knot-devel-3.0.4-bp153.1.48 >  A `!M@eeeQ G#65w'tQ\,iЋC3lu1TiJP>;1]ˡ 3N˷إ›i+.%Bk-^jK~&`K{_zg9R/n6W mI1[*a}$⺾XU ʮrAF6^MϷ }} P{AC;V*.-t1tEs9rMϧ2ʼ.ϕŇM17376d8014f9936e86f391e2d3449f554e6bb73d65be9b8e2cc872075e4a4dcfe2747c9dfbaa1ee8b3cfde2280ae2f167e4c6458+,`!M@eeeAHSpb7e"ۄ|sac 7"WdjZB JVsn/.RoGOw'WɋVCT&mJ//1љ /6Q 6TDŽV֧J]8i$B7gb''"4wJng~:fFZٍ:Qu]pxJ j ~ౖl )."i~27rMDCvˈ!0>p>?d   G  )AGPNN $N N N N  NDNNPpN8(8,9,:"%,FuGuNHvNIx NXxpYx\xN]yN^| b~c~de!f$l&u8NvpwNxNy, zTdhnCknot-devel3.0.4bp153.1.48Development files for the knot librariesKnot DNS is a high-performance authoritative DNS server implementation. Development files for knot.`s390zp21SUSE Linux Enterprise 15 SP3openSUSEGPL-3.0+https://bugs.opensuse.orgDevelopment/Libraries/C and C++http://www.knot-dns.cz/linuxs390xEr %~ QzR c ^ J 0&'K@ , tgj  GJ& r  >"" +:)AA큤A큤A큤A큤A큤A큤A큤A큤A큤``````````````````````````````````````````````````````````````````````````````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.so.8.0.0libknot.so.11.0.0libzscanner.so.3.0.0rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootknot-3.0.4-bp153.1.48.src.rpmknot-develknot-devel(s390-64)pkgconfig(knotd)pkgconfig(libdnssec)pkgconfig(libknot)pkgconfig(libzscanner)@@ @    /usr/bin/pkg-configknotpkgconfig(gnutls)pkgconfig(libdnssec)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.43.33.0.43.0.4-14.6.0-14.0-15.2-14.14.1`_@____^@@^@@^@@^@]\HW@\3?@\*[@[@[ݍ[IZ@Z@ZWQYYYXWDB@W1@VwV@V@V@V@VTQ@VCU6@U6@U@U&iU&iTTq@T@T@Tk4Michal Hrusecky Michal Hrusecky pgajdos@suse.comMichal Hrusecky Marcus Rueckert Marcus Rueckert Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky pgajdos@suse.comMarcus Rueckert Marcus Rueckert Petr Gajdos Marcus Rueckert Marcus Rueckert Marcus Rueckert mrueckert@suse.dekbabioch@suse.commrueckert@suse.dei@marguerite.sumrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.detchvatal@suse.comondrej@sury.orgondrej@sury.orgpgajdos@suse.com- version update to 3.0.4, see: https://www.knot-dns.cz/2021-01-20-version-304.html- add incompatibility warning about 1.6.X version when updateing - rename back to knot- version update to 3.0.3- version update to 2.9.7, see: https://www.knot-dns.cz/2020-08-31-version-296.html https://www.knot-dns.cz/2020-10-09-version-297.html - obsolete only pre-2.0 version- remove rosedb conditional as lmdb is required in general now- replace conflicts with Provides/Obsoletes- fix dependency: python-Sphinx -> python3-Sphinx- use upstream example config file with correct syntax- version update to 2.9.5 - Bugfixes - Old ZSK can be withdrawn too early during a ZSK rollover if maximum zone TTL is computed automatically - Server responds SERVFAIL to ANY queries on empty non-terminal nodes - Improvements - Also module onlinesign returns minimized responses to ANY queries - Linking against libcap-ng can be disabled via a configure option- version update to 2.9.4 see NEWS- version update to 2.9.2 see NEWS- update to 2.7.6 - Improvements - Zone status also shows when the zone load is scheduled - Server workers status also shows background workers utilization - Default control timeout for knotc was increased to 10 seconds - Pkg-config files contain auxiliary variable with library filename - Bugfixes - Configuration commit or server reload can drop some pending zone events - Nonempty zone journal is created even though it's disabled [#635] - Zone is completely re-signed during empty dynamic update processing - Server can crash when storing a big zone difference to the journal - Failed to link on FreeBSD 12 with Clang- update to 2.7.5 - Features: - Keymgr supports NSEC3 salt handling - Improvements: - Zone history in journal is dropped apon AXFR-like zone update - Libdnssec is no longer linked against libm #628 - Libdnssec is explicitly linked against libpthread if PKCS #11 enabled #629 - Better support for libknot packaging in Python - Manually generated KSK is 'ready' by default - Kdig supports '+timeout' as an alias for '+time' - Kdig supports '+nocomments' option - Kdig no longer prints empty lines between retries - Kdig returns failure if operations not successfully resolved [#632] - Fixed repeating of the 'KSK submission, waiting for confirmation' log - Various improvements in documentation, Dockerfile, and tests - Bugfixes: - Knotc fails to unset huge configuration section - Kjournalprint sometimes fails to display zone journal content - Improper timing of ZSK removal during ZSK rollover - Missing UTC time zone indication in the 'iso' keymgr list output - A race condition in the online signing module- update to 2.7.4 Features: - -------- - Added SNI configuration for TLS in kdig (Thanks to Alexander Schultz) Improvements: - ------------ - Added warning log when DNSSEC events not successfully scheduled - New semantic check on timer values in keymgr - DS query no longer asks other addresses if got a negative answer - Reintroduced 'rollover' configuration option for CDS/CDNSKEY publication - Extended logging for zone loading - Various documentation improvements Bugfixes: - -------- - Failed to import module configuration #613 - Improper Cflags value in libknot.pc if built with embedded LMDB #615 - IXFR doesn't fall back to AXFR if malformed reply - DNSSEC events not correctly scheduled for empty zone updates - During algorithm rollover old keys get removed before DS TTL expires #617 - Maximum zone's RRSIG TTL not considered during algorithm rollover #620- seems we no longer need jansson- limit geoip support to opensuse- update to 2.7.3 - Features: - New queryacl module for query access control - Configurable answer rrset rotation #612 - Configurable NSEC bitmap in online signing - Improvements: - Better error logging for KASP DB operations #601 - Some documentation improvements - Bugfixes: - Keymgr "list" output doesn't show key size for ECDSA algorithms #602 - Failed to link statically with embedded LMDB - Configuration commit causes zone reload for all zones - The statistics module overlooks TSIG record in a request - Improper processing of an AXFR-style-IXFR response consisting of one-record messages - Race condition in online signing during key rollover #600 - Server can crash if geoip module is enabled in the geo mode - changes from 2.7.2 - Improvements: - Keymgr list command displays also key size - Kjournalprint displays total occupied size in the debug mode - Server doesn't stop if failed to load a shared module from the module directory - Libraries libcap-ng, pthread, and dl are linked selectively if needed - Bugfixes: - Sometimes incorrect result from dnssec_nsec_bitmap_contains (libdnssec) - Server can crash when loading zone file difference and zone-in-journal is set - Incorrect treatment of specific queries in the module RRL - Failed to link module Cookies as a shared library - changes from 2.7.1 - Improvements: - Added zone wire size information to zone loading log message - Added debug log message for each unsuccessful remote address operation - Various improvements for packaging - Bugfixes: - Incompatible handling of RRSIG TTL value when creating a DNS message - Incorrect RRSIG TTL value in zone differences and knotc zone operation outputs - Default configure prefix is ignored - changes from 2.7.0 - Features: - New DNS Cookies module and related '+cookie' kdig option - New module for response tailoring according to client's subnet or geographic location - General EDNS Client Subnet support in the server - OSS-Fuzz integration (Thanks to Jonathan Foote) - New '+ednsopt' kdig option (Thanks to Jan Včelák) - Online Signing support for automatic key rollover - Non-normal file (e.g. pipe) loading support in zscanner #542 - Automatic SOA serial incrementation if non-empty zone difference - New zone file load option for ignoring zone file's SOA serial - New build-time option for alternative malloc specification - Structured logging for DNSSEC key submission event - Empty QNAME support in kdig - Improvements: - Various library and server optimizations - Reduced memory consumption of outgoing IXFR processing - Linux capabilities use overhaul #546 (Thanks to Robert Edmonds) - Online Signing properly signs delegations and CNAME records - CDS/CDNSKEY rrset is signed with KSK instead of ZSK - DNSSEC-related records are ignored when loading zone difference with signing enabled - Minimum allowed RSA key length was increased to 1024 - Bugfixes: - Possible uninitialized address buffer use in zscanner - Possible index overflow during multiline record parsing in zscanner - kdig +tls sometimes consumes 100 % CPU #561 - Single-Type Signing doesn't work with single ZSK key #566 - Zone not flushed after re-signing during zone load #594 - Server crashes when committing empty zone transaction - Incoming IXFR with on-slave signing sometimes leads to memory corruption #595 - Compatibility: - Removed obsolete RRL configuration - Removed obsolete module names 'mod-online-sign' and 'mod-synth-record' - Removed obsolete 'ixfr-from-differences' configuration option - Removed old journal migration - Removed module rosedb - changes from 2.6.9 - Improvements: - Added zone wire size to zone loading log message - Added debug log message for each unsuccessful remote address operation - Bugfixes: - Zone not flushed after re-signing during zone load #594 - Server crashes when committing empty zone transaction - Incoming IXFR with on-slave signing sometimes leads to memory corruption #595 - packaging changes: - enabled geoip module: new BR: pkgconfig(libmaxminddb) - enabled cookies module - enabled queryacl module- update to 2.6.8 - Features: - New 'import-pkcs11' command in keymgr - Improvements: - Unixtime serial policy mimics Bind – increment if lower #593 - Bugfixes: - Creeping memory consuption upon server reload #584 - Kdig incorrectly detects QNAME if 'notify' is a prefix - Server crashes when zone sign fails #587 - CSK->KZSK rollover retires CSK early #588 - Server crashes when zone expires during outgoing multi-message transfer - Kjournalprint doesn't convert zone name argument to lower-case - Cannot switch to a previously used ksk-shared dnssec policy [#589] - update to 2.6.7 - Features: - Added 'dateserial' (YYYYMMDDnn) serial policy configuration (Thanks to Wolfgang Jung) - Improvements: - Trailing data indication from the packet parser (libknot) - Better configuration check for a problematical option combination - Bugfixes: - Incomplete configuration option item name check - Possible buffer overflow in 'knot_dname_to_str' (libknot) - Module dnsproxy doesn't preserve letter case of QNAME - Module dnsproxy duplicates OPT and TSIG in the non-fallback mode- Update to 2.6.6 - Features: - New EDNS option counters in the statistics module - New '+orphan' filter for the 'zone-purge' operation - Improvements: - Reduced memory consuption of disabled statistics metrics - Some spelling fixes (Thanks to Daniel Kahn Gillmor) - Server no longer fails to start if MODULE_DIR doesn't exist - Configuration include doesn't fail if empty wildcard match - Added a configuration check for a problematical option combination - Bugfixes: - NSEC3 chain not re-created when SOA minimum TTL changed - Failed to start server if no template is configured - Possibly incorrect SOA serial upon changed zone reload with DNSSEC signing - Inaccurate outgoing zone transfer size in the log message - Invalid dname compression if empty question section - Missing EDNS in EMALF responses- update to 2.6.5 - Features: - New 'zone-notify' command in knotc - Kdig uses '@server' as a hostname for TLS authenticaion if '+tls-ca' is set - Improvements: - Better heap memory trimming for zone operations - Added proper polling for TLS operations in kdig - Configuration export uses stdout as a default output - Simplified detection of atomic operations - Added '--disable-modules' configure option - Small documentation updates - Bugfixes: - Zone retransfer doesn't work well if more masters configured - Kdig can leak or double free memory in corner cases - Inconsistent error outputs from dynamic configuration operations- update to 2.6.4 see /usr/share/doc/packages/knot2/NEWS- fix tmpfiles scriptlet- package /var/lib/knot - run tmpfiles scriptlet during install- update to 2.5.3 see /usr/share/doc/packages/knot2/NEWS - use libidn2 on TW and 42.3 - following modules stay static: - dnsproxy - onlinesign - moved modules to shared building: - dnstap - noudp - rosedb - rrl - stats - synthrecord - whoami- update to 2.4.1 see /usr/share/doc/packages/knot2/NEWS- update to 2.2.1 - Bugfixes: - Fix separate logging of server and zone events - Fix concurrent zone file flushing with many zones - Fix possible server crash with empty hostname on OpenWRT - Fix control timeout parsing in knotc - Fix "Environment maxreaders limit reached" error in knotc - Don't apply journal changes on modified zone file - Remove broken LTO option from configure script - Enable multiple zone names completion in interactive knotc - Set the TC flag in a response if a glue doesn't fit the response - Disallow server reload when there is an active configuration transaction - Improvements: - Distinguish unavailable zones from zones with zero serial in log messages - Log warning and error messages to standard error output in all utilities - Document tested PKCS #11 devices - Extended Python configuration interface- update to 2.2.0 - Bugfixes: - Fix build dependencies on FreeBSD - Fix query/response message type setting in dnstap module - Fix remote address retrieval from dnstap capture in kdig - Fix global modules execution for queries hitting existing zones - Fix execution of semantic checks after an IXFR transfer - Fix PKCS#11 support detection at build time - Fix kdig failure when the first AXFR message contains just the SOA record - Exclude non-authoritative types from NSEC/NSEC3 bitmap at a delegation - Mark PKCS#11 generated keys as sensitive (required by Luna SA) - Fix error when removing the only zone from the server - Don't abort knotc transaction when some check fails - Features: - URI and CAA resource record types support - RRL client address based white list - knotc interactive mode - Improvements: - Consistent IXFR error messages - Various fixes for better compatibility with PKCS#11 devices - Various keymgr user interface improvements - Better zone event scheduler performance with many zones - New server control interface - kdig uses local resolver if resolv.conf is empty - new BR libedit-devel for the interactive mode- update to 2.1.1 - Bugfixes: - DNSSEC: Allow import of duplicate private key into the KASP - DNSSEC: Avoid duplicate NSEC for Wildcard No Data answer - Fix server crash when an incomming transfer is in progress and reload is issued - Fix socket polling when configured with many interfaces and threads - Fix compilation against Nettle 3.2 - Improvements: - Select correct source address for UDP messages recieved on ANY address - Extend documentation of knotc commands - drop knot-2.1.0_pkcs11_check.patch- enable libcap-ng- fix configure check for pkcs11 support: adds knot-2.1.0_pkcs11_check.patch- fix soversions- update to 2.1.0 - Features: - Per-thread UDP socket binding using SO_REUSEPORT on Linux - Support for dynamic configuration database - DNSSEC: Support for cryptographic tokens via PKCS #11 interface - DNSSEC: Experimental support for online signing - Improvements: - Support for zone file name patterns - Configurable location of zone timer database - Non-blocking network operations and better timeout handling - Caching of Critical configuration values for better performance - Logging of ACL failures - RRL: Add rate-limit-slip zero support to drop all responses - RRL: Document behavior for different rate-limit-slip options - kdig: Warning instead of error on TSIG validation failure - Cleanup of support libraries interfaces (libknot, libzscanner, libdnssec) - Remove possibly insecure server control over a network socket - Remove implementation limit for the number of network interfaces - Bugfixes: - synth-record module: Fix application of default configuration options - TSIG: Allow compressed TSIG name when forwarding DDNS updates - Schedule zone bootstrap after slave zone fails to load from disk - avoid activating the intree copy of lmdb- update to 2.0.2 - Out-of-bound read in packet parser for malformed NAPTR records (LibFuzzer)- split out shared libraries, knot-resolver uses some of them and atm we are forced to install the whole knot2 package.- lmdb seems no longer optional- create a new branch for knot 2.x starting with 2.0.1 - Bugfixes: - Do not reload expired zones on 'knotc reload' and server startup - Fix rare race-condition in event scheduling causing delayed event execution - Fix skipping of non-authoritative nodes in NSEC proofs - Fix TC flag setting in RRL slipped answers - Disable domain name compression for root label - Log via journald only when running under systemd - Fix CNAME following when quering for NSEC RR type - Fix refreshing of DNSSEC signatures for zone keys - Fix binding an unavailable IPv6 address on Linux (IP_FREEBIND) - Fix infinite loop in knotc zonestatus and memstats - Fix memory leak in configuration on server shutdown - Fix broken dnsproxy module - Fix DNSSEC KASP timestamps parsing in strict POSIX environment - fix multi value parsing on big-endian - Adapt to Nettle 3 API break causing base64 decoding failures on big-endian - Features: - Add 'keymgr zone key ds' to show key's DS record - Add 'keymgr tsig generate' to generate TSIG keys - Add query module scoping to process either all queries or zone queries only - Add support for file name globbing in config file includes - Add 'request-edns-option' config option to add custom EDNS0 option into server initiated queries - Improvements: - Send minimal responses (remove NS from Authority section for NOERROR) - Update persistent timers only on shutdown for better performance - Allow change of RR TTL over DDNS - Documentation fixes, updates, and improvements in formatting - Install yparser and zscanner header files - Improve lookup of libsystemd build dependencies - Fix compilation warnings in endian conversion functions on OpenBSD - changes in knot 2.0.0 - Bugfixes: - Fix lost NOTIFY message if received during zone transfer - Disable fast zone parser when compiled in Clang (workaround for Clang bug) - kdig: Record correct dnstap SocketProtocol when retrying over TCP - kdig: Hide TSIG section with +noall - Do not set AA flag for AXFR/IXFR queries - Features: - DNSSEC: separate library, switch to GnuTLS, new utilities - DNSSEC: basic KASP support (generate initial keys, ZSK rollover) - Configuration: New text format in YAML, binary store in LMDB - Zone parser: Split long TXT/SPF strings into multiple strings - kdig: Add generic dump style option (+generic) - Try all master servers in multi-master environment - Improved remotes and ACLs (multiple addresses, multiple keys) - Basic support for zone file patterns (%s to substitute zone name) - Disable zone file synchronization by setting 'zonefile_sync' to '-1' - knsupdate: Add input prompt in interactive mode and 'quit' command - knsupdate: Allow TSIG algorithm specification in interactive prompt - Improvements: - Zone dump: Do not write class for SOA record (unified with other RR types) - Zone dump: Do not write master server address into the zone file - Documentation: Manual pages are included in HTML and PDF - drop patches which are included upstream: 0001-loosen-openssl-dependency.patch 0002-make-configure.ac-compatible-with-old-tools.patch - also drop all buildrequires just needed for autoreconf - new buildrequires: pkgconfig(gnutls) >= 3 pkgconfig(nettle) pkgconfig(jansson) - create devel subpackage - enable rosedb and bash completion- local state dir should be just /var- enable dnstap support for factory and newer: - new BR: protobuf-c and libfstrm-devel - prepared lto support but not enabled yet, still need to find out which distros support it- update to 1.6.3 - Performance drop for NSEC-signed zones - Proper handling of TCP short-writes - Out-of-bound read in zone parser for long domain names in origin (AFL fuzzer) - Out-of-bound read in packet parser for TSIG RR without RDATA (AFL fuzzer) - Out-of-bound read in packet parser for malformed NAPTR RR (AFL fuzzer) - CDS and CDNSKEY support in zone parser - Add defaults for TCP config options into documentation - Detailed error message if zone reload fails - refreshed patches to apply cleanly again: 0002-make-configure.ac-compatible-with-old-tools.patch- update to 1.6.2 - Limiting number of parallel TCP clients (max-tcp-clients config option) - Ignore refresh and transfer events on non-slave zones - Compilation with Dnstap support on FreeBSD - Possible file descriptor leak when terminating inactive TCP clients - refreshed patches to apply cleanly again: 0002-make-configure.ac-compatible-with-old-tools.patch - moved autoreconf -fi to %build so it wont be tried in quilt setup or similar tools - move up the %if case for systemd in for the preun scriptlet to avoid warning about empty scripts on non systemd distributions. - used xz tarball: new buildrequires xz- Add deps on the docu packages to regen documentation - Enable systemd integration fully - Add dep on libidn - Cleanup with spec-cleaner- Only require lmdb-devel on (Open)SUSE 13.2 and higher- Updated to 1.6.1 Bugfixes: - Journal file would sometimes outgrow its set limit - Fixed incompatibility with OpenSSL 0.9.8 - Proper handling when machine hostname cannot be retreived Features: - Support for DNSSEC Single Type Signing Scheme - Compile with lmdb-devel to add support for persistent timers- Updated to 1.6.0 Bugfixes: - Fix zone expiration when AXFR/IXFR is being refused by master - Fix forced zone refresh on slave (knotc refresh -f) - Persistent timers database opening after privileges has been dropped - DNSSEC: RFC compliant processing of letter case in RDATA domain names - EDNS: Return minimal error response for queries with unsupported version - EDNS: Fix interpretation of Extended RCODE Improvements: - Maximal size of persistent timers database increased from 10 MB to 100 MB - Added logging of persistent timers database errors Features: - Persistent timers for slave zones (expire, refresh, and flush)s390zp21 1621420221  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMN3.0.4-bp153.1.483.0.4-bp153.1.483.0.43.0.43.0.43.0.4  knotknotmodule.hlibdnssecbinary.hcrypto.hdnssec.herror.hkey.hkeyid.hkeystore.hkeytag.hnsec.hpem.hrandom.hsign.htsig.hversion.hlibknotattribute.hcodes.hconsts.hcontrolcontrol.hcookies.hdbdb.hdb_lmdb.hdb_trie.hdescriptor.hdname.hendian.herrcode.herror.hlibknot.hlookup.hmm_ctx.hpacketcompr.hpkt.hrrset-wire.hwire.hrdata.hrdataset.hrrset-dump.hrrset.hrrtypednskey.hds.hnaptr.hnsec.hnsec3.hnsec3param.hopt.hrdname.hrrsig.hsoa.htsig.htsig-op.htsig.hversion.hwire.hyparseryparser.hypformat.hypschema.hyptrafo.hlibzscannererror.hscanner.hversion.hlibdnssec.solibknot.solibzscanner.soknotd.pclibdnssec.pclibknot.pclibzscanner.pc/usr/include//usr/include/knot//usr/include/knot/knot//usr/include/knot/libdnssec//usr/include/knot/libknot//usr/include/knot/libknot/control//usr/include/knot/libknot/db//usr/include/knot/libknot/packet//usr/include/knot/libknot/rrtype//usr/include/knot/libknot/yparser//usr/include/knot/libzscanner//usr/lib64//usr/lib64/pkgconfig/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protectionobs://build.opensuse.org/openSUSE:Backports:SLE-15-SP3/standard/884836b1a4afb40fb5c10fb259e90026-knotcpioxz5s390x-suse-linuxdirectoryC source, ASCII textAlgol 68 source, ASCII textpkgconfig filePRPRRPRRPRIu5%Mdnutf-845ce95a98473cb95e28d1f5cecbc43d44947f7a4a626ae7ac2dff4565a623920? 7zXZ !t/0] crt:bLL B^}JMz0ꦸ0S n ZO."Ĩ7/,e= xRݔu~XڿUx yNoO}|0#ⴡO%cݺZLHf@5Aް,Ks7Q+fښɟ-UOЋP=?rGVF ˎIVJs˓IBomv!Qd*+nPo앪@Fxvvr\`]Tv=ߧ ˰vb/wP\>!$(XbsȼY;5QhKC[J i]ʻ'Ï{\#;NhvnukGHǪyx?%^?}|8r^}u؟ga\w/}d3q6w{V/,3tO*`#jBac $OEAmET-lqy 5qSj$B#' u>~>HwUdPYYAؿA. Vbc|x8h(j]-7jxNrRXo+5^NCKK,⛻һb] iTiNG ͤs'[RD_σd,y!) -[,Jˡr8.fr-9FU*?Uh;婒gLfw ?uyV-!Y(G$`!D@]1C3/#}fդ$nS@y2 de{VH581I1- [/ Zw{&9ߒd_iN7 vyBRl۝rCd? FTViS-N "ѓ|/N9qbEn#Ĵ}'.g>X_zcvr`T&ō*: c<MXY^רq`}E;y(πژYz!] {x9_x-0y<ŏV)O{v2J(5,Z_3Kb-eZcquؾ@,g%Kx9<>ku?HB!RwN rܩ@WDd}@-ܞkkoNTV{~ynsۈG|Jw:h IrӠUDD:lɸtf,ihDTEwWKlsewNm$~:X3MIU'#0x(مC> X~C~upJ̚xo&0CF xPb,P y|!jŪdSRa\i;KIV&3u 2{HoPagm0% lPi u;ZQ8VP^g,*8 PFW`i69©m͊khqrV?hG &1\u{Xsynm/3PB'CrwY !IAFZùΕ(NAD:@^\ՕH*Ec/2cL_J-$ԃ\VP^ڼP]M1+L1X7I`nh )OsF FP XY)g*"VH0T-!VC?7՝A`ӌb5ر o8W^g>q`|͛zViW|G*ۉ7RV/eǷ#Nwy6Ge>#k%ꌒj)"fIJ*!:H]ZfGPHƬRSك`:tށI6[g7o wc oE;ob%bnDX,mfNpxR^@\+"4B;d(E.\Z>a &'eO!pNB9,G~V_(Zp)]abqJG|UÚoYiΐ d= c3p}i܍9$s 鴳CCR: Xa u[,MSw4f_lLKO= F:NfiS%Pֶ1NBbMs!2j*1 z5'P@>QW[NU)Z7ICFdi?gc/q-mIi)SIq#=Ô#{\jCM;N*3E4tc,PHx%ymiCpeBhjpA^񩠍xG%\k%HYOO)TV|Y3{91JA eauO!ze>K$Eb[n 1sʝ&H"NIqx1!k5 d$P; `Gk~ox K/{@u7y*1ɵJR`eCn7xBH±U(~wLWn6^[nQmLo7Gk4>-Lz(aicH]ZkbcZEV1n<%eZf<ZL?L.'7n,#vv}l Fj t(Y(F1]j 3U)ت_ J-:U)Fl3d >9>_sܑro#\U`|(eA]1nqqQ etѸw;Y*o!Y cM 7<4=VڎE/0 E"ɵc1$Цl(@6,Ha~9TPY'{m^6R&[SۖNNCLc!`, \&]yk@WqJ o _/v?;wT/xPuUJ˒N\H/hf E^)-?g%baCIy:OllJy>*;UFOL @ȓ)NobcpO7Ę po [Yު4I} 7#U7M3pȎۅ3 &ƾ%(2|72'\d=4M 0cqMIv`PR=:r|xg@-NJ6*E!t6odHSԒiQ@il1%1(R: ru颼Pi0qPڠQp^Fg^0U M/U/lEѺH#p A-u?b4+8sl;Hݼ\5Gtj- *$ArCTR2 'jmTXzFf hTrdսY>ޑ񳤠UЅlPqڍAۭBMDF7;Q{1AzYAHbt&W;|dde_XeqjcKpl==;0cmCA-}}hpB(3Uŝ`XiPB;Ӣ +xLN`3^ I:OaOi޳( O eq;gаq7p:Ҹ}% WBJmW,-nwl RvK@‰4ڐEs,Ϟ?' omL4X4{o*k϶ώr'?* Ǡo@=aΐĻ;\Z4,*)^GPcUG_G֜OƼ!87b% &I}M)7CwoLLH>D^.)`!S{A^RYpvt\ QՉ wU7.+Dӈ5T(0PH̀awg5 BH-0g (x+?pn9}K&$&?V!Ŷ85Wn__+ ]ByH Q) w0^^P6l(?v̢[cS25қgԞYt+'}!;pTIAd7ю?Ue=.wԙ-m/-C{%A] 0m݉&NdN{cYH8@ȬC̠]JŁ<2O`ůBay9®^[Xi=%P jf^k'RA!Ѓ5[^*ڏ:XmCdág8~*@Cm@ tk׿`jOIfhBaDJRiXsʠ4i+^ m1NVA:s_҄H&qaV|Gqh +lpnVbDqr{1">8ҹpMߴ8n /_$!CM:k_놩Kc#@n6,nFf{M"aRWKS=) GFG$]ږߥSkPrRvA9uWxjϚA,Tb~ҷ8A-3@TmnbP7>|Z=5xAD-C 걄}H u׬Ǡ5%;^t3?x:ԣK sfC5"\wY b\02)Ef bX1WeEԗ | L⍏|wVulp,nvwƚD<=~=R'۔Fsӄx#SHpo=z_y OQZt6΂~[:,m9 gFU*r}{z?" hMx:t: \OX_,~}b ghZ0`|Fr6&I5;td,ղ2b3ħK$fi/5_=|b0N ŬDE\Zj3~?G!lXP)/g.uv_%6gb밫=wf뗹5ɪ)ǧAW=W>7%u89 r!*u~Sf;Ǭhj!̌60.rwGC-PLy!Gϕ+yAL7}#eBAy̓F2RY- urGaQ=W*7"z B}F+e}u;_]ʟ r, Sgs=v$VHeW[Ku 'F4A2iTV3D_T3P (3+Y-!;\ X'ܲ"R0|1ow8q@&8׫J?9qnX8-Bq)PQC8_Sm:.1g/Džtj OގJ&{I|#^bJ=Š;; }H IZ՛'f5G` 7jF,fPsH哗XbJglpwj?f`w٠b$U^Vns9U\:K؂,1az"LQ*! | ij UztDd@A7,aSxhs~W f.Q}.Wdٿ݋wtDwW([!vqv0z(SS%mw)qW2b UL~QBҖQ (llWWp´O_Q,_8!AʫoY­&`<)rU} q.mqoԖP1%6 \B25~7\ ;gF`a*[{ȗ8)OWJ:uM"MH:+lkqF-{1uTDg^7+`=oeaxbsӝ r[&YyZgy5't{#3r T`9 .#pvWWIqw>h xZPP8ok|ğf%BR|)|{v{z3GS zNaYQ yʠ 0$2?ek:lghj5UҎU OϰL2/ :lZQBQ1.F!4j&~)rE>tdi@^Ut=YnɧoEv'l0@OZXTGD4 ]0yĸȐ4w97 LV(^! K jVݢS_+2X~%_AEd( z7#$S@LzX*.`kJ>rs}A=+ɋ9{.( PbI'@oU`\#7㭓p+SOw';`WABMZsczm;40wٰ_E1nz2B}E6u<?y<A:n)~a:k?[c@{kth %eIJ}I#64=lcYz3,D(lN, ro . a6^AT4H9)$C꠵NHm:pHg@W2PsV@8k.hVg }S/<Rڤ)Xr,ډsLh|JOPAqE!,ar O?3_ghEyq Uq\&<<":H9i*Pf܍bl \~XnR,@1-ghwaV6\]=1)>+{a<%Y|(~W AN/-NW izAcvU_ʇ]t(WT-{i M#@]lΦuV'rVvkI). xQynr_E^oћ2C1GxXUC0J[k7%mi@ \OzsԺeNB,<Zil"&BUDf]Oǂh@2^ֶˇ+<U،دPkh/LE"c;٦' 4db&\R{EҷI]Qbׂ;߫zv&Hlg%HuڤTjtap>&7hauA0Qɵ3r12k,wq~iƃK4їl-2(W"o/ܧ ".8C=yQB$TO+(QC)݋e-:.:> HklѰs'F+wS^ 7j"}Ml8]ZrUq-"a\˛!n+׌OXixR =6 J)>johJ6*.7)ܴ3]2h+yG&&6`ygV~PE꯷{\2 o3d# Xl0sq1rB5ɇsUDPYK"m jPp7[7]%`\VN-4ְVJJ\wΪEו@FeZo ΐn1)~xq4.\j骴eY"ǒ|ng>kb jDsn2w5lqF)@f}1-֜WXVd7I.Li+KGWr ۉ9-E.syj*l4ޘ=(r(XrЉ{ظ*()Q}J0ta@"\BSohWzܥQ-V`e d OZ¥wsZD@m*0X^:'$-Lc;G0ǙR@r5[^Ds)?R stJx5"Zy{Bͩ(ӕ\vG$.%~?/oIEP^{ٗ93 m/7.OxUivu_Kt͆`Dm8b5zA&AQp:tJOi&y#%\VWqaP?jm.jCN9Y(;6v_VŒ9 /XDLĝ~=\8aO>H\ɵppP+AؕC6l5z426*l"iPrыYXK M?A&_3QTtn'9,ny6= ՚7l^X'KXt9 z1=.RUflV>Ȓ /0łd*it c A1|=rO譫"Yg=AE JЕ6'uc/QVͺȠkrB|ClVyBP~ym@Ø)bIT<SHs?W(M[F Stȸͦ;} Yެ'}Q&,`="0G"W ؆thi?ةFDuMVWQ rÖY ,ّ/wU (gxmʖO s;ҔfIg0HQD~R1fh"-k#Z{<ďZX:YڛHBui' jEhR䑥qr"eֈxK'Mȼ:佌. cixJpJ8(Q3|D^]hx v*uG ){_wc`ܶm?ip ^?T\2 r}V0ݞiFG<4q2(\mF/尓H i`.B =oHS<%5*3 ˞r˥1m}=D U g98r?~,`-v͜}sz% ɘ{S )W&>)tM/% Jnkt+h5-RV%M?9[ucQgbo ?LC<\ӫz%4Hk 0M瀣[SW=mJu15_wQ}vj9j) .Ʒ#"ס= SC(j|aNo_"{[Yd.l  uqړZ`P=d[eo+!Z.uۛF3*ȼpC81,݂%hM\΂<M3b@$yU7d;OWXNFx<JrNYz C" 35F8`ƛ$"uߚ]zg9Y {4Mh>21=K FSh1 ~]Q/#&T:zgpUDz챆g]66r;u`<pF[47Dx*&%{M=vk h$1봸5W1_MI!4%sft Vo)C*(+ETW`im]U;mR~ݥמ$zʜe>`G3%[R=I|6vtWBO-HL[ča#.3Oe2'cNdZX#uX*_KY^7(i < RA^ <(.; `@|!i=LxSN*'8+lO{݋*h̀#Yie!Yol=m`B2D?ςN):VeIb_Kb^Ze~8~TWd@NSVDuȘ Ac 8rݘ1UcU$p.<ƨ_AsEǨ#C4M#% Dm{]γ5c,(= f6F,+X^C(")3=" #ݐp#(.Fz=[(Ҡ]1j@:{nKM3 FtC>zr-FۿZI; f& ^[xW 56 xf7 hJUr1Ki<ς9}WajaM=Ly3G^0m0+I| f58 QK'Dv0*  ?xGSGyQ_no'g47'Bwӥ]3g>-Ĺ)B;ɏKaP(S\8#o A¥Qg#*8[=ܑߌ'!0Qx_:9suN70j|y҄XlQ#%4Z0׫;iR ]>DԦ4Sۣ5:ڞ腴#:D&NUQ8'ZL62i=DyЫb{ })iʄdWR|wqO16SB,L{MA0kcPy]7=;ey;z m]BźCI҆5- cՐβ>'>Y)'2Uh!!gP]AgI 4H;0>CP>עXё,d{G xDJ!p 3d()>DNUWVM.D0)I R>+9D"p';T҆زfW*疇v!R;)QxbstnHsW9kxsoV(5ni%TnE)lim(_Y@cʎ sKnb@,4psYw{)EG&ISC$}L-v%]8%bQilQT>c4]X;Ƒ g*ӛMs3&Be!]Qַ*YW_{ JL*[cmS֠[rӖ5SP븫jr5v@;v\V¹jaKxY e'Dc1izcnbFqMiyEL=k K'ٟpweLO?ˈߖɇ+%v@>B;_~^:򚥗_察7FМ`' ϯA Hi8סISo#Y"E)C{7l`HZ*} /Q+˂`_P ;4k١<l4'B^y& 5E88d¼D0<63Wt!0/v!6͇Œ0; )6aWSp@2/ǧm2l=ˆ_zZCq߈Isr5 |G F9$МqO!qϽƐ& v1}wo, W [̨u'cW16#59 {fbmˠSf p_Vl!ID0'6I$-z e0|Q~7\DsشBS]\:4ߥ[iV',ʎ+N4$rt)) zm 3ffxQ}غo @3QZh1tA⯫}|z<ՑbF{bͯmlc9FtP6-=FR4- c4Q]c $$ o8rѿ7ԥT v4%? $yZ#TOD$09CczEl|Lm i(S\[ctK3|E|:tV!ۏ2&'qw*ח'oɵ%4 5?'UOⳟ V2lvagɶDV(hYmNU; ^"#H`$~qWkTa7&/g2C6ZiRƊ`tfZ+4Jq ^1O3"TSme'l|wA/X/?y l'm}OC< [a巘Dh`wn%,Mҹ,)(K5nn~{xc6֤>O(6'2BWa$wLՒoUإA~GӹI &mP8]oޢ6?̍L8<7 ]M  j6qG١Phpd'j5k, UHV;B,l~g#|6D<ք=p='sqԳ/N\d,oݙ$I+&,ѬTW?6m1ýƃG+>8!X>5\G~T| VW.W፡ V{? fޛ[3L=b {{`7N;PkHQLxVGkcN'Sظ~?s mKfr8p]_3/z.<3 MN5E^hЃLHr )67: 2#6@Nɚ=\LLeKޚu̎)p*Q}ݫ|IZ8+ȟJm l91:G@UbB9lP.F8g0l-őˇ $Y m⏻t ^ Źٺ)fINNm - ;D?!fM߻Ś$>} WeW,| s(uvNoiXШ>pP$- %*qoِ0Ca1- pp@QetХs(,|5S~fo y%O<0Npwz1tTL炋CHHd몷Z4.k#=ߩ~3(X}Z^eh>y7$Łl}1͹tb1Yc9o#-#;wLLjfĊF`Lsʞ1lp4q6؛ Vñ.IJ\/Ȟ^3 l:İċ.PeڢY.o_+hpʱKFX+u/aNŸw¦p!' \"Y9ԖYF#e@^, Cӯ_F+OR+5:6lI Ⴐjzpo (]%.pd!̙9{[GUfGOab6lo~oMNx@IR`?y76R{Ŵ#aN5 9u#uZ@%=&,^B8 ' 6럻$5ŧdp~6X-mrCG ]H].|Egi*@E:UG #΂$*Wey&6i.YĹ.Ѿ4G1+xxRU\ZдIm:k8\~]^&m".Ӧ|p =8 ^o1KOi8X7)]M0W`-d:.ͣ(%qv!l82=LFIFѣqQD=8 .R,DlNNtNfkN^>E `#%On,`qb"2KH`'4a~]DvR_(tr4nʐv= X8[4ׁ(Ρʨ~ 6G 7y.<uNoGÍKXH4 X@\'mö ^@6 s!Y6}ˆbo6^E2B+aM)cִ-` BL]\R&X~B>bbaR| ,PC{Ԃ@6px4{53B.lECkw>rzD9&Zj'0v}y3=7JʍJ?KkV28Dm x]/L-2 ohMUԀh346a&uxsyj+{p%^N #ATl/J҄P?fsnqߘXVIglrSRgaKe!_BE2l }Z䩬<V0c0@O™vٜxPK:/᥁zp09>,6oGjlkաZ-`m_6d pNU|g&P# rRurz@ ߗJc?8JdJ+6}s. v hs)YFݰ^^stKxx< zm*'usR ʈ @ ֱe%="F7վ(: V3dƶ]IM!fGxnkF5o^ g& }P2?꾶YAI=E2֮&2]<^׷+_cώ;O{AQRΆ6XSC?G7 4{3n9hySY#sbWy|/x^du- sX6vkOPƜ Nx ELpEw`Mٸ =gl$j>초̃~QblDc@y 1wEFZ){aҹ͇?>3W-Ѳ}^KGb̴Dnז/g\gQSxɃ),Imbv5 <}yNzE71xuw8ktA΍0aqo*J=;׳PX'L7CM[ Z/pI8! g?gPdH@rLm3K5> ʳ1IʋNN|tQYŒe!Cdj"dI.wc*`?'I vcH(EQ{P$jD[ H`(&콾(U) kaۡS3h$e* R$ aI&-+=;;8G 3o7*W OxIK;j[^i%"z&4#V=0u@e$uufU=XK#'S - ٲNlv]`RM9J?3X &Zqrvp>W\opR'(a:^@ݷFWmDyBf<3+p B}wf Uj+Vc'N3,4!X µ}P庺M(cyn?o+_qeyQ`z' ؞rȚIQ7|@`lDKK X#pl3(=Q[VKMDQZI/#-!{4u-B5Y}D)p5z4 7< -‰Ldw/[rRUs^JDbTXsI-i`,{xEE)! 3v=2/3 kb1#`8CS2SIvq^<(H͓I|) 1dkkj| 7%>M*ع8zJ^W!Cce~p4;ԽG\X+RJmO\A*Fa)*}>벝)dXҠ)Je:^|ak1)w0=6Fw]6NҨ ƾr`u[NFAW P=/}rr1G#s*&AW,*:o>B'X@9B>YndGC,wmRS3L|)-XɆׂE$mlx6zY7$~+*uε鲿λEth돊/##9n9 /uJBcף7^R:sT]s G@n_p.;rD !E0J98KC7 yoc$hndDX(pVlDdY p W&'^n%j;GJ.o]EWF_6dy[VtQ[CWsk-@__B/}lș#YsS6Tۂ[]a4j~'ȯF(i\7!mMқsv+`KG7ĢV"hH+|AfHy RGJ u,S?wO,AYLɪDc#9mX>Wj~rbAf_s˅gEUOgu7Q1M,i\i?yQ7Vvɖ˂D}k9] xCB.yu,-s9ۓyCH5a_Nϩ+tLv&_ϩ?;5M).f FǍ.gNh6gTa7fD5"p7s(g-S ];CHZ6$_c"xUVđރ,E\&5&`VlDW%/s"ԕ.^5Nv ;ȍѵv ˡaJRTHu$HtIS꧸`Q2Dpe5Nb[mU4y%|qSȺK~ .F/&,Ll WJ?LGj0CC2̛|p!vB$3Wy*QT<`;0j{-)L 䏡޴ FR_$Mu_p9.*Wk}=qx' }:@m(bJ3ʌtR9%oJ[Aɽ1Vf%qw?K~qN%wK>?1Gd2AC d!%1y/k,NjJ {,WWU.ݴZTt27 2 %&l%~Fë_&l)2>`$@Ќ69egֺa@JTeJ6D>Rim<50Na@5 Yv:1ke z'cSp8B;0P\ .h[1vn'xr0hNϘU"(QuOv(t`,k,wd^0G.ĕi(VaF[L[.46,җlj?7x!? *2)٧vW,`uYfЕiJY@b3H^]v΂Al-W7sOKΎI=Lr|)"J?w&^<+ӬD—Oehב>'?oQٮJ_Vq|P%UIܑDը,X€*72w%蓓?[C!K)VPdslY i!V)zӊvG$p-Y83-`^.L3oԨ?u﹥F.6C{䥭#iWgÑ5{f3.2g)ì8z'[ `8#Ad9_A}XU\g~yx;\n=H cQ\dʔZbc:r̍40uƻn]ƻ꟝CEDIxw/ aHdaO=:e&dZ ml?AV0 0HzlÒ$C; B4F)#ZQ4*`\ՌMWU?/1dDGV񙘒"Dl. BiZBL"ӫz VIV=5}x~!ď7il7 އ` ZY`45˯Z+ DƿՎ ۺT`7(Diax0 f3>" H U` @L DrNJn_d s۰زozN&~ 9K^ cmmID!eHE6xv_ \4!Bb*GTb4/B#QȎ/(bin=MzNJ'5v Rkp oTԄu fL٤x6sV޵, ~b&s zv9"E] 5*e/˺q SL%㯼TBl!YԲSiw+*ivWkODCzsqY.++xbƌ)0iP_;_ fLBEG}Uۘ搳v/)dL]O@ ۍSEߡW e*]>txW7V"T>1{zi8/Lg Q 쓇4`<7bHv1OCheL[Qt oZ/Fn'u#-ޱiDʶ1 'r?HCbR {$Wuȉ2 8>yy 3`;6VO^b@('ߋoI^),:]lQGL秈e\OyE x~YO#9kN*2/6ZJ`I7+ MŞ7^xv!k:Ks䕰R(ccN4p.8l,!b2Ze+OWl|~ͭu+t^S^h~L\v<[ wwI[  {E&}p:&u\)~a&UBF^"Ɩw;;E#4&Ϫ!4>%Fs$yJ]}CCs$K "MjaŭvlHE$u@ vQz`/:|@q!9z8z*̽Y`D>UP!s3ؕ#K3i#o/^IZ4h?F2 [lֻ4 fV1W/dD=.bUU_u[ކn & 7l:la|S}1b$)[ hڪ;!$,*-GC@mp@\Ir_*&l[7$؝]fC;bE"qlܣ3hOYp>}E i-[eg Vc:V#n=ʪ~ ; f;lAL[Q\6PP9d`UŪp*/3cjPjMP.݉pfݫC)t}Z)ʜWzN[)gP{™#_PkbeWpRsƯr:[Y y wwJٹlǨX")>CMP9 e)9E&a":LWS /5>CWt0SZP]C>A;J?ӑ/<p {2a{uoUY;= |;eww@%VJ.;1ѻQvvea5& wzpψs =:\;ǫ#B\݄A1G WC-gh4C(GTɑDmNv,q\{e:%1Dգ!\=1\j?PJ>GUxm&5CPo; ϖn1V̰b`D`=]L5?p=Dz}sX\/%X |]+r8 yxs`\,q6|v1(a,4'B ǥw|ҋ-{TJ, %޺pS/Q HÄ!>Pnm]%m%>(([{*_nGO+ɘI.]^>n8@TBӽd1G)F q tZ=?䘦ncS@-j^Xr9H?qF0Z9-_a/iG>gR$ϐ/9D tq'2Y2g`oaw RT\ JCC7{UJ~lya4dv*p<x% d͈t "<+s3=AF1r*(p_ uCw+%xpQeؖ4گA\d[K,!M\*Hpč2;XN#Yخf0&(|YiTa> Hnr0wfKyC\r~RLP3Ranz X"2M8hմAlppٕGJLZ0t? ;~(+xUR&Ǝc*bT^0m7w]Ы0U)*81x<u;WU𭐓RJV?L1MD楂>= ނ ?Ht@NX!'ǒ/O֊cЦ O~QTX/*&EXŒtÛb/~8 ԢmJPQPA) n΃+&LoaLd"0 ޔWK%,.pAy@c"Z$t9(no}+f=K„ %Q.}|*ƾ:cpnDgJ(RS•>ΨٌT EsXFמקGU ]ǐvV s"3D[Pdn=k! Ţ^)i$Ơ =C(s(4YnuV[xй_3 KiʨFǑ7LMEk׈mb䥸Z3՚3u#)>iSؖRʾ]IA[ "_aqEPHemJ:XM`4'^{&z3heԪT!qB| puK Z|YuEOkّm>oȪ~X} X  jɅdAin I-`b:/Bxm o"+`Sz%iC55XG+n?\.rjl?!#ԋy?I._St'u%Ƚ)ķ%f QMKнQWb99oN Pp=lE0.#W4g|@7r oNbbcE[e%; X-v^,K#)_mmCr^1z)*!|LN>"J<szԜ2'Wl=E ښR3+-Zյz :)q:^z o뒨^NI]c^畾e>h~x/Y~*t ˾tLQ !tPAoI\t??\׉^uCZ箯-ENZ=E|9Z0 h+!8qQthauyaI2BمMY:M.L!9=╂[L~ BrхB->Q,1nsXhWKg͊`3z%(Mw+ J.^Kt ɵ(T=zSg*T p&Xq=C=B)]ʀh? I"ݓxElFOeMJۆو&.~e?ܻRKel3yg}aGk'QX$\[C@3lA fAse$s"h?񏮅ӽv` 1|bMJ2QtdiVZ5zf,(8~ЅByh 6QV W;%;7s"".\&q ߙ;Lz˄Df$5km_H:1QgC9ܟ݁Q{/b]!*#N]mp Ӹ+bz۵?Gk^ŝ|xMR Nيg9 _R_QD~ gHqwCq;Ip\[CAN ?W6\=dlA#{)!BUm6ѿvZ,'()}2DGk9p<PNCp˯en'poH@[^,__Aum@FVCeoJ>.plE{!0NÇ,Xetfp&\)uqt3q/Yk2be^82N7\QbjKe:Wh !q7&|P)V`BuԵGgO*<^0a&c`hCR#^u5!%#8ȑ`׹-P8Lfef! tU%f/3psZ `Od_sb O 3nluCq n*lWmF{".h3gS&Mݔ<@+F<']I@EQοo-jo/snә}1JF3^:F1ԹJ%Lyt;Ӵcod{~ Ҧ: x [-+ /-zە.,OVZ'4TcMz"LGZTtlZ{x9dmkqɿUVjV:]D='\A=1"[Ƒl){M^z9'o-p~ڜЈK54 4&2M& NI/]>g9.:^t$ߌ?F0G୲ɌuѠwדc~ +Pw5ϛVK4zϸM :)C ۼ8<(1'5nKװ\Z^.]bm!~_H2JXayGAם6?bFUdH'eԖԳ]}W|ÒO ),EX~-昁nAwaCY) %yؚ-(jp5oʙ"VƴrfZu|! \3>E:q%mu:1ъ[Ps1_h1hm{}RK0O >=Tu9zZS[XG<]U֬CCXxΉ'm$͢傺U@u9_²!<< x0R-LTTk߯q`vbZ0kj]jc3SXt-(IcBM.j[ZSJ~IO Y>2O%hn;_{dӇA3Mة)2^Raj%ųX [iÅI%]wJC KK 8pL^;Qa~Lif47u bB(9&(uu;l _tǑyV&Jp*a$bDz)#kK+҉(&[ _r¯Qθ4;|aSdd76 rSYt|,+FD- l& 8aRlފ9g7jyPe\'g'kl׍h~{mxߦޕ=Ib(/N;Z|9kBd,K*yLJk u:5# YVD}R^6: ٷR`EV'zn⛸7A`2;ѰM*5&1C=JMM/yAH6ՠ<_ɠ&75 CT{,#W(xQؼR3VCUe 6rJ*}LAk ͵Hp-x +W ,y9+h "ͷ6fQM}4v:3$n0: Xӳ~}5n+$@4`+g7Vm.`rifq%0j\\EQ..4Oh't^4Kv<[M0C2m .,SG%Nz */$o9e,5˞.f I r|X+ zOs=H72)`F:Eem zDBUe]Vkhe񅂐UHߍZt/o9$x=ȅMOPj~oTFIg7X>'1}UZ_o*w4GmLs7"W ,ht*^7?e{SQ;_QWzw΂fuZu\ U)|[eHI<QPH=B?g\f/ͅغO+}U~r(fp=^?nY$QPkV!r5XMbdg?Bݫ4򾱏?p&f⇮/6P|C+J?PKkz7SHe c'3ܴo3;al @Rz.yz[2xrzc*4L]B.p4(x_8@҂wYM UEZe MFJ@(ʌlBK]PAOe?EJE<3:g{iuHC9b4Pa]}(3Ln;lapu] V9Nf RA1B5<~]\\W=qrP-iDhR|AyyXCܩ~.hJ4tvok#}g<ⷑRGK1AWEd9|vubk4!ǿ$>pH^` 6 JZlP?aNFֳ8ļ9 '۱wF0DU6)w¨;Sm^P80&XNh0ƆNҕ\/af:Ӕ3)Mh''ׅ2rNTd~?޺9oE)ax3ah_N-Mı0p=pf+x \zB$9f}1^U]*1[#Zu>@,ƠMK|B1}ÖהdU:ӌYQ$֨@%ڰŬ ^tP5j԰8FAP&߼ǎnЊ gnPii%q[$Gr)*!?&xg\ ژ\\2v5.r "2ĉ.l (ӭi&{sh_ElMXma)) 3y}I&!Ϗ}`wb$_ZK@ Yxsr˄r.Z A_)*9x< :i$nxB l0p*~<7j&,=sShbHօԿXNU߯^g(Y,R!&ŀfkݖCPMٶ,v<9ĺ= { u|@H3--@[}mӳtd.F< ,W?+@魎]M/Jz8;0F%բx3Ԩ$.CzPx]zRPhjkL{R lQpɆ4#I>wl꘎VdC@Ak?|"SnZ\laR ڑr (HCd XE۽`0Xq𴓙~2 ծc$Lkռpbjh"爖ȶȔLҔWnxB|BbZCocVm~_2H;1*GY]-5Q#PC1Q ŕuɒ ޥbj7 ,zt},G&-=cwY:Q«Qc=a/ag hH҉5$YɚR_aX5`3HKK\3(#Ҫ|p=;8 {lV(R](9mITʽf"qŶPO"۵mtkP槉5@dfq=HhV,jX]<_ZpL2;{DKN?{8CׁM/_:-y=?2E8L!|nmn+D!ӝëPFY7>d )'7 " l,I,sn aٯ?S娝~9GL99ѥ^.߉byHf~ɡMglOFI.yo*`L_uK"`˂HZ.ҿ{/}h9)91 y]av4% 'qP\7 jۄ` ؒl:ձ׹^Mn<m%|۹MNu a3{BcEĠ*cY3!h)i!6g; k2<@QL`2܌>~r.ru7wa#O Zy8'-aLpJYwvK#}-?Duɵ ۗ\E98=%ŹL5S2板Hyvlվ3R['!y3>* OQ-fZRĠ:ʄ۰n+NLWpw_^_k*2ɞ2h[`'9)Q!e~4o;'S?KW=Ai]PjM 6y~ȘT>J$tY!vNB>CG{9PX 5vd<9!%f+ gf!vVg/lKvgv/-1jdaIٓyIOA  ,Qzci;OXh! O *YȇTfZ=Z2_'(D$PΆ)b#(5itmuD͛M#u!NbP}J4ceфryl7gh8Q1j#Z$M9d !+IeTǺa]bkmxcŻ!{?A:#<2l7Q^8w?$~±q|cZ_J3rczѲ| am ŧJYXgUmrwHoy0 ψ?&fsWS;` 6흵pwALtd!.NvP8]B"7iWioJ/ ~ɋ+6hKy|Hzy0 MR V}{v0&<̩&gp#?==[DnL/lj DfPpc%ҕpxn"Qj)%?$8rK9? #Ron f>[wwyaPm.2:UmR FdWU +̃`ڢt#jJ˼I*'$FL@37"zi \=~A\a 'pyxN;MYd|7)Zč"{^@Uj΍8>z ?ڮx\1~kts1oiL}!$ ߵnM{7h,+Xޅ<5|&mh@2½>f+9c+>^^+ͽͬbp(epnQ|lߔZihP—мu#hܗ]wcM]4k<8 '. }NE"tw Ӟ9&Kf,,"'p^-_ H3 ؤ:Y_Zf ;#faT{ėUv̈ ,. ,PtmWRCObG˼ffE^?y @zuY׀emTQRz_ tJ`mP SR#13.q)3Wμ85PbnC>de@J'r?"-!Sn]t`ߝt0z];;S6&8dCn/ oXSD}*Ձ8:`Րpxt͡H8pYWil!5CX뢪Ie"x=8@ z ZsO]b&wAVaXh7 |j?CDvE*9dc-\Vػ1sz6%4~'Gi>ﵢڠzЙ& 1kocnsݞ֯al`5rI))u5p *k$V t쩎%sXǺi[w9>!>wdJM$k!ЂLL`מmmSS/hcN  * XN/CX)`b)\`K Uٛ1ȶ4%WD %X:<XF g+N _#Sqp1ALVW"+:|s+֞s]r2;k$b3vl6:ՙXAn4yhwq,mm:w^5o0O.L1f=5{N8e~rS/݋u5hBz9CRrEĔh(Z2К0srχ?y\!^'ޔPUS0cq 0ۻ9x &*/+}KAɐ x* g^.RB Te]hS 6-(oKew8 .B%*w $E,5|· `G/`G8-JkD$2'ݱ__roZ=VgLarIU=f;p3B.Zk~6ӌ6\ 7 ˌ^A*˅phόRor +]tI}Қ1BSGQͰurK#dK2Kؿ"t"\|PJ~'JI W?a'']ǙSkJv &hX]iȎJl՞ m.R71$,m+A5eltXI*W42Uлf_m>/fA0Rlz+ uXj{Crפ|82yM]>j?t oQϿ{/:?]PTC,-NցLU_úKsS#hBԛz Fb`~A/Bk2EE]+;UDrXHeu+Ҿ~(c"X ))]UkLr&`δ[HGm|X ȇNwRHcSn4Aۺ?}H^EQFdm38j/]z[`'gh4;ޠ˰߱#&20a51 Ks)Nt+H&uq J'SD"C,?O(=xpKx%;uW۶p3]x3pDCQFeay{f >m @jbjjD2׆[Md^`oV*ҷbDGg _g8w /& CAt V<`Hiߧ#% D6x"?@6K.S3ΞEFI͎줳"j*1 ǟw}z ''A9_riy|A5  `.3I>ޟɗ*<w">q?aXǵOJO['@R(3~vHVn #p)ܧ=$,,OT0_Oĺ-$+}k(Kw*CkŞV<iSA)3}%C!=PiE4 P{|.EBu6kdE5RiO.xL]C@(\ӠR5_C`vV,gJ!5T>81Wa 4|ރ;`.=,.2JD6S0+=wuH7͙!(G`r'X=&}%:v4rg6fpёJK*нt@ #k5$גJ' ȶq=0e zT/)VӜoHFEdc X#:IA00>π"Fod]Þ]g\ά `hgĢf YZ