>{Tĺ ʿu١_#u0 (&<ޑNMaLeh[٨Xȼќ^x׆Lvȇ"L|4>6u~FB-lQ͸ۖy7P85sZan0,CADk˹>Cć^-U"9%6=xQj^۞ -=;O> \LjU}d1@&NK"=)_1Eguٖj UmX1'RG 3]fRldf#rX  xl%`DSjWwZ';0/x$gBiJ:3غ O T(z ޟ]p'Y'nuO/s@*\M-:xozߎA:b|ēkÝM5;V⡊4a3['(}-l0qbs]{#(mJn!F ψf4\N·ty+.zD{PVmsK:(CmOM"]hv552OW̓bVn|e-;{>0?f#_C#)W"tTAo7^F<tg#Is_T0`_sOԤU9+L.ˤ9Whi 3N"6 Dފv}*eL9;W!d7C ~s5=.g8#wfJZd¡͋$ѩz YQ v&:ո.eַ7 :V'INdkٖ瞖@A' -q@)kmL\+Y\^Vi(N,$Q#g@,b,Slw>M [m^R;PށP\'njLn9L+5wa0MM mݾZ[cqr"ܯ'+)drz tgs[=-@]"H*ěS%ơ%KwFtrΔtuVaM(i~ ctF> hg>g2fh[:luˌa:*=I!TK{jЕJˡL$ǜ?|P`7Wͱ넸Nfm- 8ڧWLY9=TV HxTFW{fn X3($q.9dJk1-\KHe;̐h5?EjMy6 1f#cXVKc ២#b1L~}5V>Ӝo8w J1p q׍OtC"rFs.pd*ZWLZ`p#M<)#ZQ*'*sQ^R>u+'kIT ǕH%%> xޝ 9D߬@oR?%owcFt>>EEF=j3\6miܠ=$12:9s `\fxLjJتh]Hy'tCUnt-niތm}znq~ajkbJ8Kti@ēh]EmّXV\tbFR-_<&<9k%/ɡHTI=8ށC|X7<`8MZ ojwoj`/lX>X%${ɨ> 1FK) G3 I-YC$#LEBCѲw5[Ͳ`~xšh&Yulh-؎SD_nSjX}ip(ϚO*'2b{ǵ1yGvfuv7;8"yF Qߜ3Bk7fwZx?pη.9+: O:EIMpz'XX޳{pi"Ƒg4.u>kV*=s7hU&L ,ȢY*VwE_YFxKtky8 LV?ف}!3 ,+`C 9"8"è]BI;?qlg[>%-ݪϯ7Q6)E ]" (d}R|XfKW_ڒ5BB]-/ߺE6;^^Jmi(o/d@~+`,Zcl]8y9I2%ɵڍB^еKO ">P&(z4u'k\ۙa)jiǞyj=6ҳr:[v]ՐbUM1`+i:)0xb)Rݡ8I .)e(&>a{xk| %̙2/6ah>qH:= ٤ Ogd`O-hu l"A=.bMdw8,f==t $8'C^:Udv$?aAPkt95%Ӳ'>ݎTˊi-NzS*V΄y,.C'b;ZP\y:6]`9M+rz <(<%6_ϵ-9[qBqjh̲AzdkNc{7 }S0ڪ FUACCPC7{e ͮך \CHc)Y OSjqt-ťN)OAa?\6R߿rl fB]<ڃց?Ɓޮ$Rhv3Jׄ@[][f.ECK$ƖX"8}zN@gs#Ez L0euG+ w=kx"aY~-aX{Q0s?Hv__VdP L`bC ǡ||FoCmgh!f5fX[B$,R2*VDA 3(GH*=b4er6 7 oցǚIRcV++7> ۺ~' J}V <'iB ɇ/-`>vj^57a l2f︸TW.5GmWJv74J|.d[߯}90''5&0(k3}GiWw7As1ٗs]!!@oMPG bV'xIxﲅ8ͣP+RnQ(L59e1ѓG b |yѝYode/vnQ[oҎ] Sk 5L<:KD]@(.D,lO7e7r+ 9m f&hhz!Yh@6W/9ַyGzw .VY0Xm/SJ`x |R`î Β͢ϹOȪ7ϗ}"!r񔿿ƭR^*rVp5/%,.3X`dm6!h<;t#mf4;B,=gFyӿ]0Q*D\vk` Jzm(8D=pe»v}J(CN1[s w=ƃ|o=z(&A.,o~-8i>yF*e#nN[Y/_ q Rm6<ʃ>O%n,[cwx!0#UY;$=` xswY;~]1G6Pdf 1 a -kkbjU]H ;J=)g׹ $WЀrYo]Sӻ ].BLRA;m/d S/ˁP]3I=3A%q2Y$I'K1:5XL`{^3V_cW v""ozA ("G"~gsbźaˮVid$0ی{l}R"j7|HA,jRYq͚XjWS+ ъQqQtYbmxu} /S'+S\ҝ!oV¿)&|5˶}no?"p# 2ij 'D4!nY_wI7(ϴF vX>Kzw1oKpnHDzѷņ)|0o d;mi1k"֖o3}_Z@g vV{5`9BHMdz ~UQxw?ԛ8푲 ^y=4۝%'4]h,HQ N%Y5f%H>Qd9Y R0PCW[ģ`){?>`7ߣAۑwow!.R3%;)շPB+::1i p0[}P{I>FwUUת=RIz5"k4ע@V^^ǩ!pnduMQ gC+ a`?nd+b *(-}4PGGq.6\P=Z3rzo;Ce)>-1ȾE7ۅ\]Qw\:4DeZJin߶**=&؉YO|ؠ o֟ehq+Y/+4>( "iBӜ D)%iMVti7KomZż ʗ)*SaH}m=ȸF5>Y.G$=?<^2\Gx?)dGz4Sgj҅^ˠyVy;eg&@HWYaYa)6 vst;C8TO8*,dC;Э$rE %V QZ$r*dYHRk:iR/bBʫLpyBѱ2ᑁJQ;DZYQA9B646[JrV@YÈ u>͞,x@e_2%=9RVǴMT+D=MhJljuS˛%W:?"m eH!Bߍ Ggmm#JM8T%e7z1:?9$hTmW#h chwr$(4R@F7WsS5%Nd", 4`՜ _ Qk"} &w$F]/qf̠!rTP:LΤ#oR(J!X d=ˠDI,ZP @Rճҹ^ W=< RX_QG x{K%%\-UN?ĺ.ISR1*!h07R9/Gb'9K4ݟ/-Xnұ{)OtN.ϛFL IMM)`M,/MV0QP~?KZb9Dnh#(=lYDHh#j O$£5-Ï5xd?>,Et6EϜEb0kˆ+^t$LG`0TvY:%XG:ZFAj]KP`\Ƣ0`uwOߢlt";eZ F?$+-$n52 ~cKy2beDt5&l:'+x'皾,LRcm!2h@TW{F{R-,402saA ?os ۡkڪ-K(51KEݧ@奃Dfte O^%1? qTkPJe/֥P7\ࣛՋ"/E"`k1?1˟Nd w7, 9M?`Kv Mgo9` h*QӲS= "&1FĬpVHR1Xh͖d_߬޻5t $Q Ng1Rg+iUy|rW1Gũh ouPvZJ9JmD=EGHo@s͌bd>AV9`WAVm}'iT0|Z4=#Gݘ|~zJWmQ4֙띨M^uRF^ "t`EHX%1SƷ|kRWV1 OQ*+DuѨAe oo,¨-_;4֯a,C=si;]P<]wu.3@jzMOT"P _SkySR9 V}h}r5ռ83ܜp!m?T1T z.8D~V5 Vq~c?;)s:qy4\.'p9(sa1@Iab0-!yΝHiB!Ds ٷ.e;'uM1n5]<}_iOsl^u/Y~DU UQjo투J@LOCl&y+S@<\G\žSk(XhinKC&~s^co&eJvH]ҍ%#Ta088E1jsʙB1Ș+h&ujoZ4`6T\ywdNdH ^E f@c mOLCƭiHcNxf`\4&f҄a+mv~_.x#f^%RdžAt=&3 &~b-a-DW/YϋEI_[me^Hm"1uzU))cw6 z9TȊx'@Xn= 3^Gqn=8*jlnl%NjG3[Z B՝Uf: HD/5S8FQ`*69h*~l@Umr֔n]tU41 &vjo^yzyi{߸x=&6 <!R K7Rs S}$q>7L\Ĥ W *-~Fے*FN}@_O8;x#8uIGO܏Y)A16p6eJDO8|ރ4 `glCmɍ;|~?uJLwMzG: Pvm.ݒ%)Py( -{Dͱ_E `U̢d-vI |79|ރJg"hF M`{Ÿ_ܥ+E]a@S_+/1ф SV=hMGtmϋ^D^m+.}J5(#* ?lbx#9ﶁ. [wnH)bѫD=vrʁ6%6]%T5li{/[h샤KWJ4qB e% 3\/$s%ͮ2o$?]l޵U>oH5'-B\Ӿ]I!l:G{t{INf+E)>a~*pN1ttcO:$ENf [!1EX07JVR7g re9߬20݋-<k].P{fs<פ ~yf`8oT),>lzӯ UⵆQi9tLUM&1~!JhˈW#ybuiJNFv?w'Sv# cO/ iRam8jq0/MoӉBg[{=%_Veq~5'Ϯj?V78F =ybLlI}̨AD &l$(@8CP-r t+'ua@$Y.p缊P9|}!I x3Y2¬+-ha/.$fg&˦6f$)Qr;S~ %^A ɮ\LVƳҊIJϫhP5Ua\B7u2w%+L-UH⦎Q'acA?W5Ŀ$]@>- txaM&`C[(!,R㴸k9|98;~YKrT U5⤓8b%4!#UN3QAuќN8d 9ߝ^L7Tr-nBT, =cp (z|{y |P% m 6͎ԟ`L؇%o">7戅NQiF@s~# Ue3V#P$L12}GfqܐmIcTk?F@NQLZ+tl\KjH_bT8#2`R#YuR/fٯLn}~ ͊l -WZOރ狷cI;)"^i+ ^ Q>ʍ++;zO@ٖIIҠ.{ȟh Z! QX9v+(6@0F?ڬ^e ®5ag= %!sk-GDJP9}>U{ Y%dǠ`_OKWoYM^%[=R9T`Uj8+mw^ o_lM>-7b󨗖jmee 8Cx%TSG 2PЩ;o81K=#DI>Q]W rw>пW~,LBu}DE>3rcXll=YUFvuRw nԽTKr<QA  D'J.< yeQά(J0kZ5 QE vr4e>{jo2هjs/RC>5d0pl-.w8e)(&3yئf7؆6w]7M[oRU DB>xͥ\73m×b#º 3'#'s2=e?1KMr\[iᥤT}W|}5\K! ɞ4!~VcZ'XI:n$BC||-8;!,I fؚ̻b LOx;>/chX=bWԖkXP$SoԱ،:]㭡8RͥD̙ݑ8/ +fQB{(@?G^m\pldF엣]nzW_r& - %5 R>ڑm֮TERx#A_| X? -SOʭJc=Wll3OW .UUV^6 !ەQ f7eM'R د"onc0 K( vb-#ai#}-ZlcN ~wٚ 9ǮyNSoC7sCWuRҸc8C|xA9x:#42x @2oPnlsg[ @mU$9u3Xf|:(i⎊pIkt4Bs~nel@>O=:xxNאEBG۵6M/ ]{P'g=(}@`L-XcleDO@ BU/{%/J ?0rZlv# ^Y UF9Zq S3o_!jH>X.WH֍UUխ?`[1RD?}7%r(6ԅﮮk,hΗpCWgUO"YN dΔuc蚶!"MŇgY&џ5Y>Ny 4]{j[.$4[Mczep(IgKmSe|!GLlR2fP>y;QD$lG`-&kxu w0G xny֕ġ3ZY(#>M\DS[ ǛniTs݊jx17O.DC/D ;HS].vA 4Lyִ3%he4Ur!nãф/0:Ռ/ѧIs]87Λ=E2PIw[~h F60̼4a^.[n,)Wq*vKM=@S%f}E -/0+{+f5g!Ft4nc}WU;Nak1wW++z<T+Gs _qxsy ^ J(y=u-۟M[Gj&Fvmyv~}k's 9xXձG:7QӭVd]8֚F &S"Ub::~)ysDmTQHLlȡf^_P=5x{k1L߈`@,pف R]<| f I oh$&aԌ62\YL Z'^tkͳx7Sh=CK:)aX:^T0|*X2 {kKK*],3Wom~6Opg)CDL^2$d/-4"3S?2>gpO1^A^~!7>~?#xU4ZPW:E8L6gxQ;5*%cᏝuŊ,>~B"ySbO0v꫖V|ߏ E5?vר<$pχ"1@Q7A#:F<.N 9nIw +)(M$}_@񶼟 ￥N&yZ~_C80 32o0 ^PRVlXu?~+F:Uߛ꣹Br_cE<9qVxiu "pc&Fu {%Ce!I yڊwH&0mI!(q N "pgQl.?qeh2w)U`Hf߈:p.,kݤ-d1T+G% jz:S馒S ץ N%dƽN=*Zy0NA P!Up3,gV.s' Eء. Ox^>54JAeV|*}R,}mȺb.4*!cд2杻dpFh1P̈M9<8aV@GiS4),D8837>Qm~$5rbcMA ?8KMIS}"DŽ>bsh`cCGcu>/R%$ݨ!U8zf BB0Cn!elfZ*`QdNf+uS Q1< وKWE/N߸1푀n͡ļY̽[kV$,odmes}?Tam|ͨ)[L%[eعvБj.=lJ$P\(Q㹖m|ؾ=%='a3\L9|$U6V aRhs> >P"Q< GTSH%#h((l~!eCfG~p,!Dvc$JO[?a]aGŅuK4v AeWW:|S|!1_|Oe!tA4iy{D-=2p42~WL0Ȓ4S)l y'=s+6i)u`z9ggKήa}_,v0 $X+c˰X]DJM[ Yp?]d M^ 7K<|Hש ƃmzkYH(':24Aj7=T~0IIg 2"B'} :-[l7Y;S؏%Ȇ>KďԬ xԡf ) uS:D xc?ߒG9Om>Խt ¤a8w9k|7V4fP`|M^=ʘdUuKzS'` . XJ1eƓ? `4&ɛdfXoC+"7 %R1HcQp}Xz.6`Gg oui%?gpaເ ӊie Vy^]!=9iJ*߼&Uó&'97[^7P"sC:* ::BrT[1nK/Ϋh~*HV]ߚK$)TM=o@ʯ%\fN{b(5 dBC&WwgFJn9~9b4ĥYMd SCLe%(΅,-w4MZʽW<^ň!{;ɳ(5E헮W @ WknnBS.$z '䢃Naf;9Ѩem 83Xr42۰$a"Qh-Ѻ}3걢i*#|\Dq8Tw6 \Lc3SDCхT~gt"<.÷ V Deelo)*3.OXLxR o8lN;I8nrgfJqAJ՜piׂ;Jz-#!s="X8`ȡF3W( 4[ORٷD vL F*@aEX(-nC ߖ$5?.51Z97i#`ve<%6lK0YQPmR%(羽S צdgL""Mg,f@}'2G3W:0Nw ,?"-4eʔGS;T+ShЮn81VÕ̋cy2Pw +H }p  |" SZEaXa:% od)ۊtߌ`q_T-g!܆HR`nF)6I!9d#uA<쑖Q&2)OKVK#>zM[Fłк]-Ů($dB+,?;> ?7.wtq~,TIY]%Yea:*.,#%Igz~uq6tueѓg܀2XBT7yG.2`ȓx^5 -[,AV̑ۺKAJ+kd83el <h}`+A 'vXk **g# w*o0ΟRGz,8^f2<"Fб?L.p`O[HYKqks),2F,z>mluFNX)+4m憎  ĚSi3PCa D 1Y*- Άj#cw=0E7]lsbƴfWƅ}c (aN\0 (/8LB\߫AVRnj5Ƿ8VCCp/L\B&~# F]Td2I.a냃DFu{O9$,j<믭F~uBj<:9Ô|Jx:F򮪋Wm?2g՞C %Twqޔ0O$!x/i❜I}o3Z?uTeVOZ-f6ֿc]gƚĺ)،G)g [Iq4Wm>y\bu{2I5dJ%U {Po2 [/%a8SA9w@-CVYм tB8*Rbi{k@;~gҀx̍jm].4'>gr¬HС]b۸ rD6i_T7J3 KbVagд+GFf"zz.q5}i'Hsoeњ(>6༸,a逘T&R5H?6wBAS` TpG S@-ͣ= Hz^-Aco>k=ҙ0Eev"xav>eyc+TIWu oᑻF8>fC pҌ .0)!.@< w;uz{~&z t>Nx0ǐɚ5J2"Ilk2 bgB58NUFu 4(Xqzݘ.&uH1Å6wԸ9?҄kNsi LCсwQXS_-Ne!¼dTuw+blO=g'&ͻd'Ĥ>a \Q ؼӜ4㐉vPlTkjɾ(€nkH*dIw9B܀#Oے[t-͢AUI;:uH|>jXf9IjVH1[,\^OIVLy~Ls1߽gd}i_ o?ޥURZ;K?+kYh쿅j'*uq/W-|3nzKwgWNe XSZ)jn0|i);U'ܣ;uo"]ݬ -p3XdjEh ̩(РP"-Dចx04 Bn?Sg9hL1Tw?rb{bPQ0JNڑ *E t(79Hl͓a0?EQfBaJ)Y؉G< 'sܡvSdb.|$KuIJ@K>' VS~cDX Ey_] |N9B XEBM$n@N\ ؠ%3eԏWB-뻅GZBt 1mc S+Α[Olo.$$z u9莛}+뷜pۀdӷ|WUVp fB꜠*ܑM7:|jNKTSJ"ƮD+>0Cƚ4oL9ƱAK0Q"r]GDDQk~pi#pa 1Kj)zkE*\ˎ9d[>JoRM{G5B=1䊙&+c<яʸ#7A@ǺgE*xd=hjR‰H 4pXt.o%DNPP9? gLڰ,_c T@0 (UWt^MlS-1ZGA >r 8ç J-q~72=%W۱r?kӚZĮO}7S@@5R^ĝ%t"X(N&9KY=UyosGi|>fd 0:rqî` OWjm/i `N16}wWwv?-JJM}O=b NPM0:-Bwhw(ԊR(갠 `֒}(7^MwhXhqBxÆ$b^wv KI]SHo΂\@zy ̃xzPw]W}Ug/Qě1a˦ Tg3#i CG+Rq>o AbnXpmV&~zxA>=q6lRp |Irq%m&Fvƍ跭?3^9}(6d!Tm2@I.{+J`{qlU:>G[M-TYFңD\4KaTXu5tQ2 G3;4__h ޽wm"{g,dk]~;{QGW'ΏA0 D j=3Y:;?I?JkPڌ%1(p<X?qV ހga(3riͅBV&Yyz*[OYm {E%: AE_+4?c`qvPǦ28OZ u+s^oLnbॳ4-w:vN$h%8`h;nl9[\J: fFV:;OEVnx!6r3}|Sm!kt6nurguT+@_x!CW$nt8mىhý *CFέG8ai[px,#^*n70!D LXk; ޘ牊4<_ս vȋI`ɋ×cS ;WHc<?%Nyw-&5AZjƷCD1bUw3,ݠQӝooL2+ń[ϋةOLR"ڄ2);6I7`.ƛYqhK+uX]qzB C߀XI/tC/qe_u4ߵ `ܔZݶo+L b^[ Y#Q xkØL!kd`Bi⶝=VH0A0ԲYUf=;:'a皅c8=W~17Yeh$F Q¾UEX>ʪTw1H=/-9W=}nyɷJ!M QJ겈*C{iRb`dlvأ#T Bٲ?Srf5SU%u^ xl^ړn ؔx(&|@Jy1 kf62xfL_E:=]=ERȒ+19r?xD_)Vշ& |`}mYC!ZlMyvo- E|Hq ֒5 JsSj.K-c( @H<6"YutBǹg;umd;tdUDipzz!.OģC0 i8#p.mp,>ٿBAgJByh"7^jЊe"A}ޠx.( xÙ$D)|TUfM~j \yZЖwftK!Xb6`҈Ӡ3kXP @Ed*JiHG~1movK,^bh2Ԁf):: ΍a%"T\ߋ˔%)`:@J!:vj'< lP!c."8Egy- ⛋?fYqKEc?NV̕>+-? ˌTةGD~VK;e Р[MD6r5qi6[ U %1z9OִʓCW^.5wu\&e~{K8HrƂ4鶎B-%ך(U=o'b1dpӧrUA"jÕNHL %ԪuM'h=;Wń4+b&Ux{la I^9#pl'*K["N ZpER/o;Q-/3҄idITp+-E'w:ie{\mՄтo >vcuvS$SlM_쐨,ߩl/K))Єoi.Sg GP+FfU#KYئ͗ גHG="uQsn()%H4wJ}L/FӓTZ׻ˈjg%Ն21-@T #8_mM-~?Y>U@?_ukh4*̤@LtC0pw-QMzJvwIz ԭ~ܶ{vDdhꈯ %_C,wm ͘sHdÈY&{tpnLkug'd`桙\ sXyb.*>O%f Z`*m]%SrWF·yiji dQGU0X{(^w9M,&^ֶH_{\wR4widpa`KHZK_M0yx7mT&핚|sq>+?ϻjYNdR6WE$XD)ͬgGT![ p#бfl`ã}GH˜pf#7&SzihGTo2&Qȵv[$`fwM, RntPrD8ޅ j5n0%ҡ%uS}A7DI`W\cjo(" ߰0]B_+\TXQ==mhW?کR z'CM{֒uR[ zY؀o*6i@[{':0%1(IjoqEJP } Nؿ|an꒍PԿZh(Awt@@:\?[dvӍ"'e@IysbK&x.Ծq$WIog͵2 S5Rɉ/qJ7 h+Y#8h(n\kg|%&uNuZUXLB:>JsE[* zEy '| P-%Jɦ @ڬw_)C1ݭ3E5+N+!_'bb?f(# #;ɽ yV\Zw}KPΠM캔E1i_ #xie#?#\ caAX,_ 'pԓc?& 5j B(I.=V,P/tyۤ_=:nZCynff-5f}ž\yDa~CIX#&ov 7!I+<)7 xiAHj<?V/XI}xBn+v5=-oC[l =#cƳҊI5{ʌq.ڜY/S5uLzGemU45*dWpͫ5db "f@rb WUO^D!Jy 'I5%sH˅n+0H )Bm3Ɠ.=0^k~R۬~5DW=dy 4҆I[5 'r}l?/iN-Dɘѷ3 AxX wh^O cb (C:NY2ė}\sY/q6+HE{ʤ^y`e|K7wjk@S4z!Sv.z&3& Bz`S lf:؀RV 1X*;lX(R&8MPSLF)%Id髦m[_;ccZez78KF4U9K)XpQֺL3֡pSEd#Sj+AR+sv*w:Fe*xTLIws j7:ΠNެ٤=x@H@VQfLkce.?X9-`;ݍr|C@HnE6dI( hU*>Z(DW]s*}N9=iHS\!%+8467guZ)^EPں#oPTL+kM\zĈNm9q19Q6+N@z:J_^(@=vU~M$*GQ}FdM*tTVWD20S U'pԊjIEM {~hw0i aR_(Ew3ɘ=.gk_: _MkDE]PϏrׂOjQMѪ-=~B(1@^mxuu0?>?RI.v"vgqzœ ;08m|a`?c'opLc6z}VnyE_Xg;Pp-ew5œOuX{v9fe] e[gZtE*0q Kr F|&YVYk ;Y|CG{Xq"ZuXXv2%32jRj\_N4+_Gl$%tBFn"FIr[<xk(%1l_ P$Mh ͢+5,u&i`ۯ} |Ͱ'"M?oI)U~a1gӑ>밷Q@]ӟl'`$ GFǡ/d'ؗOkjşTMEBJdLg rN3uQVL_>Tp]~v *+jv6+F0h9ն0*4"J!Pܻ3A̷ZD!3l@U϶rۄ]/r$V*AClY#w櫍N-2nA0OȒ,B[d"&0a%MNYw7' L i0[w+l(NX nC.ܽ7N {e t^jܧ$ T,d2EI>oƥ[]Iya^HvWaSxJk/[I\\g7?G>ݟ16'X /YCjfĴed_ݥdBΈ7O[ REiX#A| y,,(=͌th1q:p9=x[ԏX:ۍY>!t& ~_o!j2slP?IZ#>gu< +\@{_>{Tinw?/7; NZpl;R+)Od[T߳B^zjg/;`8L!Ӛ#Z74NܩٔQ pg}HzT';7>Y%7DءWL:_l|$ ][-GducO74@-,Gr ֣5B*ZVSSmYs 2-2yI|UGdF* ;ae5,nWq7 !ѫ4+/=tGF\z f-vJ3' Mӹڥ1YOvoG+qJj?4ղ@pnVHG"QwJ si%up2=%D FX>и4@_'.ħ$Miy2i'66͈{R6Foh[(p90D.-4 7 >E8P,l>_?ƃd< [>ڸiB%n$&U՞ 07=8!+G!(ȩV,ru0L:Ԣ}ьW*W2f}ͻ=B@5Ct. 8F(/?wKh%K-I{Jn۔Ln kyy<UNŸ#{Ԟg(1S׸D0"UJڦLV{C;J ͉f1EyZ-+-Ŗ%ip0rא[_H%pqpIɚ׏. NnU[b-Bkcu73+{T;Q{e8$>/$?[5b{au,$qCk c2}TzT1W({ 3AGa S6/5UtQ]t9.Ь>? ?wHx.e.nhUmȢؿ9)2P:!wt{[|EnZV;XӢ K5x(hR$'-g1 5Qi^fmt*^GrO[K_2C:bWf~WΪJ HDIR֦Qm^ #<04`1q[܁ݝ4M>-9ExeE|ATY9umJ;LǨIF[KDw4Zd,h"}W[R^e׸ГAC-I4Ech͙/WFSnk{^4&(U'@o2@+~tzcwܚfgSXY1S&lLx?Qj'H$mL9k1=;}|gA3F,kN/"zƘ7ko؋ YO5ndkEpcRAO4Ȝ!_,3clZ?etޠ H k9^K$e 4meOҭ:4'|*Veh3?!@e(4.< 2ʆ%ȏ:b_K9L~,)qulXVjtxMlmpM@5%l "Uo9a!_ Ul5kE7OMf˜nq>п3EV7_y>%STmFi#KX@(0m?"GF(zRG)W@!1>}.f<*čDfqwvk|^\SNOstˆEn< ͻ_}9\EWK2H$Κ[(S+ X t )r0vqfgj*{*R~\}WMZV9U6E4[_)dG=5o^ `5gDGQDa16<&nK1ݣ , 70QhUU jwwfա΀,Au7XY GfǚZ;Caq$&nKâX[%jrbO3zg@|mrRtV)ˋ8y9Ɩ4LbcR"{jB4_zѳ ,$LJkVN$(b= H֛g6ղT2O>z Hk+X2pi]b"*a[?̪)ԱЍ2U&B!Qd^;rdpBk)+BJNeQJgF9H"+ 2QH/wԼ?"䡔J;7=*ooadoVj<F I,^L +;}uBa YB/,\ ~twC'07J;Y%yfLC`fJN\V7NcxS!⹰uN2EEty- P$fcԨ{ k:}k޻ 6Qleֺ̳?U"=.s;ZJ}82AJ5# ]DxXmtZF_HULٷ+p''.otԔDŽyah͊R.Tھ5nik ~wa[/P"UeaHvO$e%Ւ8IDSL Db7xD/^JGw+&ĤZB3o;BC6FY96uzCZ $`F"dEdT3> ˂F»yDOLe-%>JGQTD3@4\ ǃh ͢x7޸> ^%p0]U$c/VR ʤ9y bPf48||ܤGJm_FŎU̞H(=MD;Ƽ7YJ+V mSL! [F9xڲ sY1|&q1۠.b,xMWz6l.fR;RAf͡;-3=pl}3d}Ue -~gepwh1q@ tiILbQ+֔i$Cw3+@{\'iMYJR ڋ&PZ:Ӯ_tmR}a 4|.OH 闁Zebz .g)rpmz P+A*oGPn`n~ z#&Pm~=j[߯7{hf)oyaWlTИS" XCtT&_S-Cز;H䃋EZ%̏S[T5&_E&QGya,(A ̿L;ƻ.wUehvoUVεr ܌:  YOD̖uИ ©_#LJtXa|}KZ6Dd:;7ݒ_/wgF,ufNu_$B'Ǣ Z YZ