knot-devel-3.0.4-bp153.1.48 >  A `!M@eeewҟl߅E31MOn.Y ,fYWK*"ܳ<\NN(,!yI]1 .$Rt\vr\z]u$e-Ew#QrFU˶܆F*<]]-Q[gaر!u,\^^8#cGNUCtCц $ g, NF(@}{ y ',R0Nb76a7aca077f34b8a260e7f2178a134d7f8721ea652990eb9537e59bcc796fb28bfdb0c63f80d50e36a4c9bb308b9a3a50fd0349+0`!M@eeeyq}e):.ڸ?6!* ݰ2 mǭݡͳpГo@\UjPt5ņLɼT}6D/zy/[`oQ5|g?G G&̒یXbXrw@hi觘LZu(Zь_[\f%vcBїP/ikq=,P0IŐ1!zհd3_/1 mħ]DR5rj;!v},e0>p>?d   G %=CLNN  N N N N N@NNLlN4(8 ,9,:"!,FuGuNHvNIxNXxhYx\xN]yN^| b~c~deflu0NvhwNxNy$ zL\`fCknot-devel3.0.4bp153.1.48Development files for the knot librariesKnot DNS is a high-performance authoritative DNS server implementation. Development files for knot.`lamb58SUSE Linux Enterprise 15 SP3openSUSEGPL-3.0+https://bugs.opensuse.orgDevelopment/Libraries/C and C++http://www.knot-dns.cz/linuxx86_64Er %~ QzR c ^ J 0&'K@ , tgj  GJ& r  >"" +:)AA큤A큤A큤A큤A큤A큤A큤A큤A큤``````````````````````````````````````````````````````````````````````````````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.so.8.0.0libknot.so.11.0.0libzscanner.so.3.0.0rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootknot-3.0.4-bp153.1.48.src.rpmknot-develknot-devel(x86-64)pkgconfig(knotd)pkgconfig(libdnssec)pkgconfig(libknot)pkgconfig(libzscanner)@@ @    /usr/bin/pkg-configknotpkgconfig(gnutls)pkgconfig(libdnssec)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.43.33.0.43.0.4-14.6.0-14.0-15.2-14.14.1`_@____^@@^@@^@@^@]\HW@\3?@\*[@[@[ݍ[IZ@Z@ZWQYYYXWDB@W1@VwV@V@V@V@VTQ@VCU6@U6@U@U&iU&iTTq@T@T@Tk4Michal Hrusecky Michal Hrusecky pgajdos@suse.comMichal Hrusecky Marcus Rueckert Marcus Rueckert Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky pgajdos@suse.comMarcus Rueckert Marcus Rueckert Petr Gajdos Marcus Rueckert Marcus Rueckert Marcus Rueckert mrueckert@suse.dekbabioch@suse.commrueckert@suse.dei@marguerite.sumrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.detchvatal@suse.comondrej@sury.orgondrej@sury.orgpgajdos@suse.com- version update to 3.0.4, see: https://www.knot-dns.cz/2021-01-20-version-304.html- add incompatibility warning about 1.6.X version when updateing - rename back to knot- version update to 3.0.3- version update to 2.9.7, see: https://www.knot-dns.cz/2020-08-31-version-296.html https://www.knot-dns.cz/2020-10-09-version-297.html - obsolete only pre-2.0 version- remove rosedb conditional as lmdb is required in general now- replace conflicts with Provides/Obsoletes- fix dependency: python-Sphinx -> python3-Sphinx- use upstream example config file with correct syntax- version update to 2.9.5 - Bugfixes - Old ZSK can be withdrawn too early during a ZSK rollover if maximum zone TTL is computed automatically - Server responds SERVFAIL to ANY queries on empty non-terminal nodes - Improvements - Also module onlinesign returns minimized responses to ANY queries - Linking against libcap-ng can be disabled via a configure option- version update to 2.9.4 see NEWS- version update to 2.9.2 see NEWS- update to 2.7.6 - Improvements - Zone status also shows when the zone load is scheduled - Server workers status also shows background workers utilization - Default control timeout for knotc was increased to 10 seconds - Pkg-config files contain auxiliary variable with library filename - Bugfixes - Configuration commit or server reload can drop some pending zone events - Nonempty zone journal is created even though it's disabled [#635] - Zone is completely re-signed during empty dynamic update processing - Server can crash when storing a big zone difference to the journal - Failed to link on FreeBSD 12 with Clang- update to 2.7.5 - Features: - Keymgr supports NSEC3 salt handling - Improvements: - Zone history in journal is dropped apon AXFR-like zone update - Libdnssec is no longer linked against libm #628 - Libdnssec is explicitly linked against libpthread if PKCS #11 enabled #629 - Better support for libknot packaging in Python - Manually generated KSK is 'ready' by default - Kdig supports '+timeout' as an alias for '+time' - Kdig supports '+nocomments' option - Kdig no longer prints empty lines between retries - Kdig returns failure if operations not successfully resolved [#632] - Fixed repeating of the 'KSK submission, waiting for confirmation' log - Various improvements in documentation, Dockerfile, and tests - Bugfixes: - Knotc fails to unset huge configuration section - Kjournalprint sometimes fails to display zone journal content - Improper timing of ZSK removal during ZSK rollover - Missing UTC time zone indication in the 'iso' keymgr list output - A race condition in the online signing module- update to 2.7.4 Features: - -------- - Added SNI configuration for TLS in kdig (Thanks to Alexander Schultz) Improvements: - ------------ - Added warning log when DNSSEC events not successfully scheduled - New semantic check on timer values in keymgr - DS query no longer asks other addresses if got a negative answer - Reintroduced 'rollover' configuration option for CDS/CDNSKEY publication - Extended logging for zone loading - Various documentation improvements Bugfixes: - -------- - Failed to import module configuration #613 - Improper Cflags value in libknot.pc if built with embedded LMDB #615 - IXFR doesn't fall back to AXFR if malformed reply - DNSSEC events not correctly scheduled for empty zone updates - During algorithm rollover old keys get removed before DS TTL expires #617 - Maximum zone's RRSIG TTL not considered during algorithm rollover #620- seems we no longer need jansson- limit geoip support to opensuse- update to 2.7.3 - Features: - New queryacl module for query access control - Configurable answer rrset rotation #612 - Configurable NSEC bitmap in online signing - Improvements: - Better error logging for KASP DB operations #601 - Some documentation improvements - Bugfixes: - Keymgr "list" output doesn't show key size for ECDSA algorithms #602 - Failed to link statically with embedded LMDB - Configuration commit causes zone reload for all zones - The statistics module overlooks TSIG record in a request - Improper processing of an AXFR-style-IXFR response consisting of one-record messages - Race condition in online signing during key rollover #600 - Server can crash if geoip module is enabled in the geo mode - changes from 2.7.2 - Improvements: - Keymgr list command displays also key size - Kjournalprint displays total occupied size in the debug mode - Server doesn't stop if failed to load a shared module from the module directory - Libraries libcap-ng, pthread, and dl are linked selectively if needed - Bugfixes: - Sometimes incorrect result from dnssec_nsec_bitmap_contains (libdnssec) - Server can crash when loading zone file difference and zone-in-journal is set - Incorrect treatment of specific queries in the module RRL - Failed to link module Cookies as a shared library - changes from 2.7.1 - Improvements: - Added zone wire size information to zone loading log message - Added debug log message for each unsuccessful remote address operation - Various improvements for packaging - Bugfixes: - Incompatible handling of RRSIG TTL value when creating a DNS message - Incorrect RRSIG TTL value in zone differences and knotc zone operation outputs - Default configure prefix is ignored - changes from 2.7.0 - Features: - New DNS Cookies module and related '+cookie' kdig option - New module for response tailoring according to client's subnet or geographic location - General EDNS Client Subnet support in the server - OSS-Fuzz integration (Thanks to Jonathan Foote) - New '+ednsopt' kdig option (Thanks to Jan Včelák) - Online Signing support for automatic key rollover - Non-normal file (e.g. pipe) loading support in zscanner #542 - Automatic SOA serial incrementation if non-empty zone difference - New zone file load option for ignoring zone file's SOA serial - New build-time option for alternative malloc specification - Structured logging for DNSSEC key submission event - Empty QNAME support in kdig - Improvements: - Various library and server optimizations - Reduced memory consumption of outgoing IXFR processing - Linux capabilities use overhaul #546 (Thanks to Robert Edmonds) - Online Signing properly signs delegations and CNAME records - CDS/CDNSKEY rrset is signed with KSK instead of ZSK - DNSSEC-related records are ignored when loading zone difference with signing enabled - Minimum allowed RSA key length was increased to 1024 - Bugfixes: - Possible uninitialized address buffer use in zscanner - Possible index overflow during multiline record parsing in zscanner - kdig +tls sometimes consumes 100 % CPU #561 - Single-Type Signing doesn't work with single ZSK key #566 - Zone not flushed after re-signing during zone load #594 - Server crashes when committing empty zone transaction - Incoming IXFR with on-slave signing sometimes leads to memory corruption #595 - Compatibility: - Removed obsolete RRL configuration - Removed obsolete module names 'mod-online-sign' and 'mod-synth-record' - Removed obsolete 'ixfr-from-differences' configuration option - Removed old journal migration - Removed module rosedb - changes from 2.6.9 - Improvements: - Added zone wire size to zone loading log message - Added debug log message for each unsuccessful remote address operation - Bugfixes: - Zone not flushed after re-signing during zone load #594 - Server crashes when committing empty zone transaction - Incoming IXFR with on-slave signing sometimes leads to memory corruption #595 - packaging changes: - enabled geoip module: new BR: pkgconfig(libmaxminddb) - enabled cookies module - enabled queryacl module- update to 2.6.8 - Features: - New 'import-pkcs11' command in keymgr - Improvements: - Unixtime serial policy mimics Bind – increment if lower #593 - Bugfixes: - Creeping memory consuption upon server reload #584 - Kdig incorrectly detects QNAME if 'notify' is a prefix - Server crashes when zone sign fails #587 - CSK->KZSK rollover retires CSK early #588 - Server crashes when zone expires during outgoing multi-message transfer - Kjournalprint doesn't convert zone name argument to lower-case - Cannot switch to a previously used ksk-shared dnssec policy [#589] - update to 2.6.7 - Features: - Added 'dateserial' (YYYYMMDDnn) serial policy configuration (Thanks to Wolfgang Jung) - Improvements: - Trailing data indication from the packet parser (libknot) - Better configuration check for a problematical option combination - Bugfixes: - Incomplete configuration option item name check - Possible buffer overflow in 'knot_dname_to_str' (libknot) - Module dnsproxy doesn't preserve letter case of QNAME - Module dnsproxy duplicates OPT and TSIG in the non-fallback mode- Update to 2.6.6 - Features: - New EDNS option counters in the statistics module - New '+orphan' filter for the 'zone-purge' operation - Improvements: - Reduced memory consuption of disabled statistics metrics - Some spelling fixes (Thanks to Daniel Kahn Gillmor) - Server no longer fails to start if MODULE_DIR doesn't exist - Configuration include doesn't fail if empty wildcard match - Added a configuration check for a problematical option combination - Bugfixes: - NSEC3 chain not re-created when SOA minimum TTL changed - Failed to start server if no template is configured - Possibly incorrect SOA serial upon changed zone reload with DNSSEC signing - Inaccurate outgoing zone transfer size in the log message - Invalid dname compression if empty question section - Missing EDNS in EMALF responses- update to 2.6.5 - Features: - New 'zone-notify' command in knotc - Kdig uses '@server' as a hostname for TLS authenticaion if '+tls-ca' is set - Improvements: - Better heap memory trimming for zone operations - Added proper polling for TLS operations in kdig - Configuration export uses stdout as a default output - Simplified detection of atomic operations - Added '--disable-modules' configure option - Small documentation updates - Bugfixes: - Zone retransfer doesn't work well if more masters configured - Kdig can leak or double free memory in corner cases - Inconsistent error outputs from dynamic configuration operations- update to 2.6.4 see /usr/share/doc/packages/knot2/NEWS- fix tmpfiles scriptlet- package /var/lib/knot - run tmpfiles scriptlet during install- update to 2.5.3 see /usr/share/doc/packages/knot2/NEWS - use libidn2 on TW and 42.3 - following modules stay static: - dnsproxy - onlinesign - moved modules to shared building: - dnstap - noudp - rosedb - rrl - stats - synthrecord - whoami- update to 2.4.1 see /usr/share/doc/packages/knot2/NEWS- update to 2.2.1 - Bugfixes: - Fix separate logging of server and zone events - Fix concurrent zone file flushing with many zones - Fix possible server crash with empty hostname on OpenWRT - Fix control timeout parsing in knotc - Fix "Environment maxreaders limit reached" error in knotc - Don't apply journal changes on modified zone file - Remove broken LTO option from configure script - Enable multiple zone names completion in interactive knotc - Set the TC flag in a response if a glue doesn't fit the response - Disallow server reload when there is an active configuration transaction - Improvements: - Distinguish unavailable zones from zones with zero serial in log messages - Log warning and error messages to standard error output in all utilities - Document tested PKCS #11 devices - Extended Python configuration interface- update to 2.2.0 - Bugfixes: - Fix build dependencies on FreeBSD - Fix query/response message type setting in dnstap module - Fix remote address retrieval from dnstap capture in kdig - Fix global modules execution for queries hitting existing zones - Fix execution of semantic checks after an IXFR transfer - Fix PKCS#11 support detection at build time - Fix kdig failure when the first AXFR message contains just the SOA record - Exclude non-authoritative types from NSEC/NSEC3 bitmap at a delegation - Mark PKCS#11 generated keys as sensitive (required by Luna SA) - Fix error when removing the only zone from the server - Don't abort knotc transaction when some check fails - Features: - URI and CAA resource record types support - RRL client address based white list - knotc interactive mode - Improvements: - Consistent IXFR error messages - Various fixes for better compatibility with PKCS#11 devices - Various keymgr user interface improvements - Better zone event scheduler performance with many zones - New server control interface - kdig uses local resolver if resolv.conf is empty - new BR libedit-devel for the interactive mode- update to 2.1.1 - Bugfixes: - DNSSEC: Allow import of duplicate private key into the KASP - DNSSEC: Avoid duplicate NSEC for Wildcard No Data answer - Fix server crash when an incomming transfer is in progress and reload is issued - Fix socket polling when configured with many interfaces and threads - Fix compilation against Nettle 3.2 - Improvements: - Select correct source address for UDP messages recieved on ANY address - Extend documentation of knotc commands - drop knot-2.1.0_pkcs11_check.patch- enable libcap-ng- fix configure check for pkcs11 support: adds knot-2.1.0_pkcs11_check.patch- fix soversions- update to 2.1.0 - Features: - Per-thread UDP socket binding using SO_REUSEPORT on Linux - Support for dynamic configuration database - DNSSEC: Support for cryptographic tokens via PKCS #11 interface - DNSSEC: Experimental support for online signing - Improvements: - Support for zone file name patterns - Configurable location of zone timer database - Non-blocking network operations and better timeout handling - Caching of Critical configuration values for better performance - Logging of ACL failures - RRL: Add rate-limit-slip zero support to drop all responses - RRL: Document behavior for different rate-limit-slip options - kdig: Warning instead of error on TSIG validation failure - Cleanup of support libraries interfaces (libknot, libzscanner, libdnssec) - Remove possibly insecure server control over a network socket - Remove implementation limit for the number of network interfaces - Bugfixes: - synth-record module: Fix application of default configuration options - TSIG: Allow compressed TSIG name when forwarding DDNS updates - Schedule zone bootstrap after slave zone fails to load from disk - avoid activating the intree copy of lmdb- update to 2.0.2 - Out-of-bound read in packet parser for malformed NAPTR records (LibFuzzer)- split out shared libraries, knot-resolver uses some of them and atm we are forced to install the whole knot2 package.- lmdb seems no longer optional- create a new branch for knot 2.x starting with 2.0.1 - Bugfixes: - Do not reload expired zones on 'knotc reload' and server startup - Fix rare race-condition in event scheduling causing delayed event execution - Fix skipping of non-authoritative nodes in NSEC proofs - Fix TC flag setting in RRL slipped answers - Disable domain name compression for root label - Log via journald only when running under systemd - Fix CNAME following when quering for NSEC RR type - Fix refreshing of DNSSEC signatures for zone keys - Fix binding an unavailable IPv6 address on Linux (IP_FREEBIND) - Fix infinite loop in knotc zonestatus and memstats - Fix memory leak in configuration on server shutdown - Fix broken dnsproxy module - Fix DNSSEC KASP timestamps parsing in strict POSIX environment - fix multi value parsing on big-endian - Adapt to Nettle 3 API break causing base64 decoding failures on big-endian - Features: - Add 'keymgr zone key ds' to show key's DS record - Add 'keymgr tsig generate' to generate TSIG keys - Add query module scoping to process either all queries or zone queries only - Add support for file name globbing in config file includes - Add 'request-edns-option' config option to add custom EDNS0 option into server initiated queries - Improvements: - Send minimal responses (remove NS from Authority section for NOERROR) - Update persistent timers only on shutdown for better performance - Allow change of RR TTL over DDNS - Documentation fixes, updates, and improvements in formatting - Install yparser and zscanner header files - Improve lookup of libsystemd build dependencies - Fix compilation warnings in endian conversion functions on OpenBSD - changes in knot 2.0.0 - Bugfixes: - Fix lost NOTIFY message if received during zone transfer - Disable fast zone parser when compiled in Clang (workaround for Clang bug) - kdig: Record correct dnstap SocketProtocol when retrying over TCP - kdig: Hide TSIG section with +noall - Do not set AA flag for AXFR/IXFR queries - Features: - DNSSEC: separate library, switch to GnuTLS, new utilities - DNSSEC: basic KASP support (generate initial keys, ZSK rollover) - Configuration: New text format in YAML, binary store in LMDB - Zone parser: Split long TXT/SPF strings into multiple strings - kdig: Add generic dump style option (+generic) - Try all master servers in multi-master environment - Improved remotes and ACLs (multiple addresses, multiple keys) - Basic support for zone file patterns (%s to substitute zone name) - Disable zone file synchronization by setting 'zonefile_sync' to '-1' - knsupdate: Add input prompt in interactive mode and 'quit' command - knsupdate: Allow TSIG algorithm specification in interactive prompt - Improvements: - Zone dump: Do not write class for SOA record (unified with other RR types) - Zone dump: Do not write master server address into the zone file - Documentation: Manual pages are included in HTML and PDF - drop patches which are included upstream: 0001-loosen-openssl-dependency.patch 0002-make-configure.ac-compatible-with-old-tools.patch - also drop all buildrequires just needed for autoreconf - new buildrequires: pkgconfig(gnutls) >= 3 pkgconfig(nettle) pkgconfig(jansson) - create devel subpackage - enable rosedb and bash completion- local state dir should be just /var- enable dnstap support for factory and newer: - new BR: protobuf-c and libfstrm-devel - prepared lto support but not enabled yet, still need to find out which distros support it- update to 1.6.3 - Performance drop for NSEC-signed zones - Proper handling of TCP short-writes - Out-of-bound read in zone parser for long domain names in origin (AFL fuzzer) - Out-of-bound read in packet parser for TSIG RR without RDATA (AFL fuzzer) - Out-of-bound read in packet parser for malformed NAPTR RR (AFL fuzzer) - CDS and CDNSKEY support in zone parser - Add defaults for TCP config options into documentation - Detailed error message if zone reload fails - refreshed patches to apply cleanly again: 0002-make-configure.ac-compatible-with-old-tools.patch- update to 1.6.2 - Limiting number of parallel TCP clients (max-tcp-clients config option) - Ignore refresh and transfer events on non-slave zones - Compilation with Dnstap support on FreeBSD - Possible file descriptor leak when terminating inactive TCP clients - refreshed patches to apply cleanly again: 0002-make-configure.ac-compatible-with-old-tools.patch - moved autoreconf -fi to %build so it wont be tried in quilt setup or similar tools - move up the %if case for systemd in for the preun scriptlet to avoid warning about empty scripts on non systemd distributions. - used xz tarball: new buildrequires xz- Add deps on the docu packages to regen documentation - Enable systemd integration fully - Add dep on libidn - Cleanup with spec-cleaner- Only require lmdb-devel on (Open)SUSE 13.2 and higher- Updated to 1.6.1 Bugfixes: - Journal file would sometimes outgrow its set limit - Fixed incompatibility with OpenSSL 0.9.8 - Proper handling when machine hostname cannot be retreived Features: - Support for DNSSEC Single Type Signing Scheme - Compile with lmdb-devel to add support for persistent timers- Updated to 1.6.0 Bugfixes: - Fix zone expiration when AXFR/IXFR is being refused by master - Fix forced zone refresh on slave (knotc refresh -f) - Persistent timers database opening after privileges has been dropped - DNSSEC: RFC compliant processing of letter case in RDATA domain names - EDNS: Return minimal error response for queries with unsupported version - EDNS: Fix interpretation of Extended RCODE Improvements: - Maximal size of persistent timers database increased from 10 MB to 100 MB - Added logging of persistent timers database errors Features: - Persistent timers for slave zones (expire, refresh, and flush)lamb58 1621328117  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMN3.0.4-bp153.1.483.0.4-bp153.1.483.0.43.0.43.0.43.0.4  knotknotmodule.hlibdnssecbinary.hcrypto.hdnssec.herror.hkey.hkeyid.hkeystore.hkeytag.hnsec.hpem.hrandom.hsign.htsig.hversion.hlibknotattribute.hcodes.hconsts.hcontrolcontrol.hcookies.hdbdb.hdb_lmdb.hdb_trie.hdescriptor.hdname.hendian.herrcode.herror.hlibknot.hlookup.hmm_ctx.hpacketcompr.hpkt.hrrset-wire.hwire.hrdata.hrdataset.hrrset-dump.hrrset.hrrtypednskey.hds.hnaptr.hnsec.hnsec3.hnsec3param.hopt.hrdname.hrrsig.hsoa.htsig.htsig-op.htsig.hversion.hwire.hyparseryparser.hypformat.hypschema.hyptrafo.hlibzscannererror.hscanner.hversion.hlibdnssec.solibknot.solibzscanner.soknotd.pclibdnssec.pclibknot.pclibzscanner.pc/usr/include//usr/include/knot//usr/include/knot/knot//usr/include/knot/libdnssec//usr/include/knot/libknot//usr/include/knot/libknot/control//usr/include/knot/libknot/db//usr/include/knot/libknot/packet//usr/include/knot/libknot/rrtype//usr/include/knot/libknot/yparser//usr/include/knot/libzscanner//usr/lib64//usr/lib64/pkgconfig/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protectionobs://build.opensuse.org/openSUSE:Backports:SLE-15-SP3/standard/884836b1a4afb40fb5c10fb259e90026-knotcpioxz5x86_64-suse-linuxdirectoryC source, ASCII textAlgol 68 source, ASCII textpkgconfig filePRPRRPRRPR C3cutf-8c115114d0f4c292fc8175fd4ac1098d95ec5c535bb72c0955aca42966c6e94cf? 7zXZ !t/0+] crt:bLL ęYLrstaKf ݃\n2#¤om[2W!A *6wu]Z9ߏiɞNVctnqo *b)^(4%}us6AzʺF 0lo}sasz>\?WK43E  UfZ> vzGW]KO tKG)r)-ORS{^QoJZwD2գo8~f`8gXŇjorёK*"Vie]:C{vcX#EVXcL̐fJs(}@-.]94Jԟ{P%TR+Jxۈu8rsY`n1 0B%$֐3L룷a 4Ⱦ9X[ @}hQ @*-ލ̓4֬?e2"hVu_3ɻmB6i%JM zn xJIJQPD+'1BpXrNM%' W'z *Pkz8P8Au%LdB+$Nf4tmMag_k2J8ß&t+ EM~jӜžm|t&v1{C !ͿwL&+qo5ghĤg$8ü(<5z)5 "u#T(J=KWkNI@kOHd~;׉Qv+GO5kuȼlPs'9Xb7E)HkC!,9 2YJp0`Eb *(E7$A qUc~;0|G8\/B~LۋQІ9bu̿t7z>6Tyr/סl6">MeؐPHpn}~*e3x6j( ޸,xl14Z($xG)P2=V}gWkw.s>RAJޭ"|^3E@^Z`w%1$d[y_6 ZG"rE'qEG,tR sĺ6|3N$ B+F{a]}*yLY@t:QL_ xSgB2t!Ɗ[Z) ɛN}-Ҽ!!-ȔuJc\gcR>n ƭTa`_;q:) .HE:d.h V}.I3BJU}6f5,\&gzj)KPFy(OVJQ ksו3rm"Αx6r{2 JaE]+OӍVR!kxt&n tZ!LCap6T#p#8Q\Kby4^ԒO#cQ)t\X2, K\w>tEm E;~AY\N7 9s'J0X(`6HYtPpi֕K1;Ȥ=v_KtT9CYԶt,!Dٙ`ΊkOeʖzz c*2?Cl]E.dH k PG2u鞈ߖhgp ʊiLiV\'bfDǘ]X}sKiD;dlm@s/З2o?{\7 b-VHi'}3 ',(l 2n"L(BC-ԑ=VVUj8>$ $/}:撽I[OPTGľ͢fp^3jx{J)Ww#( W.S(VM/ +1n&Ր/+JU+ #Mer d|֗rk4b, 2+yN@SQ+aܙh9c *wM:ېQ4A+sVG3ͦ ?RLoh0E1lOn5׈BZ!TXS))rtP*+E/,LfP&e=1lȡFt.cއ삡@r??J^"R\ ֳn0 ۮ>$#Jhԭ X6cffT.(Oϖ+_[Pq[ԋ;{NngLN BN6 D+1j-6i)A?̿S>N&idaw6AD/8ɀlĩ;Itp"+j~N4R? VL`=޴ӼO`ATQ@"h>N 'ҙPrIˈ@e^oKaWZODt翕7j=Ow}T z5r'CE3ӟ'VCMq2geqy=MEcBFټ8Rh:OeeL^.MQZv-1dGHo m(973nqёjD!+Zp- Õņ ?a>̓h*%kVs[7s<'ѐA#Dޏua,#/<}}xBx'BHaJN@ǗdӅ%C&ߎ+R£'>;kҹI6}UZ?^OEU>6 Rªʅ*T7~f &wp5 MYtT=ϝjr(z>Sݮ?4wMMr9!y-xCfmFSMr¶'+΋ԹkEF 5V/*!4ļm}Jiw'/4wYyذ p˫{Y'3ja;l:51:r ۩nҪEZC/7Pg' a B'rQ"Cr/'FHH|6ja6)ɲe_j!:-Mxn^vNԵ!Y=b#i &`u|F D"ѰYVHH=8_6i>Cb-ZI^XߠM>ii"0@"%㜚2V^ gB>-褗& nrF Ӵuu8ƥt_)Ѻ!nkk`EnsD,4(bQM9V"XYN0mTq="@cV+-o,1qo'h8GeV}3ƀ3X`D<Ms`2yn~%(lOg,'wMQgxtg%SC06IX:TH ++sSCɩYpۣhY r샻$Q咃S3v!'mSM8*QN\kAS{s*x䖅VŁngJZnkJUق8/T ɩZyr\VY9z|}ZRj?@0}:?2Í|.3mh8pL*4)Cw03~)y$mdDVܠ[f#CA 'm%lqrjDRlZ:&5Է=L-(T-<Ӳ C9Dh(=Y8`\SU3Y ,"H*yBZg,[EM/0ӭ?Y-̍UU;*$U ~ Z*\廾؂v+ʳK!D4ANTy%A a"4H+m_QYM^¡Ɣ$࡮ӆ7!v["2:k1QYdɤhz@{go? Lu=rpCAq;L@5 ;+}6gmWϊsδ%WoۀCA2<3Q8˘H}H<>cC|'*g vNOl.VFQn'FW6kt7ѧ빀-yZZVI1.Lag^;sP e~ Qk(H_2J A1{T°t:3nB1X|,gN`[x_\0 _I5)T,tE0u!/(vASFkփ[& C+h_o/ړg#9yHr 'T#3 U,5Қk1`lpa{VB mFqvVkş"KPjwGo 9 PBJJϪ#]K|[BCtqYݯ7sO/3"= $][GPJh%8lV.~XF9@:~&̦HTphS360y$\ qQ|{ĺrv0tZ OͶhS?Sl7TY[2mpoIطK.ܹxy J7MT\H:bY1^KӀQ cTfms ,BF026r]pĚSԆ D BΏԇ1-).& @ּӽ#,#w_Ф]ݼ}NPuyVPByLRF&U=~#d=T%#Hn ̑*TDkl rژ?e>Zl"[249lF#di;itq+PX!ێWNyKJ3!h00F4FSR<6Z=ܰ,'%*!ƛe?|#X.HN^QǛ.¤h,Wα^o_❨ܿ@{>Xs4|8Cy37:S7^Da^$ѵH:гJkR(c23$2=p3!r_:@]j~wjTY|@3x7+AY=:w-Jry,]'әu+81s5Y<~ Tϭ9T^Q_* NkթXzQq+QH"9TIUpI1L aY(`cACM/ 8(DQ] 7 KOdİ@36 F!ާu?Ê7݌?͆i%KwVcMW1z殱\u2S:jQyWPMn5+~ q1^m axyv[gPse/W-BO'EWU6}⺱K H*!䀔hL'G337QQyhU@0 u˺_-1';6^HB&nU`RV4k~!d.ֵdv WSG#Yt6QrV[!1RQ#l}3΋\dP'y˱LwQcj:u&oGj`F( 1J0X:U?;X PNi8m~ɌK¼..˅2 y*a*)2xkLK9FGA\8# #/KEㅄg%D4D1L,(LßI"w')/Dif/,a<խiaT}:5Gq?@Rڳ\B\믨DV<< &42aW*rJYUFT._:0 h`[lE3K(ЬcR w;̣׉utdpe,nk(%uk (<1T045iBn zBGUaŭ>ޙ*?_e:=qˉ\SuhͷFp{~/iܥW$ WI.M9bj6m3[+$]@΅*AC[iQ{=6\V#t>C{LIP+ -9E/ԏ5BVXn]n (XU\)!hIGtg@?/Zu.]ڀ2mH(G 9[}JHnJ|{,t% o 0qtn26"Q\2YlWv,+] rY0$yrU*:Yjo8 q}hd&B9:sE>.O0%~OgzbJAG;]-X_NO=@\=4cmhfb磿TkX[C'R OS%XZBdK_LaTX $iu6eHptT92 `NX.|m2eعɧUIJ_]gLF|5f <̃,ITJ#_.0AefJ)ЅiI}}>Ey Z~k&B.{&RdIF/E#C‡kT/hcn(Eb/O(uz̏tѼ7W1vN'M?]ш|m)ߣ渫OVckǔ1U~wSM{Kt.DaG8~ua`t zˑY K! aEo3[v6tCXv's0=]4ib#ѺqQRo8Ͳ*½XU$]v}/mbWtD~G0zVZ5 z=5̓(,2̌S2c,7(C5E 6P~HBw1<͓x~tF9"1^703$Rʒxs>/^w7;rJc| T[|#[ǧ:KTw͡VϘ|Kۻ}eso.1*~xJG7OBfaҪ ٮAc5(MlYz[;"N®"˾iUefD@-+*ۜ:zTŸ7֪>CetuB gy(Y0̀絣Jm~h>{ݟ+Oh 샜%2tUnQ똉QeDs˛vpX)l qCFS 3>bnq"Mp$3_Ƃ>9Y1ϙ>ƁA e rmeYLү0lr+kR@zl yw S{U9WP-LLqlSʀbF{!mSrE R;sf^.S>*MXl*ЭѯӯTX]QKaX0"'iP- z*.; g]d -آjm軙 QKAC='O]etOLJnPn;H1~s)=zl8dI2O.I0Gt!MDdH3}N7՚M ?@{ww {M-iT;~k$C1HqȟSr6$†|V?G~ D0JEl0#ʕoA*Fh=4 О2}48;*N|<"S}:$t&Q>n[)ǩ=2((xL"lW-BeQ/)+Ğxi ]N$:PVg8=g̓?2_BK)b| V4F4 k=FL9*a}Zs!a/,9"~8%xZ=76W $y{ D̬fpG_50l?e[0xJ/&fwW 6DiTn'B234=ڜ>i=AE6#? }Rc^ٵL{?M>gxΖl@8/R,@ /Мz)m @e!^٥Hcvzt ǩF j|z.֥lx&IwE^d0`\#_3:YD/s%?=Q#%V',G)n#5XCctL ÍtWZY#g`Lw>RAS'>Ohu2L()K>{ a ֶxF$,M{G Sڳ}8Fk{zbyJiJpH4Yq*p&G`D+.~!$/#f,j|Oe@]WrsXFB/lw 0tL({}]ʥeQwQƍ/E/d%(MXu\$ŸE4)B2['wS[3`Ng{蔣Yi"|d:Ɋn{ Øg,kuQ_?AcW9=B=8s-CTs3"˙~A{6dAy.?-w*JeM l58ȖMb^s Ql¬ oZ ͐F{yBɚ)c-(!&JduD.&ei[NH؀ܧ<3K;M *ԋ6>.$_[j& yR1sszIfqOqizȇoeK|DTEIvyؐ~p3NV!h(alz8j :OyZYu*h'A|2_%@HN4ՇX\R\TATسP.in9 mzu_{Xܓ5{\WhwJ>.Y__H` q3p;LJ,%1K6+2x;`'Gΰ9הQ(F\Bg0Wrinͨ#CduJ~8>`@v(g947wIG~j[m: |~y]'^r;|뮯-*t-uo'KJqC)?J`2lEGh7 ^-wd\}iĈt&WެvgXԍ&}1hhѢ cR?GιиZW%)kJ@\<2N  <_=le9b`؈hfUe9i弎Åd;ј@^jxE5Iy2s2BljxG.K( \yE|TQћ{+DhYHfv]:"zVRet>V &K JpC55:Db{s͇F/T6h~da£'Ƣ3qe Ř'Ȓd oJ֬vRyqE"uB >\NR=|0X4 ZA%±7 L?t&7OX[_dr]5΅<>oTˡL(0G(fmf:` I%Uz U$.dㆣVq n= cߞi i>fKmysHqȝcZF ։ M'ح4} #M5N`J|I"(4"~KP67`Op vbұ/2DtZ' {6\Asb`r]%KT&Hc_ +^h`RPf>?&NkŽq52-2 Gp!b/s FU@ʲ5n֘ ;*.nuU%~ҿ*ذtBxl2" MnIhkPqL)6VgUvPlڜiF,x`,g 5Ӄcт+ע%/Z8#(xA[GQUѳcIoS6m;ei c+*:G> HBEf-~BVj\;Mz-4x[٪K}Q5^*tv%K!ɂ&cjtެ*}7^OM% iΖz%#2.7&XW,fnZP4iw =-\=C,} ull0ĕ\U Z;.P-(Ao$X;Y-b3`^ m1=hntr5xzB2_ ol?NTn@zؐLOچ5acyaXN,gZ+aՇQ.b1b˵,nTpN%;9QhJg}3,F`q&!T,ohWS+k*hy7=K8pGYjw' SYHl nJ c Po2s~U"6$F&N]̡!삦?# Ոa &$ŌB<*/S>"H1ǰK ҳϲY gt>(nWWTdce'I~/A7؃Z⌭3Y?xK–+}6 ٜJ+mG1/P GhU7䖍i\sr4o;aPiuqM` OXBgVd'tCo6)`+ZzmCq K9ֆ9_8`{G%hR(A;̛aAJpٳ#*q?hV?gpoi;iE5ٙ$Jw 5oSK>~sLO8*2&R5(\fX@5̦dV ,Bu+^[Íq%8iͨ,׮Qq8nMɎM]`*6c'o G7PXϾhi#myR ?1S3."[޿T>hl}X!*TB-0B}b3.B=6̨GnPЍe3nr!~'0 Z{s1clcŒ^p a"-{7}anԺa3JFPPH2z:tD;WہBkW[%̯V"/Xx/l{h|uLUl0HwPUcPds*HRrE3f!0klXP!V`!>¦D\`.f:qV21حf^Qh;9@j_…5`[Xu0Y96뇏C2QkF} XŕaB)2@syBtق[tJJ2Gs ŖDyfxb0lPCY{GxZq”4[$`ۺ剕LfR>>p/[ #+DyןOF8Ov 7qFQ}tp*Zj_MQDzv>$&IQ+clwӕj aAϞ5PV݃|z/稠zf[ Q"|33 T1xw:y@#߁FUsXK?3]?/Xכ%1=>VD4bC^ONr {n ٶ.,Hrz#ۃu,I Hˍy R#J>#"]z 9&W̮E))K oN*H)rl rjW4ez<2zY_kǍ!J& T(aC|stqőnP±S_oCޟe+S^MXy%s;'SNxlģtrgM$ÂXe$; FvɾyI 2o]͟ƕ&B=ݗ{U?lBj2KhD #\=epHA 3!OŃC~9T`]VNZɱ$4FԽz5w-9Ӭ yZF%q[ZsJfÔʜnAۥ;Y6Cm=2id`p[Gi1h~OTB$>q|GkzI&κ~'>RDz*tj09jJ M[t"MGһf$r!O} G{dkQ^xGװ撓r(2xߔs9PTN"PT4Ezu uSe=/V̧^Jj8!u5vXi~6<}@췷I-"045)\*Q\1$vŠvlPT@Xx8 KBb@fHm>'H?e,=m@ѽ/,z*Jc}Qg#`-Eǀi˴=8!ߪ3KaĒ7HF{y+ZGZ ֢tRvRJ&~4HpQSJ9f[H*Кg$}jiǃ რAPRH;:Ө MH&swOXn~ly5k߲9t|ff.;'<>0*/hvKjWЫaiX3+4saQ"t͇1 4+* t _+vc0[ T ]3Au@`nQPn5,D>pm},5ܒLv] B fN8Km)2=o *595jsmөIq.<{ϰ-}!D΃c-E*UWNoU[|"KZ]Bpl\7BZ@n ىƺWx18W a<ue|Ia0]!4oe\=.[-ӭU8N'^Y-^#}v;Hy|{D^Ο*@Mb "S6]CgKqm=gJzSn>&uUm816\}"s[us֜Txh*de9}`_!f "? y$GosgcD;ZxwZt}ػC􂺒׼xE]ا" #铢gߎ#Woז\bf<Æ8[]JbE'SaXO!YmjG %9<}l *yle`SVC!uB*C3j'kQrY#ğC{0vEXT>K/ 8r.e18\@7svFq3x}Du"Hvlr[|S6.19\'6-ߪNFi(:d>ISZeϰY7kXZ#}Cds;x3Dl@Q7bUkܩ]l|a}z{eJz$NغaA_07|t2lc`":HB; sG گڧ&,>!oڒ0 56he. (|.m)rTQP}6#bsģJ;=͇Tv)ʿѝi7: <}Gl>' Z9.dpa7;K<~sHq '}$ڝI/k=D\jѷ/=$?%ŽN~" @|bJ!( hb{kV rp*6°oX9~2[L<9+,sOYvgw,SW]՝0"+~ jk}~TV @GQ_| M>2OT+tF7F0CeGg6o-q _9@@U`mOŸxKl_'GqKB8^HqY,MD}< kf&q^B'mBmn]2߇K7v؏8&-VYDށx*K=:K,ٝIڵ&=2Мrj$|Q-Lc.]p4>מCO( TdZrWC2kp4( XjQ_v5s'P"~ѢjC#3 ꢴj]M'PEfޡ#^GR7RJt[Je0/y^}_s<}4#pv>޺#G|9mĻ8,44 @'8zY`SeL>P LC!&tC4XSCs};"`Et4^V}{,⯦~@ʙs9?lw=>m{mv \{桽FvpVtMw2g4ݭ x[0Xjw !d{=7`E-8l{ p7,}-#15ϋnV jL7۫(@{hl-H#_BP]nxܶR.^n"X7jGzҝ 5OqUgnSp<)TGf釟 =+i.C+.&=oWM*hHxn'lCMNzNR"31)"%+Xܻ9$#ߧ6Yj05Q;gcYX°~y7ZY.j}xeiչR6E`EZl)Ehg #"ru%sWչo+X"ƛtfʋwl'Qtmayn |A1Ǝ y'E 2z^Y6Q)zl";X6xaqK>E9 0KM}[tybea$ Q C;@Fb$+#zR3 {THt^ KKDF8Yp@u7S8<]g2́ ^^&r-OlI9R U_ʼLDK3`ZGL"gPP.=ȕ.‡TP4Xj) )G[4Ƅ9x%'l}q/}SY${ l|N[)L4Tk@v9BV"G{oŽw&*5O@{6.C>y7Bߖ@w7s>|'9R @?踇+`5df` b6tЯx@N0Ba)VO'6yFj!tr<͚dQ=s:.f@Ղtˮ0򟁰 W*Ҿ〷1U.ĺ|ôI2_{Vip̝#zg KK_\jRT}G ewr}κv0TKřQ3CLгr'X~9v[S" }%<;sr\&nZdUJ73j4p k 8ڈEwX':)oS}> SKGP*q8% 3H s1 mg>lD1?d35Ze1JD\)w _F-ie:( /FțQZא, qoB$zd6PKbGEmuVMoء,b99 `zY8mmi&5!U!K{t.JEg)Ѐ5DO*&z+JYP<;'lGNN1v֐/) 1s7Ә::\giu3u~t-=uA> zFW`\t[ZK Cs(PK̨vT d2|Di!kIs V^y=жh e p3Cŷ4'Mv&H}/ 4?wl)PA`rA+~ @+o+ds*cl`W~sqQ,9N4 7XL͟XJ6R}Ѥ=.xfkl1~ξvan+xGzV׶ďoH$..r M[AY.AP_ z1/`4Q!b/ĤE%7 l4H/!rhRnX@]pksз/ L^ Z| ;1.,Vvsg0p.V PWO+=Ha깡C>Ia?B w ˨C<-V ]{@܃mBRf=% jUbrkrn7+X* +OG.hADI=k ^+pwn2ݐbz@#9i )\_&z/ʌ h 2VjߦdlPLDl]j^Զu̗n Ŭ{~(2o|zc5G]E= {f0^<,MI FHЊ氨+;Cr]ܔL҉)2;ri+{-&Ervwx6MT $懾e`nNN0s'Ԩ ''R>ݚ{QY:tQKrNSr =eF5ψZd  1qgx/ ,isD(&<d(&3j ߐVXZqyVO>F( \Dh>efKٱϨ<&wNg>( I6]nTz)58 Yh9pdɐ|ӟX^|Tcc%M:l0gIe=V/u۔5 >9RQ'aE9Х;TPogMQ^STҝ-O3F+#px-hm}@%QH >-+bwW[NQC9giEPO i( W)\bn6&5~⇥Ԕ@0?gׯX*>5W o< #_fKZ\1Ǔm97aou#W`$CLt*z[9"6jo;Nw[јGRuoYѝZ Z̎~ƌLCA$/ckzDA\p'k_{](uI g˲ [*vʬJ9XINp 5ۤEyKg#6'1*iJ79 YP 1nQv3 ›+PCI̋?IhVSLZ SxZ@0f亣cQq3O=nW",.6<N~PUl \L6_*p9fI _pV(!s-LZ^dP@='fb`a 4wĚbYbz@FxELu _X c'JA{_P'`!WRC}*B4 66PڡugZMM*t4t0 G=>+]1URePG\K/鋼TV_<_nАBX]kIu[u=% !׷FJӠDd6]i(!ʟq;C!\nXA.+"3`$pi|m RY>Qz8% aoAgbUB)ӫi9LoR#faUI-ԵIx \ ̾BÐƶz kp_y{GA wZ0ug6޽[q=#MBT8S+ vY@HWw֜xktm7ԕjM(_XR>(G96p: 8S( vNlw:#1lB"Ek/c*aP蒻kRH!eno)/#Rџ ɿ0m/"wk6x9塍Op߄qn5֦lP@§$1ظ^X83 ' ql5rqC7(x4DA׍|UxӠ3P-]aF2htx)e\Eiz rՃv(hnϼNJ+TJ;l,.BBkջiRhqχL,of3Z@ H.h;v:4E5Èl3b!vMlnb_GQ/F>BEro{!`kO{ .c"g\]t//+NE.dra[5BTTv3g; '7Զ[ Pe,8,9g&ih+zS5 ܴ,WG}(M#Bakw&}ƱAŋQέ 7uwFx"L4{#fbݺ|uomڋBJPRH=|5Y!>6y1't=sl('ŝJ3u+A5L/S.0Gg}$qrqH-˙_~'"Vk|܋;،.hY}zj."g!If>}&K1I_Y)[bx%u9QmAqaC`6,ؘF;m´e,*K9 ͜W$אkİF3w$xИpW:0טd-$4j|_GSΝ.^$y.?G.WnPhUGl<@5Pn7V&mݳNj;[^u:ikoώí̋p4P[uD|$59Vsy8CbhGkv8 $G: 63?bED<QDpJ/Z;+bXf,V!;bp?q Uix39qȱܬi1QUJ&uuY;Gd rw,]Pj?QNsRin2:(VEIu3E>d_'/) iUħ7w6`D;pk(G. Q.uH Wu"5K8wb;{4\r͢KT9O;ϯNɧ&˨þ tb:ⵘ{ݑY $(Ac]^7m|aNwaU {3 G! h#R̝XbD0{S|UDȩ2 k!]^**{eQesc7Qwp#hK"`lPf8R _M.?W t#GժKr ee-ĻIH AПuBzc? u:CQ{ ' HŊFYcn!;|CexGc;kt dݩ"fs/yqSLZ5B hR";^"]XP,qD?INLs])]PpuYK{Y eg{NM.b.LQX-1BN+26knzJ;.߽:l *BMo .Ґy= VleǸ|Ԫ.ω'Ȕ턘'sqɿz!| 6=H#S-, R ;KsφIyu\{Wh Ei泻1=T{"iN+ֲnHdBX`@\s(0̫CKcRJC"R}V6`9߮J^1%ꔫ)zsyα&7C bL\F.x}ۄ@ŀ¥r Mb8n . E \;lk9,_<greRr S-]I8ce[b4"Ja+-CE-QڮP63:0[Wٹ+/c *#=7a+g~م;2! dOb6Pd%4>@4=!B@SP<ZGxӈk&?N6zǾZ 9zͫa|˖j1w&Pa3=ЁDYXgV%5U{B\8 {-ɒ &6_7r 7I^/N3բe' )M`P%8OdotwOCN3an ,/Qք`]9X\[Ca9 :F"sO=Dz{ЦZۉ Z Zs) ,/:$謎/?- !FQWIs0E(IM?"OQI[;p}ZX`&6L*h`m1(,n= Wu+ȭ!:0̶vVFc"խ[<[Js5><ߣ3󷬨J|L>*l}s B)&q UC?]!1:(y!崗SM~NVS+]IuS3!üE܁zLYThBB-xESю?xVĨ`1VX>o]=uLbq&W:9:0+u4cTDn >>! 7ժQ,%fPRJltjD 7fqF +.XHd3aeӟwj*%kDk2 ?#*Y=R'qcmg<||̖Xxx5 aQ"̩qeV( SMH %+Q!}FU\XH(Cވ&C@Ud` /n4~IkIPjJp<@0d+ x^ \D5YqxE0ߥ5r ̍qz^ +}r>H*J2DiAŽV?r_@p!}J|fD"]t^^̪ e÷'Ǎwg{g]!cJEMG5v)< 횭pgU[n?Kn |': 3V}oM(|VJ,wLzrV?)[wE[rxnӟrD,=/ΉgbrD9k=41ZX%e)6J/CB Y xm3-sZwÎߊsJ\eWB[х|3H0 -:fz+͎wV B1)ZLA]l<}.pCIMϳJb(0>z0̂y pV+s1˪\Ԏ\EE㺁SX̲AcHPz-Y[2irZ_47ʠXB(m>< ADQM{X#^x$ -vUٳum _(}$%9m@y ,Y # w d^N;3u;Xf|D'7{'GvĄu qh ]Ede!ͭkt@(-Ԟ':˄lY)>;OR<ϓPv0#AO۞;iWNݞ#ޠXr~+2:`S R FnrKߔ6`>j~@Edxe;ǃm=ȕ\PIQt4>Z EM p`<׊g2d{߻\ +E\z :;&-OVH<k}Kkܚ-q>wRVG3AcBmr-.E7߶\1KiwAE UR~etJ9zÉer>w9NaJK19+@mf.{ɵ2AA7j6cAN宮7f!YW0Ieȩ몖 uSs'5ɇ6Ezv8Ő>=t!M }| /<"  =pbYp1FMOwUB׿Nmby6h :beˌhZ s' Gβ"EsyPi<ƽ :͹a^[R)5W{uAj,.`UNj ]tY l6;$U:T]noLH$ȧ!*kਥ3U:~݊Hjx6Ц#!)`g ǩ?OUX 5ȭ*:Us'D~0Zh/Dq"~^[ix@^C1PƏFᔀ ˟^Wims J0ppD3ڵ7wS5qZZ-vjV@| [0ۢhgK΍ D/`⏩ 4-_y _:¦5v rY" JzG5jç9 G=hB6q; [W2l0›Ce*͒7aX$nA*ݒ"Y褲 BL32f p1xa2۵}ة%oB?LiQe5IjGHZRa3аReW:K"^O4VV%ޕm ]}P[<],}%1Q^zhZj=E7Dw-# hdPYH"&f:E2!3@\x=D'j啭2TKxZ?2ly I$iE2m1]qe;bLcdK™2!u+,UNkzC'P[z) PmJ>S ;a̧u2 ap\Q}t?I&,%Ї?װ dFWdMz8gU ý8yVe@AT0X^e?V6rZDk1K.:W䚅2v/@ $j~pAيܑ8UE$,t:F$NXfd٢Z7T]q%&= P:9pT:"-`+(=k #f >i.R>6rzeTaVVD*p򔍾"c~q95gY|[?v! bگpk6c^o#GF͈GaB;#{ UQ#I(cz7ɔ]$we{ǐ*dNd:ocfefm^`aB%70" nol3 q@lO:ܐ6ʼ'P'ɡ&FhPYu9&RBvNPԷOx֨#9h,dR0d=]'؅o:XID4$xt@h*0/}^:,WGST] >DT)7 )+O.%Y|(ˡe8Z489tA~sAڰyeIV#E!FЍ,}~ ֑wVE'+J,L[X,qTNQ ݨc݀UoSHY'NHy99ϗ{uߌz#@BiPv#NQl>@ ՓGz ܩ7dh nN׏Kȫ)󮫆哌U>>W8n&g/e225+ nEvv(V'ƺ.m~*AW` tb%DN{~ɯ} % eX0#%34d|-J͗.YV@.4!09QAZ홞U#Uy:/n}\yVoCx(~’Uc@e 7HQdEbסXE 'YJ/1nfO3fV]jϽ!q"bм_!E2;'#3N6vG{){hgP6klp|}25\²$(r5fe\s+PQ՝<-hlqCp _ WbG֟rNK:Xú%m}J%՗f6fwPC\aѤ"ovW$@Thy1})8n-ztuv|;֖ o64}wi=ze1JhL2*X=i=HUk$~ۄ0syOhI6i* ٯ0<[@vʬ/Ѐnԇo~N4@h[&0k8h ꗺ$2a6 <ҽGa2[֖opjgVOPZsp(),ϣ'/Ǯ뎣FmX2-TiPLT< 4lM /uhy+6KL1m?"T"6an9l+k=F-Z- # π`Ēu3[" @ ny4&P-Wڊ{x!6aQ}yw.f:,b> S, 5a/;qJ}ahnfo (nH|!%B~*ҩ/Mcn_4if.TUhBĵS+j BiKсx)"PU])XNt#Py~{TA$f>Թ@sl7wS_嵖 AluG[2zPbyqW}n i;-T Ywq-[_EbEVWzvC㞿˝4waO:K>b%|,T?B򉿽B ;}-b4ph1<_$xmJ]/*=J z]=K+uc9 ptIUNSX\}rqO%Tea!gdkmX+V[^PY$}1ƹOJ8W0sҌڧ"ظwNGxkL{q:=g=0@n ;R# ǃW]cyvQ[\ԟ-0G -h{ZM^P/0UAcO| R)2S3,Ad nxW/|:1Ơ‚ tLF6YX ,d=Yd2j=Zd&)JRzREn{V10hPa후ى TLJ}2䕞>_x+a8R@ub̞seWu49;HscoA] b֛zkN} b+,r^Z] `˧]N.$P.f1Wpm Wl|2~s)Y 2dd # _u֌%T` mS^JOd ƅզf帟Szbtw---~kHؕfnGQo_n0K/;*BL[ߩ&:ڻ@rc̆# > 7XU?| Fj?s18!\َO)~Ct7(cdB敳 qJp懀9~]saeAstY b}IKpZ>l"0qt|`qLiÏ0S8;?s57YII3:31cb<0_(Z9קjƬ W9uWizMlF&&w7᧨AS#NfQ` fE$7ՊunK5X^FHްX9țgo ,sHYJ}q@AOd {D+P !O}; 9>l~9j\zV?ٛ*3I2XEDuQ }zXN|AGXX|nP eH%,PIEBnH\S@׮jiʭːaSطg?5}AorփM  ?Haȼ0jpO7 :%߈OHqO!tj,]9ү+,L=tynyLȂDxBW;MD n#D},Ww+o —n>]?h#*1MQ49.DZ)zo=3G-m,x=C!"< &z0"$f[MZn~5)u!s .f*^OR~qvGX7{Tpfo)-KA`~]>AnU=,g8w&Ց.1/0@ |T//Gb5s>?XږuMTZ_쫎|C%dCtv#r.Tܚe}fxl̤ஜ; 9'E!zU̽M $#yJԶdXjn+?L n^Ew^E(.&~z붓G €!UԠ !=] %'$5@@2D;_j$ ꫜ+OHM kxɄp}YBĕnF8?r COѱ̸8;8T9W^~+L r))4Lr$mH>iDpiK#YkMz^" #<&zv bECYs:K_a,2{/xXX+L9wNvѶzHf S͟;p_gmc_eh]Ws5U.J&nۺ&RSwn0C:Ȳi]ðl@BGH6FS z!lx`g~\lLfpˠ>59C-'7 1dVv+\(?иyd"gǶKޥ;. jMd%#ءr"KfM$n.;>?G] ӧX^h!hվMJqF=ɝING'۱x-\:|D@OC$"7&&xOҲ‰t)L]-wq| g%;ON-H9QٟŻ; <- ${;\,n!]lE N6S(qtu_ѳ(  jB$eTMt=< f܃}{I"c$i>ebv4&gS:sr>FL2O 'Cdx;)2+#1E.6s8䫳)bgk#.ՖCCLVm2}$RZ6*sMJ15̖+{<3-G& $ȝl ài2ʌ"VQr4whǀjh٢{X~ ~͛dzm 6iU=c0T,kˡm*%T{Bff h+"u;o(K_A"q &)BT ^Y)7=_ JH!!ru$7w1ԫ잚g&Ϛ}5%ڭP™y'&OW|Nljs ‰cU:wlK`Zs*?ȑ md?#:/"pXгcei[-WȒ4Wu NX[twՇ;_,*?>>s?@t̔''$/pߝE'k&&ѭs_a:!+Ɠ<`Ͼ8sv(7b= "_? ɘ =!]]jͅRrj(:a@23J%c%LAC=ٕpl&]oj}P!1uz<Yu;RzNa֍b9ԛM-1Mq}}=g4-nDSWqՂIX(^ty eAg OACj*ug/2y|rJw%J\ G+2CT$ ?!1}~AXy0\}m8z16(#w.fEOfRh QoH2?L)t.rD>mXϨD_Y(ܲoca1P\.ǖ.v1zL2ʸֹШmn<=ʾ}3LD⦍5Qq',~{-8V/MqY]jy[XDW4UTUi/~,ra9?[Ȧ#=\*g?JZJ.OSBn,@ 5y>@q-o"{O8m'w!<(+tɴ02K_ ]jʅC_jk0Gws=8ޖKlQ:ј0`w{=a OQxL>Ji'QHf4UKyk=D pJ{ՑPJ{ ;eޖ/5./*Ï7qd!dWG,NiQA/0 Ua1g[]9 ;^䊑hLmglS<„KtOodCK 6(q\rf{FhƤ}SJ}YywUsOp^"B:`"4CYeTJ!$d~qC=JG' (](\݌ZN~4_1[-7}&7RFQhG=q,$ uMkIOyl!v1R\kR)T(.as+^HբM _fXlǝշa-H $˨q'mAáySK!'G)_0gDfLٱ8NIYP4TFqU,"8Gd7Dzwsh}1a;u!8^W4{FN;UlRh/4tCtR-h{s NB@[(D>I\48OV0ŦѠ.,^LKS`Iu[iY|/ .s~G풷HRxVj?{NIe>{@" {YX4AoXʐ=<%b=ِԭZl_i&aؤ˒ў;blP;bhL=Hk͘dZRa z T]~ˑᆒnpλ`F~5g\f  "jI Y [i)5#C'n0pb>7 m7o3gC0\+JT|N9ѥ!C@TAy 34 O"Ӫ;Aڥ To K5;BٜbMo3Q/p3ҁ+9LX,)6(M<uNFV_)ա;ZtvrpK~Àd^mVo_l 0)舧wGl~>HsGf ?!y#o2L-*;e"^ٵeavS\2&l50HHTLT!G,PN-ɧ]ʩ\5eg,9DY?vy% cR8MlGA탱Ԥ M_ݸЧƴ7_ cr["M\1!`LO69y [ƛ[ !SImё*!E3XMepלѪv.Վ2C% RD@yya l֯AsM,q dǚ_VOb.U+}G!'"" 7¶FM!ɱ OtL/B^c/%`T.G/Z C6LġwWq_Wcvg\}P N:VN'L-/H?İ$@|l>߄𣴀gsΣyM^I)^pZʿ@?m& cin0*ؕvXg:fNJzAxKDJ_16Zwh4٩Awg/XL΍,a Pf;ĦLgDaS?p-$*r6'\=hPXWU3od":C>6 {oy.t;Z^Z>ecFYĹ,.^ ~#' 7Ŕ6Qd%tH`J6F_D.}ٗ~,*zz (Hag >4(.".T+Zσ2"&b|$ ^kdZ+HZMEtꢬ^!z8j=5dU_>݂,^] Zz9NWCxd6>S{:Bc.~%68Q$ixOkF 豌ܧȁ $ҋR%HT' }͎ݫbs  sSyqpUdMM=v"hz9X5LPxIg}y ^! NT|3{m"s-")9l5qs7]P``f⃿R/r