knot-devel-3.1.4-bp154.1.87 >  A b|q !M@eeexA_3sP^D*qӾs_巇crٿZbw D)Tcl?N,fH}e$Ӫu|ȍvϻڵ F׊yznͷHV"I {3cqjA(^z]tftGHNUʹ(1f5 G~k8NϋO;촐#qwDr5Vbw\V8ab270e6e8b4bb2a5cb4457d3758f856bdd826e39740b18aca18a748a813de8b6aff5de84ad832090326ea6d9f36439087e40b70C@b|q !M@eeeM;`&nJU^CA50Ek BYt=01WYK[띋\Y b]$85 o[[H!wINs0~~pa.\IgǓRKòc 'g32&3lM$28yg`Tl }>ͱ`3i}AnԺF.;F5?6";u{(#MpmmG &WÕ PK[~R)f#J%B]yeղ|l0>p>t?dd   G<@LPmv U<U U U U U UUU.LU0( 8 89 8:'e8F:GPUHUIUXPYh\U]U^becdteyf|l~uUvw4UxUy z`Cknot-devel3.1.4bp154.1.87Development files for the knot librariesKnot DNS is a DNS server. It implements only the authoritative domain name service. It uses a multi-threaded and mostly lock-free implementation and can operate non-stop during zone addition or removal. This package contains headers for knot.b|pobs-arm-10QSUSE Linux Enterprise 15 SP4openSUSEGPL-3.0-or-laterhttps://bugs.opensuse.orgDevelopment/Libraries/C and C++https://www.knot-dns.cz/linuxaarch64H %~ B QzR N ^ J 0''Kv , tgj U  GK}& r  >"" (,)AA큤A큤A큤A큤A큤A큤A큤A큤A큤A큤b|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|pb|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.so.8.0.0libknot.so.12.0.0libzscanner.so.4.0.0rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootknot-3.1.4-bp154.1.87.src.rpmknot-develknot-devel(aarch-64)pkgconfig(knotd)pkgconfig(libdnssec)pkgconfig(libknot)pkgconfig(libzscanner)@@ @    /usr/bin/pkg-configknotpkgconfig(gnutls)pkgconfig(libdnssec)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.1.43.33.1.43.0.4-14.6.0-14.0-15.2-14.14.3a@an@aD@a @a @`ݮ@`f@`@`q`_@`\{@`@`_@____^@@^@@^@@^@]\HW@\3?@\*[@[@[ݍ[IZ@Z@ZWQYYYXWDB@W1@VwV@V@V@V@VTQ@VCU6@U6@U@U&iU&iTTq@T@T@Tk4Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky Jan Engelhardt Michal Hrusecky Jan Engelhardt Michal Hrusecky Michal Hrusecky pgajdos@suse.comMichal Hrusecky Marcus Rueckert Marcus Rueckert Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky pgajdos@suse.comMarcus Rueckert Marcus Rueckert Petr Gajdos Marcus Rueckert Marcus Rueckert Marcus Rueckert mrueckert@suse.dekbabioch@suse.commrueckert@suse.dei@marguerite.sumrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.detchvatal@suse.comondrej@sury.orgondrej@sury.orgpgajdos@suse.com- update to version 3.1.4, see: https://www.knot-dns.cz/2021-11-04-version-314.html- update to version 3.1.3, see: https://www.knot-dns.cz/2021-10-18-version-313.html- migrate to user creation via sysuser-tools - run spec-cleaner on spec file - update to version 3.1.2, see: https://www.knot-dns.cz/2021-09-08-version-312.html- update to version 3.1.1, see: https://www.knot-dns.cz/2021-08-10-version-311.html- update to version 3.1.0, see: https://www.knot-dns.cz/2021-08-02-version-310.html- update to version 3.0.7, see: https://www.knot-dns.cz/2021-06-16-version-307.html- make sure we have getent and groupadd/useradd in pre * added dependency on shadow and glibc * might be related to bnc#1186023- update to version 3.0.6, see: https://www.knot-dns.cz/2021-05-12-version-306.html- Make /etc/knot directory owned by knot - fix reload action- Update descriptions, remove unsubstantiated claims.- update to version 3.0.5, see: https://www.knot-dns.cz/2021-03-25-version-305.html - Update description based on homepage- Trim marketing wording from description. - Drop old rpm constructs.- version update to 3.0.4, see: https://www.knot-dns.cz/2021-01-20-version-304.html- add incompatibility warning about 1.6.X version when updateing - rename back to knot- version update to 3.0.3- version update to 2.9.7, see: https://www.knot-dns.cz/2020-08-31-version-296.html https://www.knot-dns.cz/2020-10-09-version-297.html - obsolete only pre-2.0 version- remove rosedb conditional as lmdb is required in general now- replace conflicts with Provides/Obsoletes- fix dependency: python-Sphinx -> python3-Sphinx- use upstream example config file with correct syntax- version update to 2.9.5 - Bugfixes - Old ZSK can be withdrawn too early during a ZSK rollover if maximum zone TTL is computed automatically - Server responds SERVFAIL to ANY queries on empty non-terminal nodes - Improvements - Also module onlinesign returns minimized responses to ANY queries - Linking against libcap-ng can be disabled via a configure option- version update to 2.9.4 see NEWS- version update to 2.9.2 see NEWS- update to 2.7.6 - Improvements - Zone status also shows when the zone load is scheduled - Server workers status also shows background workers utilization - Default control timeout for knotc was increased to 10 seconds - Pkg-config files contain auxiliary variable with library filename - Bugfixes - Configuration commit or server reload can drop some pending zone events - Nonempty zone journal is created even though it's disabled [#635] - Zone is completely re-signed during empty dynamic update processing - Server can crash when storing a big zone difference to the journal - Failed to link on FreeBSD 12 with Clang- update to 2.7.5 - Features: - Keymgr supports NSEC3 salt handling - Improvements: - Zone history in journal is dropped apon AXFR-like zone update - Libdnssec is no longer linked against libm #628 - Libdnssec is explicitly linked against libpthread if PKCS #11 enabled #629 - Better support for libknot packaging in Python - Manually generated KSK is 'ready' by default - Kdig supports '+timeout' as an alias for '+time' - Kdig supports '+nocomments' option - Kdig no longer prints empty lines between retries - Kdig returns failure if operations not successfully resolved [#632] - Fixed repeating of the 'KSK submission, waiting for confirmation' log - Various improvements in documentation, Dockerfile, and tests - Bugfixes: - Knotc fails to unset huge configuration section - Kjournalprint sometimes fails to display zone journal content - Improper timing of ZSK removal during ZSK rollover - Missing UTC time zone indication in the 'iso' keymgr list output - A race condition in the online signing module- update to 2.7.4 Features: - -------- - Added SNI configuration for TLS in kdig (Thanks to Alexander Schultz) Improvements: - ------------ - Added warning log when DNSSEC events not successfully scheduled - New semantic check on timer values in keymgr - DS query no longer asks other addresses if got a negative answer - Reintroduced 'rollover' configuration option for CDS/CDNSKEY publication - Extended logging for zone loading - Various documentation improvements Bugfixes: - -------- - Failed to import module configuration #613 - Improper Cflags value in libknot.pc if built with embedded LMDB #615 - IXFR doesn't fall back to AXFR if malformed reply - DNSSEC events not correctly scheduled for empty zone updates - During algorithm rollover old keys get removed before DS TTL expires #617 - Maximum zone's RRSIG TTL not considered during algorithm rollover #620- seems we no longer need jansson- limit geoip support to opensuse- update to 2.7.3 - Features: - New queryacl module for query access control - Configurable answer rrset rotation #612 - Configurable NSEC bitmap in online signing - Improvements: - Better error logging for KASP DB operations #601 - Some documentation improvements - Bugfixes: - Keymgr "list" output doesn't show key size for ECDSA algorithms #602 - Failed to link statically with embedded LMDB - Configuration commit causes zone reload for all zones - The statistics module overlooks TSIG record in a request - Improper processing of an AXFR-style-IXFR response consisting of one-record messages - Race condition in online signing during key rollover #600 - Server can crash if geoip module is enabled in the geo mode - changes from 2.7.2 - Improvements: - Keymgr list command displays also key size - Kjournalprint displays total occupied size in the debug mode - Server doesn't stop if failed to load a shared module from the module directory - Libraries libcap-ng, pthread, and dl are linked selectively if needed - Bugfixes: - Sometimes incorrect result from dnssec_nsec_bitmap_contains (libdnssec) - Server can crash when loading zone file difference and zone-in-journal is set - Incorrect treatment of specific queries in the module RRL - Failed to link module Cookies as a shared library - changes from 2.7.1 - Improvements: - Added zone wire size information to zone loading log message - Added debug log message for each unsuccessful remote address operation - Various improvements for packaging - Bugfixes: - Incompatible handling of RRSIG TTL value when creating a DNS message - Incorrect RRSIG TTL value in zone differences and knotc zone operation outputs - Default configure prefix is ignored - changes from 2.7.0 - Features: - New DNS Cookies module and related '+cookie' kdig option - New module for response tailoring according to client's subnet or geographic location - General EDNS Client Subnet support in the server - OSS-Fuzz integration (Thanks to Jonathan Foote) - New '+ednsopt' kdig option (Thanks to Jan Včelák) - Online Signing support for automatic key rollover - Non-normal file (e.g. pipe) loading support in zscanner #542 - Automatic SOA serial incrementation if non-empty zone difference - New zone file load option for ignoring zone file's SOA serial - New build-time option for alternative malloc specification - Structured logging for DNSSEC key submission event - Empty QNAME support in kdig - Improvements: - Various library and server optimizations - Reduced memory consumption of outgoing IXFR processing - Linux capabilities use overhaul #546 (Thanks to Robert Edmonds) - Online Signing properly signs delegations and CNAME records - CDS/CDNSKEY rrset is signed with KSK instead of ZSK - DNSSEC-related records are ignored when loading zone difference with signing enabled - Minimum allowed RSA key length was increased to 1024 - Bugfixes: - Possible uninitialized address buffer use in zscanner - Possible index overflow during multiline record parsing in zscanner - kdig +tls sometimes consumes 100 % CPU #561 - Single-Type Signing doesn't work with single ZSK key #566 - Zone not flushed after re-signing during zone load #594 - Server crashes when committing empty zone transaction - Incoming IXFR with on-slave signing sometimes leads to memory corruption #595 - Compatibility: - Removed obsolete RRL configuration - Removed obsolete module names 'mod-online-sign' and 'mod-synth-record' - Removed obsolete 'ixfr-from-differences' configuration option - Removed old journal migration - Removed module rosedb - changes from 2.6.9 - Improvements: - Added zone wire size to zone loading log message - Added debug log message for each unsuccessful remote address operation - Bugfixes: - Zone not flushed after re-signing during zone load #594 - Server crashes when committing empty zone transaction - Incoming IXFR with on-slave signing sometimes leads to memory corruption #595 - packaging changes: - enabled geoip module: new BR: pkgconfig(libmaxminddb) - enabled cookies module - enabled queryacl module- update to 2.6.8 - Features: - New 'import-pkcs11' command in keymgr - Improvements: - Unixtime serial policy mimics Bind – increment if lower #593 - Bugfixes: - Creeping memory consuption upon server reload #584 - Kdig incorrectly detects QNAME if 'notify' is a prefix - Server crashes when zone sign fails #587 - CSK->KZSK rollover retires CSK early #588 - Server crashes when zone expires during outgoing multi-message transfer - Kjournalprint doesn't convert zone name argument to lower-case - Cannot switch to a previously used ksk-shared dnssec policy [#589] - update to 2.6.7 - Features: - Added 'dateserial' (YYYYMMDDnn) serial policy configuration (Thanks to Wolfgang Jung) - Improvements: - Trailing data indication from the packet parser (libknot) - Better configuration check for a problematical option combination - Bugfixes: - Incomplete configuration option item name check - Possible buffer overflow in 'knot_dname_to_str' (libknot) - Module dnsproxy doesn't preserve letter case of QNAME - Module dnsproxy duplicates OPT and TSIG in the non-fallback mode- Update to 2.6.6 - Features: - New EDNS option counters in the statistics module - New '+orphan' filter for the 'zone-purge' operation - Improvements: - Reduced memory consuption of disabled statistics metrics - Some spelling fixes (Thanks to Daniel Kahn Gillmor) - Server no longer fails to start if MODULE_DIR doesn't exist - Configuration include doesn't fail if empty wildcard match - Added a configuration check for a problematical option combination - Bugfixes: - NSEC3 chain not re-created when SOA minimum TTL changed - Failed to start server if no template is configured - Possibly incorrect SOA serial upon changed zone reload with DNSSEC signing - Inaccurate outgoing zone transfer size in the log message - Invalid dname compression if empty question section - Missing EDNS in EMALF responses- update to 2.6.5 - Features: - New 'zone-notify' command in knotc - Kdig uses '@server' as a hostname for TLS authenticaion if '+tls-ca' is set - Improvements: - Better heap memory trimming for zone operations - Added proper polling for TLS operations in kdig - Configuration export uses stdout as a default output - Simplified detection of atomic operations - Added '--disable-modules' configure option - Small documentation updates - Bugfixes: - Zone retransfer doesn't work well if more masters configured - Kdig can leak or double free memory in corner cases - Inconsistent error outputs from dynamic configuration operations- update to 2.6.4 see /usr/share/doc/packages/knot2/NEWS- fix tmpfiles scriptlet- package /var/lib/knot - run tmpfiles scriptlet during install- update to 2.5.3 see /usr/share/doc/packages/knot2/NEWS - use libidn2 on TW and 42.3 - following modules stay static: - dnsproxy - onlinesign - moved modules to shared building: - dnstap - noudp - rosedb - rrl - stats - synthrecord - whoami- update to 2.4.1 see /usr/share/doc/packages/knot2/NEWS- update to 2.2.1 - Bugfixes: - Fix separate logging of server and zone events - Fix concurrent zone file flushing with many zones - Fix possible server crash with empty hostname on OpenWRT - Fix control timeout parsing in knotc - Fix "Environment maxreaders limit reached" error in knotc - Don't apply journal changes on modified zone file - Remove broken LTO option from configure script - Enable multiple zone names completion in interactive knotc - Set the TC flag in a response if a glue doesn't fit the response - Disallow server reload when there is an active configuration transaction - Improvements: - Distinguish unavailable zones from zones with zero serial in log messages - Log warning and error messages to standard error output in all utilities - Document tested PKCS #11 devices - Extended Python configuration interface- update to 2.2.0 - Bugfixes: - Fix build dependencies on FreeBSD - Fix query/response message type setting in dnstap module - Fix remote address retrieval from dnstap capture in kdig - Fix global modules execution for queries hitting existing zones - Fix execution of semantic checks after an IXFR transfer - Fix PKCS#11 support detection at build time - Fix kdig failure when the first AXFR message contains just the SOA record - Exclude non-authoritative types from NSEC/NSEC3 bitmap at a delegation - Mark PKCS#11 generated keys as sensitive (required by Luna SA) - Fix error when removing the only zone from the server - Don't abort knotc transaction when some check fails - Features: - URI and CAA resource record types support - RRL client address based white list - knotc interactive mode - Improvements: - Consistent IXFR error messages - Various fixes for better compatibility with PKCS#11 devices - Various keymgr user interface improvements - Better zone event scheduler performance with many zones - New server control interface - kdig uses local resolver if resolv.conf is empty - new BR libedit-devel for the interactive mode- update to 2.1.1 - Bugfixes: - DNSSEC: Allow import of duplicate private key into the KASP - DNSSEC: Avoid duplicate NSEC for Wildcard No Data answer - Fix server crash when an incomming transfer is in progress and reload is issued - Fix socket polling when configured with many interfaces and threads - Fix compilation against Nettle 3.2 - Improvements: - Select correct source address for UDP messages recieved on ANY address - Extend documentation of knotc commands - drop knot-2.1.0_pkcs11_check.patch- enable libcap-ng- fix configure check for pkcs11 support: adds knot-2.1.0_pkcs11_check.patch- fix soversions- update to 2.1.0 - Features: - Per-thread UDP socket binding using SO_REUSEPORT on Linux - Support for dynamic configuration database - DNSSEC: Support for cryptographic tokens via PKCS #11 interface - DNSSEC: Experimental support for online signing - Improvements: - Support for zone file name patterns - Configurable location of zone timer database - Non-blocking network operations and better timeout handling - Caching of Critical configuration values for better performance - Logging of ACL failures - RRL: Add rate-limit-slip zero support to drop all responses - RRL: Document behavior for different rate-limit-slip options - kdig: Warning instead of error on TSIG validation failure - Cleanup of support libraries interfaces (libknot, libzscanner, libdnssec) - Remove possibly insecure server control over a network socket - Remove implementation limit for the number of network interfaces - Bugfixes: - synth-record module: Fix application of default configuration options - TSIG: Allow compressed TSIG name when forwarding DDNS updates - Schedule zone bootstrap after slave zone fails to load from disk - avoid activating the intree copy of lmdb- update to 2.0.2 - Out-of-bound read in packet parser for malformed NAPTR records (LibFuzzer)- split out shared libraries, knot-resolver uses some of them and atm we are forced to install the whole knot2 package.- lmdb seems no longer optional- create a new branch for knot 2.x starting with 2.0.1 - Bugfixes: - Do not reload expired zones on 'knotc reload' and server startup - Fix rare race-condition in event scheduling causing delayed event execution - Fix skipping of non-authoritative nodes in NSEC proofs - Fix TC flag setting in RRL slipped answers - Disable domain name compression for root label - Log via journald only when running under systemd - Fix CNAME following when quering for NSEC RR type - Fix refreshing of DNSSEC signatures for zone keys - Fix binding an unavailable IPv6 address on Linux (IP_FREEBIND) - Fix infinite loop in knotc zonestatus and memstats - Fix memory leak in configuration on server shutdown - Fix broken dnsproxy module - Fix DNSSEC KASP timestamps parsing in strict POSIX environment - fix multi value parsing on big-endian - Adapt to Nettle 3 API break causing base64 decoding failures on big-endian - Features: - Add 'keymgr zone key ds' to show key's DS record - Add 'keymgr tsig generate' to generate TSIG keys - Add query module scoping to process either all queries or zone queries only - Add support for file name globbing in config file includes - Add 'request-edns-option' config option to add custom EDNS0 option into server initiated queries - Improvements: - Send minimal responses (remove NS from Authority section for NOERROR) - Update persistent timers only on shutdown for better performance - Allow change of RR TTL over DDNS - Documentation fixes, updates, and improvements in formatting - Install yparser and zscanner header files - Improve lookup of libsystemd build dependencies - Fix compilation warnings in endian conversion functions on OpenBSD - changes in knot 2.0.0 - Bugfixes: - Fix lost NOTIFY message if received during zone transfer - Disable fast zone parser when compiled in Clang (workaround for Clang bug) - kdig: Record correct dnstap SocketProtocol when retrying over TCP - kdig: Hide TSIG section with +noall - Do not set AA flag for AXFR/IXFR queries - Features: - DNSSEC: separate library, switch to GnuTLS, new utilities - DNSSEC: basic KASP support (generate initial keys, ZSK rollover) - Configuration: New text format in YAML, binary store in LMDB - Zone parser: Split long TXT/SPF strings into multiple strings - kdig: Add generic dump style option (+generic) - Try all master servers in multi-master environment - Improved remotes and ACLs (multiple addresses, multiple keys) - Basic support for zone file patterns (%s to substitute zone name) - Disable zone file synchronization by setting 'zonefile_sync' to '-1' - knsupdate: Add input prompt in interactive mode and 'quit' command - knsupdate: Allow TSIG algorithm specification in interactive prompt - Improvements: - Zone dump: Do not write class for SOA record (unified with other RR types) - Zone dump: Do not write master server address into the zone file - Documentation: Manual pages are included in HTML and PDF - drop patches which are included upstream: 0001-loosen-openssl-dependency.patch 0002-make-configure.ac-compatible-with-old-tools.patch - also drop all buildrequires just needed for autoreconf - new buildrequires: pkgconfig(gnutls) >= 3 pkgconfig(nettle) pkgconfig(jansson) - create devel subpackage - enable rosedb and bash completion- local state dir should be just /var- enable dnstap support for factory and newer: - new BR: protobuf-c and libfstrm-devel - prepared lto support but not enabled yet, still need to find out which distros support it- update to 1.6.3 - Performance drop for NSEC-signed zones - Proper handling of TCP short-writes - Out-of-bound read in zone parser for long domain names in origin (AFL fuzzer) - Out-of-bound read in packet parser for TSIG RR without RDATA (AFL fuzzer) - Out-of-bound read in packet parser for malformed NAPTR RR (AFL fuzzer) - CDS and CDNSKEY support in zone parser - Add defaults for TCP config options into documentation - Detailed error message if zone reload fails - refreshed patches to apply cleanly again: 0002-make-configure.ac-compatible-with-old-tools.patch- update to 1.6.2 - Limiting number of parallel TCP clients (max-tcp-clients config option) - Ignore refresh and transfer events on non-slave zones - Compilation with Dnstap support on FreeBSD - Possible file descriptor leak when terminating inactive TCP clients - refreshed patches to apply cleanly again: 0002-make-configure.ac-compatible-with-old-tools.patch - moved autoreconf -fi to %build so it wont be tried in quilt setup or similar tools - move up the %if case for systemd in for the preun scriptlet to avoid warning about empty scripts on non systemd distributions. - used xz tarball: new buildrequires xz- Add deps on the docu packages to regen documentation - Enable systemd integration fully - Add dep on libidn - Cleanup with spec-cleaner- Only require lmdb-devel on (Open)SUSE 13.2 and higher- Updated to 1.6.1 Bugfixes: - Journal file would sometimes outgrow its set limit - Fixed incompatibility with OpenSSL 0.9.8 - Proper handling when machine hostname cannot be retreived Features: - Support for DNSSEC Single Type Signing Scheme - Compile with lmdb-devel to add support for persistent timers- Updated to 1.6.0 Bugfixes: - Fix zone expiration when AXFR/IXFR is being refused by master - Fix forced zone refresh on slave (knotc refresh -f) - Persistent timers database opening after privileges has been dropped - DNSSEC: RFC compliant processing of letter case in RDATA domain names - EDNS: Return minimal error response for queries with unsupported version - EDNS: Fix interpretation of Extended RCODE Improvements: - Maximal size of persistent timers database increased from 10 MB to 100 MB - Added logging of persistent timers database errors Features: - Persistent timers for slave zones (expire, refresh, and flush)obs-arm-10 1652322544  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTU3.1.4-bp154.1.873.1.4-bp154.1.873.1.43.1.43.1.43.1.4   knotknotmodule.hlibdnssecbinary.hcrypto.hdigest.hdnssec.herror.hkey.hkeyid.hkeystore.hkeytag.hnsec.hpem.hrandom.hsign.htsig.hversion.hlibknotattribute.hcodes.hconsts.hcontrolcontrol.hcookies.hdbdb.hdb_lmdb.hdb_trie.hdescriptor.hdname.hdynarray.hendian.herrcode.herror.hlibknot.hlookup.hmm_ctx.hpacketcompr.hpkt.hrrset-wire.hwire.hprobedata.hprobe.hrdata.hrdataset.hrrset-dump.hrrset.hrrtypednskey.hds.hnaptr.hnsec.hnsec3.hnsec3param.hopt.hrdname.hrrsig.hsoa.htsig.hzonemd.htsig-op.htsig.hversion.hwire.hxdp.hyparseryparser.hypformat.hypschema.hyptrafo.hlibzscannererror.hscanner.hversion.hlibdnssec.solibknot.solibzscanner.soknotd.pclibdnssec.pclibknot.pclibzscanner.pc/usr/include//usr/include/knot//usr/include/knot/knot//usr/include/knot/libdnssec//usr/include/knot/libknot//usr/include/knot/libknot/control//usr/include/knot/libknot/db//usr/include/knot/libknot/packet//usr/include/knot/libknot/probe//usr/include/knot/libknot/rrtype//usr/include/knot/libknot/yparser//usr/include/knot/libzscanner//usr/lib64//usr/lib64/pkgconfig/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Backports:SLE-15-SP4/standard/5a02deb01ec9f919b8aa1b90d190b0d0-knotcpioxz5aarch64-suse-linuxdirectoryC source, ASCII textAlgol 68 source, ASCII textpkgconfig filePRPRRPRRPRmQ >Z#utf-892861825e37c99384045d37b93e69677db3eccb0d083942f19b86e0ed1907e24? 7zXZ !t//] crt:bLL &:0$rm*UDM!xb]ύq؞zK=^4qe|FkPOfYཛ.bjK\sDR:`E4wHLEc9F2*1C Me4JP< kiEʗA?zI ^kF5hr戺[?1Z՚ yEh'a!p xi>/1!*CK 6HYx)m}?ZYR!Wԯm=J{͏ }} IIq/Rg* eŘSbֳ^N}4"jb?odHْpgh휒Mo0FHN{D؄g<ǒ ¼P5O_ꔙIP6,Ac=]<;G8ρ&0yw?H@z{F=5$m ͷ&{BCjM*/>0)@+]W  lRƻ-Lb we5j4R"Ot U%LtJA/ $Ih=[uhGN{{?fth`Wl' I8UH0$-1;ArgDm^+̓RRp(n7$r 9Z5×VW/rn;"\=W<yY4U銶r9=]eWbAў'Wp&OE 5c LNۛ\r2Gam| Ų;jJ ?P#dy9()TZP(͏qGp+0⯤!""bBU@4SVȆpZPCFӚ#McyLޯl;N9 T_CO̐ eHϲ)X^G;A ƇlT#v2蛍NFE`sO 糐b~4=/dh:hOÔKhSR랕lIʼ@K$̊PwJiڹ(mNz?3ܰى#Gם60r>6^X ZЮ\r嗞 Uh:49s{S_dNcU&_O7*{X3 5NE] wF{Wڅ:ՠVJ+ym(IʜPX'Ɏ?51&:;4,,̀.!;<\ G]xCǿ!ʎr9z /F@`ݾQ@b 0*~.:&]GB|{ EB:CvrOPbKL+LQ.KoX!ߓ89gE)7MA4gN )GAn8uhZF[C d@IY'%6}dI䍈)zD3IOd\c斔PDkgTEblP?gUnU+I4u:NN0XYzzΩY+[hM̋м}nEnGIr/q-¹g=Tkz=Շ]/}MZ bwLt rR *\6O2YZ_渽G네U88ē0d ]|KCBN@[4B4~ݰn>~{]lcI=UžcF׼9SN:uU/rM=0,hztbd *Q)nJoAFym~!вo!ewmyesfo!ޒX"lyto8AhSۻk 4nrzhg 2ĤLZm}KҖm07(nSiWZY$x0s%KSKo;ylǴ{ Z]抣yoOÉp#Ƈ /j[hœ:5|l3(A7{shmi\3- +w.AZձL; j.Ϸw_ĬZEl>DP_jsqSƍ鐰0I8.D/| ))~JQ6x58H߭2p3Zf3/V颛&Q p@1ծ5^NFJwGc2Mb~yACL.$)tD&f녤ӆP~V/9%+kpa^p FR䞓oU#ɁfG81g4Ջj֨Nf@&: n}Ӯ"Cj! Mv" F~bK0ʕss*7s9!B(d#.95 jЏ\K쮟@w^.DxH\ 805/ba|bp8c%[CmO-%_@ĆWio!iEKP?؃ ֫_#)v;? v`Q $W{Z>wܬ[`o&mQz"A^}6RTYsN`\9FI`x4$HJ9q"d(D~BbljU+i 㛼@clzabp{S }p5@_Q?E18tEg- 2x9btf3Zņ9 p)Qǣ 䚍Q``oudb c v/i~D//8e"3s{TSGxўT6!N##z/CqCEeG8F"˘dMvQIvDM+r(2HiK)ϖmJJyŋ@FvlX/X:[PUl;7qw԰3I,x|js^xJ0Jh8 Jh'2o/ؖs'򥂐@D;גԙJ=rF9}8j,ѼHoW⿞!ҍ5 P$cfa/MT:/֣Kq.(GI-&m4y{=SswhuAxDf|.,R+2T/hӒ).%.iQ\n/,Vh YDOQt9# `[GԱϿ._tDړi-z1NPw^0"7rcO[F>cQp'3=F KC:2 .bXKIjû8'}SuV'1{6'X_Pt^8޴ߺ y{*~Za?tjvʱ^ZY'7wA xunQzi )GMʒ x=13罙IG뉓T0uG!\)JL}ҳ#aJ ~4ul~Ѹ1ˆS\LkDoN:d0Z jxۯ>Ng$jEب|H1]|]n@s 9-2+doۭ5Aq>z[7JT,&V똹UHʚ^1jުq1M &/Wio`ha8k 3l3/PpLRuT!C YbɌnQoWȕ ,ixUV,59a&bG(q%a#dX:1`dЕf*))nޒ Sgq}ucyj] F (k'_ԣ"%`"|^e^&N?RIV [,Ďг{Q)/i"eLS-ޥ?uIY%w wi^~j- \(1/Շ9>.(!Iә$VCH@ںڈm^ 25vWC-Vk_?i$_ɒvp<ѹL]X7[F4%O ]",}. "/ś6{k܉R-zw53z71BTPgՌ&:a{*,QmN;CiJ;4883,Ahإ̇犥l>0TB*;X E@FꟅ(1P u?'r+k(܂$BKE ˣGkZ"LCF9&r"z>G_NeZ|=5Ƣ,玪!YPZ}KJlI>^T!x[~fR9+=gV61c/ŚNK7'¼̙Q~D/J |P@fe#sŠv72Iø|[X 6EN/ZCA G7fq[*AHoI %zA x)nuĭYz{uL4g3G(v@31&㌈0Ol(*FRdTB7 Ec91Ot: 1v 5QErt[;Ӥ=&MHq~2Dl3Y6s稱,x-jP#@dm[J `Y w)q67GdBGWI}" |iĘY< q|hV. ~yIqAh9߽q (^J}qpeUkHnzdK0U +7[CEF\ʰф]{^`{;CftH**^T5K-^Hx_Ktfu9lWo*Fm@F43D'6zF^‘bX(6ǢFnp :/5): XFjd}p\.., @_@L2&+iPX=4 `5redͣOXչo^6w ޾0cT.XP=>%TE ܶ Fnc9<:sYp*U9PM^9ew"i]00$Xz@Ljʙ4j) M=I{W} ܩ9\c^Bn/vqEsxĈNGقM㻊$4u ~?\xNl!AkaѮC qfT .Wp {(D㼯^V&_fyfr@y @O| yf[cZec^Ma+98[hmN;{N=Z]KO湹y .S7 ŏ-/W|13#w؂d٫uy*m:%։4GyEO7$yڡ9ay)2C%}|zaJKhWJ_6@~Ge+aѷaDݦ;]P"~#)z`İUk<%SQ -ZCktzlB. pz=:N=YzLqO~a&x,VP_Eb^g@Z) 札,n^' %Xf!y~e;Y9c5Q F"|ϥq9" ￾`È@7& )ة&q_l%*СkMt!c"pykP3gu8Oϓ/k4}HeҦ ]ʾ TO\+p@(/1*Tl0Jی hTVo.ާ1-I/m{FLˡ:ɧKU,} IX*?Nh9gr @.mD%;M neP夑zO"% Y(}lbj:FAR;)`VNktTQ/5l~-X"_q60 3go4w~)U f]st 棼d&os5 J+_ J _ӴbY֭)J 9N5jW3+MjP$~~e6Sr/d`WI:H23π8UhGƯw($ 9Ӈ:u LwٍЬkcI_c`P./f S0 6d;HH;~]ڋ~F5 IpSV0jo<+\lQ+W>WobnxHea#yރ k6phz~{ qiXBNUE4.FU [)zS֜,ίLPmwB|9B2Qv˞%O^Q{`~vatlT}tve(oUTBe,!;CH:N35ܘt.'eӼ#}f p_T(P!Axqծ:9E#J,gױl#+a|/d$Vcn_m}[>8o ?>-^~%ǢA6RS0cCϮX:}SKMMe t}W<*w:N][Pd^އ-TK^˃#iǥbԆR՝ ѼEN!:$3!F" bP9tk ܣCp/M9b%Pq*|/GoDy!2Zֶ&bf)OykmCwMW,u7:T/oLG/hh-u}pp̅i 2kN5cb֒mmuqbĀIy\T:P}WPT6|" cD8ĕd.!Ә/3YeRmFV7H"sjA@%$A312rSk$*Ci01t=]n Bu@wNe{m*Zٝ)UB؈sRl,y1tXV*iEgCOQDqfΠ*{3{JO/F6Y{gnʬ96NR!l̇qB8X̃c 3]\3A7-8;$Ax bA)V| StF:r7f7QTO_t퐔IgϥҷDY8Fe2q%=E V\ړВh^cj@ (ݮzUε^rq IR}l (7ǯsF'V * M; ljxvJ]yyIk,meğO m?ä!.A)Z/PfeN8Y[lq+O-ϺEv ۑvV 1(pG!GZbߺ7Kok0vxP;~5gǹWSj &ճQCV iF`dp< &}MQ#advҢ3Şy[CC=LW~~Nm{(jkN>W⺝L wUk4e&JH/ime%n'㛟JYL g\,^~GKN$6xr)㪫  ²IcVeCp_h ُy:@nMnRΜ%Retl H*me`_]GjfMݡԙ) [! }Ir yJ: tm,cM , /r|4lQpge[G5$ 1iaz!.mD'șhkHNsvDAS|" A$Z:K1n-`y$OJ37$k>&@MNC O|u3kS̕PVd ^8@yK]e|@œk{hY"q7*kvsiN j=leggħa,]6'>Xu֧p/}(1.>)v!!B{x$ =D+֞,y׌b,8@bF:73N:V $d.o}}! ȹuhܽ0 ]ŵY׃e#Ϝ˥Ա b8&`/I&B/xPBiPcWdȅC濆T'EkQd;skM&X>Kn72TF H +RHRl8fH%\gTe A`OL9/xՊ;ѤC&Q N%iq4 #Fy2d#B8Q@&J,MBoX:jo"Xi!_{_B$ˠAq/ঐ?#b=.I ѐwU/?ЇA(j5'{]KyW#L|h :<Ѧ$[FNM>m0 Uvɦk f`~ÓGc,lY_lṿڧ ׼}oGa¿~|~ a|wB%uT$:F$Ц` Ƥ%-Ҹ'") 4lyj3Zbg4 pFz vbp<³mte;/vE4Mꡖm5ϜԶ{= 9ؠ^Rtfc95Vn%lHsb+>dxVނ 9w7 ${9Gar:^;Lή0=Fio*GuY+tDK]RPjKZ$|$mc=om}׸p ;e_]. K?'\;յ5h[U{#V4lVLrj|S[֖et9Oʹ'O*+^ǓTfPڿk ;td`ǂ|x^=^s*^kJA ;zգ:y2hb\o۽}bU\ƅ00 BDs;A:v&} ?[Xz+ǵ/xҀDؿnZrˣl_}{ȧ=2/);FuO6R. }Bl*-l:RHy "[tfw.('Vp#-VZ~070K@h2P=#@cəؖAƻ[@qGe)u_݌Cb)JqpT#!Px;v=gǂSizNe:йحhNj-@g=@O| {b-"قlG۶m WX܆(ŗBڨ [-4Hknw|)Ȧwt+{8ΆCr⦾C jCHfiwgRLU_};::/E(npn^vaM=@T>ie+69yξSxLrKq]GOp$UT2;Շ'Y qQ(-ES@whLP''g&p'[x+m5=l_BC!!/7ڢEqCU]3]qUC/ZaVi GPD>'O*,ՌQ'O> Eg)N9ToT?^4yU#?!_؋5W-|v,[bYᕝlϖ[K305З*gC-bs3.f،PU$tIt:=۶YGMwb!1`)sBr͘mPZGDJr7HBOٍ@08;NÞ,Y?/|ps WN]h}lA431hNW`w{P. ЬH-)oiR_'&dǻ\6X'FWXk/VoUv)Լkfꌯo_"QVL&`FH*z 'T!ǒ%w:J4,KC~W"K ^͡@T-1&&|t3YI ]l>~& b&M]F,E3~, E؈QmdM$ hK_PC ?`18g] e"9#M- ^'$nO8$g}^ pmrٖ#Hfsje-~ۣ6@ }ziZ$nq c[/㤣=nj39O M! &jŸ?_eNIG65nJ9j :oyNrP| Y>| K՝6]!A*yF8e|mj&䮄Q@+ꖞ_.~034uUZȤw򰙻ffJ16HjU lTﲴdzGi nfqF)hS52=busNnKI磋b1A]" "-mԃ 5;XPdY^18ELa/{]&1JǞzxqOK ))ֲ\kk56~C]rWvXĻO7f+UN5ίyi1+;U.q #99]֐VzvȁOa o"$3S >I2{U^lt\x*'jWY2,K/4P!Kڐk5A%xʅovfGZ3_SJ%Q"p4?ĴP`q.>)&+ [6IV]](DJ\DW̘n } %ڈUF└W4{ !v>QOƴ4K}1]У>+6-dEJE~\9UPК$ I6\!_< ;ZvCBP/hT÷%υU,!;|^ P.'05UtVBqzK6yTqv *ĝ?х-iݘ/M*i-tôM2W᳔VόpBBG;hR(\rzVTݘLcy"/2";(ܳi#eق*yX>{ejjڪC0~_s1/،ŜK4U<T2aMAFޭjƨ:W>/44  Mٿ|}Ek#?ji:EGr ) nBHY茈G opudH7ӈ5#+L%kՎ" DշC!͢m@ `>7eO; od]-Ǝ:#XiV00sXehh$or @$^/ 0`"_5 S_s(z (*&xzSV g!A^y1b*ܗăʤ?p&tdplИ Lw:WeE!1\`g' 0"!.l |u&>ZR/6AҁTȓVeyq o/ГULC- ?j+\>NJ;6^5@/EW-\ j.qo#A5  ^|thxVu7d־L?ZR'00tOxQcɷPm@5Ǩh1Q7e7mV&g] t RO} ==|"!lW[GTPƵK3l( W>,Dјp_ IxE㉗Nf4\芝Kp8mS¶u˶4K64tu C0; 3I8_ȟi%fj݌ZLDń?x+i3RKA {zLb #LtEcIըntC6s {n EDnh'xtA+JA{%x(QBePEY'bUEoT&n_(lsN_L {2DRЩ~"&%;8$po#cGמ'&vz=.j9+❴sX6-}Q6xN-97mȽf쏊2kMc|05%\w᫻r5!u;OR&-7)C fJ(!I鐰 }MP8G8/,^d-|;0gM uήMz$3zpPl.:%jA~9ʪ>`տK.\NDv5SÒڌf>;i~էL.}l5.2-7B\3^$gZ(iN*jqtޏĮdƷL8=UZkr xNTR`Q),y[9ʲeףdڇ e{RRS#a5G;l0Jxjrdk=uIc? >!KS'a)o@_1a8 s;/+o^5(h&E[&4`WocFefď~N ؞wKC>L}ry%aFYZMpfSM rqgk- mS9mf/GUFuKcXڷaIeSOvC^ݸi=#,ĦH9^6{g̐ͻUP&(+rfsOp&Bmh]AC$y6:܉X!y3WQ&o z6+&ҀLCN/p'9ĕm.|!xXSc)ZI? ;PwȔE7aK 0sf= '8o(aQs)e ;X!z7jj">ڗ<8JGi2VU)KӗU.=`u#_2}tϖ[-3۠4ߢ{\=s{F r?p ]]P[JN@1Arnhrt 8屼I$vo =XEǞ VL$iN4$?eB[:WHyMFKX:7~J@욺8Tu$&v4F3YuyOK 1_UVJ0s63F0+Y=`YYXEJ{g=w͓O,˲3C|/Rt-Ax(^O'tڵ4#YwvkF]<"7gq FI\N5Ղrj&܂=麦IZt%^M(e*/ƽ&L߾+.ݛ`{ߡ@ǽVA (54D8'ױ0+-n6䳗ogJ9ynv-O`ᛊQ*:2&r=\4y68RG:VKK4j[igv΂15GBS?hǗxۄ?LI[2YPF{[L@ ,[ CBsޗ~geE&%\Rn~beت(j4,aOژ Lo ĤsEsN _%o_-_f)⨎F/u;;ZMaMm?o(Qhuِ;3 @!폫3?Pmq|_CpFOᇯLh#W۞*2٬ s:ự<C@$Pǖv2"rXfIhݺW8AEy;oˆߒ7;rMT~nL1n3\ch)0&JK-c=]-߮Dа8E9w Ld-1`/pWq¨g<[]\[ݤ)mrCR|Vav,|)FO{U_ȨFC3eJ2NW>D=^!\_-3ˡgժwm$ q}A)( Iڽ.*z`tG_f{G]|>$ڐ*X@RJg0"'7{YbR"Aَ)ֳ eby p'D"TTX6xށ d?S[T$lU~sI"We?ճypj0Ԯ*M,%ݿv9rcUpڤv@%<_KtHl5i1tP.70RL_춸\A7l=<뙊նzm{+xy"\7nd&Ʀ,IHtr MdUF3.$b_[6h)V9>M< ^4]`ӧ39EBh΂^i VA6hcĖgWdrܞ*Vzg`=+EA/Qzhq |\t-kYeu0 Bve]DYȨ}Կ50CTt:S !{Ԝ %rjt)-8j>DgAHAÑ [靗U?2ZNb蠣? ͐i~T"5XѦy;"`60U(<,xEm*jzuL.1ʻ;>!)I\ _ z63\mY `{ ,OadO ^coz$ _,(ArWDҏM" ɊլwŰ+RuUMwvv2*s/psYTqj4;uW!8`9L=E ժݧo ')d4NύP(-j7:iɬu6,@XNjIXjM2'a_' "I:Լr{PX6}=#z "ovO:6GI'-A Krcq;!~.@KLs:ή2J-gϓV9.l)_33Kua9 f0*(+DPl9>'mg~DEvb"@X`F&]Wqp˛`oJ[QC@$y%waƹxWm+ I'{ϔ!zE0U9_52 ҩ+ ʶT|vkp|4 ~m"߀57̶5Ow^.W.Yk P_"#T es<2T2Lba`O`=8Nh{5SQ\H]dmί\h`gc\ ͨ*XF`ESNk8-Iv{ TPz:c#%ڌx1K:r ?F)eʲ:b pIP Щ䥐ۗFAюjck"V-~(jOɞ@̹䯞dBz8>[AE(^<kDQ=&hσvJN0ԧ7YkhSRo-țPS@J+>!M\?&~X7G)liE/rOi /PwP-v_S0]t~l=)t@I܉)jy(Qz7ٳs&qrmUQ,RMIc<ՋM*+ZaP9 -|G ͔!PHHfé#GKtEp5 a<8ɏWuhw޿p$sIF5]B `v }@%b/#eLqoEm5Osg 0-b6b"dP~ 24F`8>#@%$ϸ$obj װ^bSU( h3'*ʳӤ!w9[xk:F=t޲i((eOזڲ-f Tx=܅@vO>@7_C6>&K7V{)no~ujhqմكw K4)?ۿ,6gf>oy^Z7!Cjxga ^ TcXoJSR fXZ9~WSlT[pWr)c%DJtJ.01NFtu[92=R[۾nЅrZE0y4I:xO0Dk!Tߜ}Cm`_b@zZSM=_2%j=GK)gu6`WH| mK)L1vvH+>[6׬*SيQl/ͬA6UA!PPH$B..J*O Gv\>eX 4F {&CJhD}•>oK)ya7F2YW65}Oh1V#y ^RMŵCǛ0(4x]W2atF[PCBCz[H?5*; \~^ڮ7րiuB[ -3eo.bGK ZĽSbUeWbM5];nBʫ}ƬCUVA LEYܛʩօ4;^N#zf(ɬ읱 n:8L8\"ĨHV+Bf"({N1ӭզڽס;ms)6Tq`*CAL0C7NOy'_dJj:Omdfœ x\;JRN-+(jAOu±vߍMMDŽ@` GU۳P䷽xe"ovsLn 2 }7]\I8IWK$ [;M0Sm-Q Ⱓޒ\ي1q^G?Pw OeBAo/BG@DHi'GNN KVo!䰙/M"hT#w<6V#~֞&CR*]0J!sQ޼oit+oHlQWUe'7!,P/\7whW̏N 3ӟYNON5AHWyJۺcM2AlT',t_Ӆ7Pu<5g5?P+ ,z*xbwMbC:ԇ[tYdA]&_ҹSgrr>C#!P[9O"k $KNxKtZ>*vo]>ۍ5sZR]OkGThZf1 i;N~jO;.zK?PCZog|Teڜ+o#?[ǜG s\!K)4yN~|r8tr fDeKBC #Kĉ"77wʔa!] ~>p05 Xh~\7#"BZ|_A?9hl:*?Ӣe4b2$Ӆ"~Ԫc+?al,[:I8Hy.U2/`0{̨=TeJLC[S>47-|.H/)0dO`@61p #EB_cB&Ɩ""xQ>u>c=|<ӝhʩ$ɻfISSu>i)='-ڱ`&|^5+0g͋zm[ER7h݃gl%sH1 ?bmԛ){ǽLx~~-7UbO(gZБusZނt7sY4 lx6429?l틁F>}W,@80C0r|ٹ!coF`x~uՋ%M*'ʝF> R{v~P>BG™h|fCiNStP&Khe4F*E`f{tyeKo>$.0~q"wۉyq Et_FxV>PwTwĬ H4)y9^J]@EԬP{䫭.4/O&M-ݴs^xNGu&ѪUtZ>n,/[WO;ƍ477OD6 ސT Pm_^c|$r֧/ɕ Pƹ"&)=f5>ֿ֒[?Eڍ?d<$K+x)uK-8:D"F#i/df'-PF[ ϲSkmrU *Nc_cq(n y%l:H2[O֗QO_X!2nc=\reˀG7WWk`:?L 4iۘ@JpaerGIJ"ȑM:qTIO>=w0BN~ f0 ̈́j5~&G7bͣ3yKgb^sLnT#i D֏f7s#=0IM14aPG7E5SEj^VM Un'$"+鬝V\y'rcMl򴑶# Y,@45c!"ql9xW+=BЗprL!I:-x0 9@t]A;DLfl[`2^ dB'Zb|\mu¨-̏y?܃40ޢ/#̰'\/uz<}grӌRG սqDۆ"ac>-֧Ъ0Ja-l8 p!PwB_@ "Ju6C얐O>ʉV4K5@* d*.>&:R֠"g ֡R,̟0xΦ>FCSz3|& `y$h'6`Y@ I=fR[ U!ʫr2pD{ v *8+sh GjW(EOցRAu&,sj4w{!oٛR1tL7kWt:|#:|w[87aQeP٤a<3n4&{ ֟T4ԅc^ V1"'5tn9! %Metٕ(,K3z%IhhiH]g؈fR!\_@' ;bK:I]+ppWrIy 4ME8pNi] Og˧ӁUj,Z}j;};{CT_ 1lm#;e;Jb-ҥM74z6Ɗl!k26p왦EKIGaX(p~ejbijʰxp}ؠ7ԑ\f>:ffх9[CfmMK2Sf!ip*'`2AQ /7ooΙE|,]3 Uϒ[5ǞyW~!Dt)8$+k+kytqk[O@IlaT2 sBlkŞ^{@Lٴ^@+Y<G&ou+wܹ/@nKJnb  w+f bX\OK/iU_Ǿ Ӑ{-:Z7?o"|$0h{sN/%2'Htn%Wjp=?",$n}Zv@`f:T&1{y(dIʼ 礉t".S ]EHCl1(`VӃƚ. ϶aOfدW77h~+ 1קu[ag&UH$it@J;,HZX`wj*2)Ğ^D*nD8[U+YC$!E/wn=#&!%WC4iB)m+UH{R/bJěc,txTD悜 ;)4-a}X*$fsN[G33[̆ ٢ڐ4 ꃅtoعfP(`R/imunARs#b%-oWD 7\WY ^Y"׸.VI.,mfOIKoI3JJV]P,f$5u 6+}pOF2w*gMLK\sk#\&(l+eosE4+*¬|FY5HW,Lv`9@MYЖr"˅yjt:PpνS a[C%TU+ tvk"e%VFx,dc&8.uT}ڛˋS)BY؜hXL(bCKN oO/Gf0movM s2| H ^,̑4 Qfb=k{s59`=)B#|vkMC?q)+ m ~OF['xێ-Do0|@Uh вkt7&kNcsJdEoD[%O# .O "?B. GObWE,4Ǯlv議ku?X:Ǝ*%A9.F]a u)!:)sM0fk0Ai~5n$44c0,% r-.M>r9,X)P8^sK:ܵ'@$nRʳ9)L+ Ƽ'C[3gt vrǵbM[8_2sf^$1A?,8ľگs~)ssywx6|q,6TOHGN_iPHE1ߧ,(ŒOX Uce|}\*:\?e搪 ?C',M8r'uJdž9귅pN'CgklJ{6-+-)0lηMCH:Js{9x )طl?cC</ lPICT6E`Lu YX3ڥƙ܈}~/cӻO~^'9B]_q!I(?^Rh/{d#Kop.>h-0GJ1zN$2m{6E~Gx5[(|AsQ2lY{1z'@ Vw3j~)q dJش֧qY:|&ZcH W0">鋘M+ҟp0;9X*J%{?1'LQw.T F29ZN~1M t AX(lk/J)P(IRN6?L%{K+\ejy?|i w "誢q`~Tk]h;zy?-:8,5۱l%_%w0 1eX4QrAK uTU1s&=Z6ca.flWYy?*=-#ڢLseϱs9tbN\؛_JJ XU0@2JMӢ,UGCpɳ!p ~k/^cmkN %;?XS(LgC\`-Mz&e.K?!rp]`ڡ  D'1YCOˀ;w}6G]$h<2?#D5>^t {Tq."98)~01|w|p`AӃ0I苹?=cO|+MVՀCdrU?6Gb.JAC5%ULJ_nN蠗9r̂HwX}z@Zb_{Bal8tnGg`/O tv1Ki,,{=)龁B<#F#2KM@;zs>ilR[{xJk/JJl9epYךHgyT= Y"~3#5H\ QޭnF?RŚUcLeD Dp-ŬRI ^P>(~xv 7s#j1:1\X6ecSġɻ5x>TQU+k-vV_xBFwȡXMw _50n`W/xXYJ5{]&-S[,V+OU&{EW\܅‚ÇЪsr~ꞴQ~vqz# ȚzN쒓čcǡQMͿB c_-擜@B]OpD/}~-L8R(\A2޻ .Ο!ǔD^zY{Nc3ɻn߲@i$yDvJUVLf~q[#`d(Os, B T(fR.d+a4 [,b3t:㩸.ndE<]P̓zӓ&>2Q3ü+iک\goiz wcǶ"5?V6"ڂB-aD7]F }tJV2Y1 H:^t1UвFEtòͩNuJ W{YƀP*S@՛vutXX=XE@d 5<M^nNJ{ qsLxDz6m`,[*r1S(Κ-Mjci| wﲯ>-Bg媶{ㅕzLzN kuB#dM|%t <:ԀՆA#P0ɖ _mRlp{z̦W ʶO;'ш=:ǖ0E">hw/,2HB[:5C+<T'׊9(Qà>~`m~n>1Ҕ~>} c24_QEVt ^mս !$ '(bI+A%:A kaITp1pp= fOse;Aj{z[57)L4Lkiڽj:!փ;^g=9;(tzY4bǂ)koʮ]wԸk%#dtIr D-qsɬȖgWOņ8Mg ܑΑxv%-ayp|; mz*P4Ъbir ~ eivXGf;ХF◁`(9e4!u:s Na"mNsvtsӦI{=w}V"(7"￘_AA}|Pn-Q/֜d a>.+Hh|()x=dóa_n)RN, L)xVfsyxa:%s(9@rY0'0 $Z- P13|G[ %(pnv>#Z*Gj`Vx 5 JҴkJMH=]+@b5rv5K/aɆ͸xBU϶Q6Z F8kIhYYB@ ƴ k=69`K6L !&6P?Z"IܶXBW> PS8%\ ̡5{?ϓW?: {ҸdԨ&-hyX`S@>0sO2h12yN_dN Û`|qt/m4O$M ?gHb.MM@l$ӝN}n"U&3SܨKi3%Qxb$tB659F[-LӇWy`x]-nuւt=n0%0'!jݰ9%?"fR/i*c'?igu;IsD̀ߛ ~ [(WY9Ҕ|?It  9 YddApt?uCFi:@F%Ƀdʃ:%CmК)7&l lHX;,ڧzTgcBH rAsz|y]]3iCaJ>5Pw9_VF(zvdITCpd S*\^wlP7O Mje`ÿm+҃\ȹȞ|҆=Zebv\lmJP-%>N`%_,"^Va=Y_oŴugA|\z[~ŊU}U(A57UCjƵ%{Qڝ\k 3#4A0Wx5oS|P1LWguJOI7+F܋Rl*zч#gwΝ6󑨜h~M Iiuby^k=`33 Ce`* @ @ bV4Y0k7bߓ=DP J\>*6 HKLp<'j| Kt8{wעY@hko}J2z%}7$Mn'nMD)\UN8c~zP"߄.xdr\ӵP,]\x?ֻ^Ҵ`F(MͣRؤtZ׽ET NrH guaVy;Gaު{ӯ=Y6n đu)T2|693D]=R q|[*bu@+#·aCf%h4e"xh ,/J\ۍu['jm"Ix5(pH "w! ;ދ~Y_]f8`)!Od$귑|TJ"lkPH=G g mmbverbFjOR}<<#g\1e[o)`ÛY|8l_l[g /t4%m#4BA8Rz)pj|ћʴ+]Crgق,Y dpՉ8v]hqo( lrQSe x}n'Č8c xHdIEPtS2)N霶(>+!P(gUDqtlV $ =0 rK@(v*`PY^N{=qta#$z1hK\  *ĜiY@:IШcti.c~? aSֻ&r6wUpYR΍}`^09wLeish](Wܚ|W{XQcVլ440s8 gvힺ W~IFnG)!I>\:aUBznԡ&Pm:iBAcK)+Vvr7w0rr 5e*dOoo|S! ̔ O&%2|,ÄOu6fLj\?^2|B)BUxnיaظ;ڟE5+}2Ŋ5S}@S{WW`6 y >;K 0`mZs&fn"N1^H*?K5 8 X%WD{!mc2r(Nޥ σd HKiCXC3e}'`boH5H!-/&;5OH_5!\4%UZ'Z׵5i!2jQԯBHT T ]9$i\poFc 4y>JM=|{gIKBus27KMrk{9 2, $GD*HZ/Cw)*}y':p5/' P?ye"ua4*kq oZ\@3gi\Iw|INtD֮k h&A})p9m9o5xQ;o [l>:{LTa`Kf.=ĥ ÉGO!>>*LVߤ-hBa cOmoeJf72lEp@NlA`GOQ5MC.;=@e?:FU«obD"X,W)к?ݿ/stbIg8 (q">vx>ʲ!wn}znkJ㋫"qk ށ}hV͝)c!4<1b= 0``픭#i2Y@Xv@ TO~vfS뇚;C"v9}4ΰIR^OwX l"jVS)/"-*uvH񋍏|)oy@X,O#\`jgp_Cg]cHcfesp; IyJYx6Ej8 {ik)ʜh)U+P;i,~=9hSysmz6ʧVB AZ*5|gV>C$#J+e܊{饠L9?,'^mW=bsƓ$]+xe k,n}'HںzjWY)+M*(?(%AfNG P訦nG9fCI$xdc%\6_7R^I>ħ]Dm[ #'`vYӨi>p An!Q q& ^a݁oB/`SpIh `.8P%dfQcP<B Yg2ݕsX}""*#H% HD|0IO[[x,l/ڂDNb[]Cw_m q@mn9<ڄ'Dz,LLϙ>t!(P05Hԟ~f7z(pi[HW M e%.S5g@+ Q w#n(X%0 ެņ Ik\&UblFϹy7<#:G )cAKO7̋WFϧ ]Pӑ ݢŎXe}X.‹olP 4~w"5te&g<|p/ޗ%Ԥ[g]*Q`iz҈!S( f )/.Ui]R7HhЋ$HtaT`F SA$ ^g*+flccQ#+P`\T=+e ?JO8Z uHe{i;\hC ^iGeCCR=LюIu@==L"zik04(m~%~DEnEOꃆ_'i]"8l rpV2:a^E2EwX)eW Z\fnK,@H@*Ӎ+9m Ұg(1Q]wvrPcBZ PV:?noٸsW#Q^T*'> ңSW{*"_O" (u#.5v%E>\d-" lꙔT(Wό >"qBB87/`lK}hӟBnUڶH zC|H~)({"e[n$щSn@ԃ&Rv'[j3u:VVP!1=uX*N=^MŷD(kM[ ]qo%^,E؊3qѾVA5 kN"AB|TρE]iX KӴ9m`݆^^ LAV 6 )=kFG(aeH٢5ג>ioB7H:-s :8<;^z_؆ϞcЈtU`B2G0A@/d(uI5ő%xtgpP nZuaPlo7\5uIͥ8(Y F>ϰ,=c0QmO #n8 0 /~w>l !8ss' hԎGˋ:Kyw/3+˫K@).4k ~菐8op/T=s>k[bۄۧzq/lM0Ҫ4\..GdjV8_յ RP.)pgccfKR~ ֚nWy\/'H7Y|•hi-K  6{%RTёy_^^6J@3Ÿ1߸C,634vڽ,Dy l* )88c^qYD>wQ9S*5Fr̰<)(R! ?ǃ ۚTd ?'sZ1j$6 ^] gCʐ„>pT͉{D$a! ndj.b!ʺtRpXHmk|r(]O5|| [h.a yUɛz>܁F<~J|c-6/ۄ+h5-kΊ򂅾OҷJZ97<=0 FE[O C'3q;Qm]FU#Fx uz% Ǭ oDML\uZmI)/!Yì4J:?uN{^.~jN9)/1o %98,X.6.mV[amV Ҟ$;!YMp(~16@VL:˝ZՀ{ x0n{M皸Ks3wLI}V`?=;gÁ>a9V@{?|DمjۨntB^B뫺=˓XwAJeR}ĉPΡ -ݝ|6hR;CanLyqdw)n;IIW;Qż! 4E%}>Xeif} A< _hA^SǙƝzD#.s/Z:˪wk%P[o[HY#;Vt 7_RRʽ8HVں\Y,L Ԛ`uz^Pc/I0lHF̣m@ЁŮuS@خ)mZy6vnlҰ3@_~%2Bb;  A3T34GѶXrGj";A1/wXX`{lYُWBYHqM<[ۓ.UWIe^F8k-X @*OY<'l6r51de^}el@ZMy#푱` 8b { PPӶgVOu2 ?gRiI 1}tј^=i%P&:$Y,*}4:wT2ƇcX50_bg8ABdy MEK5-:2U\~mAz$:AԇwY#4z4k,P.Ãug/|L(*I[<(_]p3+n20h $ojTHD0DK@vK©LI>rK.-!6JS"s`#Bg]sQ:5~NCƈ- GP}#CϬ\{]Y\8arOɠ".V~A9-T/l0=Kf,#j̴ ;,\|?`t>^I9=k- `HۑX<} !7HZbJZ+8|i3q]{V6pP4 6pK*M$jxYb+Lx[XV2V۸tLt xL> hHB3n=T>hl;mqepD|]FTƷ.Xlg-i^'Z(g`NLg/$N42-dݨthIl^4O*6@u0Fj`zgeqL8d΂գY`Umr<+fD[z-DQɗSeތ B}&?R S):ۋD8ϛﳚS[%ːWCP-`.C0&UooJ,#3ͷ_~CB鬩~GvmX%`&jŅiTO/*=P:ޥ9}^OcC4k-F"3'ɣ,U1GQd/=Y=֟ Axu",;ˣs貵BԥYG O'و)m"1IS%"P#a$kfGfg5ў)Н(dÛ+R]vT/=e> u x جWzo:4b[٦ 60 )B;*P7]xz5%4iJ@rƞ'&Τ|VL"8]H۔G6KS(10mC-luJXB{1I|*0n6n>:LUU8;S6VujPmxΗlUHL( g hZiG=cu s-/r@zRjK^pe*/Mvf'TM1I&91hyrrH%f{=5: 2iMP ym27sЯ8uNo1xI4Ү ՙ&hsF?3ZՕM\zo#eާǗT"e.j|]%g#_B)a7Uat0IP޻#C4T~9ZU=_tﾽ͒N^|sFʂ59]ԥ`րYkp3*/OgǓS ̺(o7cxkH'mWdY-x[a2g'>K~{h<l8~ ?S|ƩSɟޚ~|8[Iy-/A/{vH+$v|* rS[`By}ɢёa9L(S( ^A$oew۳ Hy.fч'.7/%u"V gGI< 񅏼0.hI7MMT{rJIj?*z,tVRvP@ک.][[%#=)8gUwuM8^55&8M^ uy-Ŭ%.~d}9#(uUղ"zZv{&Dk]?V1sbOXN;׷7`۬]ۈpڳ9ɸ.Мf0EI%EB_9(} zG)&e I(WksI@~j1HfF5^:r^|R]0:E& zj^Wv0)cf̳출aD`$cŇKaOZF/u榕9iQ}0LAz[Dk.E)D%j/r?hࡿfWRJ:c;=>.0`[~Jl҆&]ã);׍O c_A\*\+N`>DAGЧw'"|pHS7`8DP<؎kG?;+;pNML3 uz>#`Qڔ+րks1mtDkz Kmpg9?D6uofXetd49* v`.SY|uR l5:)2* czۢ$TOXB|ߚL%Җdtw'?yk2'fCB"3cUAFZGJ 4`IB[++Щi4cse.^O \_ s3Bw36AUlM0*<3,y;9ܑy` L['Qõcw?'`P%eMtnc\AqSkUdNIJqMj'jl*aRu;jVgey}<Y9LcX119M7Qң 1sSU?I ͓.Ju]\j+usd9HIZӭ"