libdnssec8-3.1.4-bp154.1.87 >  A b|uf!M@eeeV_=0=-0TawrP*ud\rԿT0C"-N OqUB=i'-{ź9Z +D;P=x3 [sVZ:9bv{g}iX`{DӿQnx=wrLiaֺoGznRaWtAuNܗm„czcQ!@0;(g17e7P<_>$v77+)uXG'=6cHq=h-G\5Y P;9XO9 k@ӖVFݣ\uD>p@g?gd   DPTdh      N dlv(8898: 8>c@cFdGdHd$Id,Xd0Yd<\d`]dh^dbdce?deeefeleuevewfpxfxyf zffffgClibdnssec83.1.4bp154.1.87DNSSEC support functions for Knot DNSKnot DNS is a DNS server. It implements only the authoritative domain name service. It uses a multi-threaded and mostly lock-free implementation and can operate non-stop during zone addition or removal. This package contains a library for DNSSEC support functions.b|u"obs-power8-05 SUSE Linux Enterprise 15 SP4openSUSEGPL-3.0-or-laterhttps://bugs.opensuse.orgSystem/Librarieshttps://www.knot-dns.cz/linuxppc64le b|ub|u520de1d577326987f7400ccac485986a384ccb296c580b48ec71624cbf6cc9aelibdnssec.so.8.0.0rootrootrootrootknot-3.1.4-bp154.1.87.src.rpmlibdnssec.so.8()(64bit)libdnssec8libdnssec8(ppc-64)@@@@@@@@    /sbin/ldconfig/sbin/ldconfiglibc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.25)(64bit)libgnutls.so.30()(64bit)libgnutls.so.30(GNUTLS_3_4)(64bit)libgnutls.so.30(GNUTLS_3_6_0)(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.17)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3a@an@aD@a @a @`ݮ@`f@`@`q`_@`\{@`@`_@____^@@^@@^@@^@]\HW@\3?@\*[@[@[ݍ[IZ@Z@ZWQYYYXWDB@W1@VwV@V@V@V@VTQ@VCU6@U6@U@U&iU&iTTq@T@T@Tk4Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky Jan Engelhardt Michal Hrusecky Jan Engelhardt Michal Hrusecky Michal Hrusecky pgajdos@suse.comMichal Hrusecky Marcus Rueckert Marcus Rueckert Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky pgajdos@suse.comMarcus Rueckert Marcus Rueckert Petr Gajdos Marcus Rueckert Marcus Rueckert Marcus Rueckert mrueckert@suse.dekbabioch@suse.commrueckert@suse.dei@marguerite.sumrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.detchvatal@suse.comondrej@sury.orgondrej@sury.orgpgajdos@suse.com- update to version 3.1.4, see: https://www.knot-dns.cz/2021-11-04-version-314.html- update to version 3.1.3, see: https://www.knot-dns.cz/2021-10-18-version-313.html- migrate to user creation via sysuser-tools - run spec-cleaner on spec file - update to version 3.1.2, see: https://www.knot-dns.cz/2021-09-08-version-312.html- update to version 3.1.1, see: https://www.knot-dns.cz/2021-08-10-version-311.html- update to version 3.1.0, see: https://www.knot-dns.cz/2021-08-02-version-310.html- update to version 3.0.7, see: https://www.knot-dns.cz/2021-06-16-version-307.html- make sure we have getent and groupadd/useradd in pre * added dependency on shadow and glibc * might be related to bnc#1186023- update to version 3.0.6, see: https://www.knot-dns.cz/2021-05-12-version-306.html- Make /etc/knot directory owned by knot - fix reload action- Update descriptions, remove unsubstantiated claims.- update to version 3.0.5, see: https://www.knot-dns.cz/2021-03-25-version-305.html - Update description based on homepage- Trim marketing wording from description. - Drop old rpm constructs.- version update to 3.0.4, see: https://www.knot-dns.cz/2021-01-20-version-304.html- add incompatibility warning about 1.6.X version when updateing - rename back to knot- version update to 3.0.3- version update to 2.9.7, see: https://www.knot-dns.cz/2020-08-31-version-296.html https://www.knot-dns.cz/2020-10-09-version-297.html - obsolete only pre-2.0 version- remove rosedb conditional as lmdb is required in general now- replace conflicts with Provides/Obsoletes- fix dependency: python-Sphinx -> python3-Sphinx- use upstream example config file with correct syntax- version update to 2.9.5 - Bugfixes - Old ZSK can be withdrawn too early during a ZSK rollover if maximum zone TTL is computed automatically - Server responds SERVFAIL to ANY queries on empty non-terminal nodes - Improvements - Also module onlinesign returns minimized responses to ANY queries - Linking against libcap-ng can be disabled via a configure option- version update to 2.9.4 see NEWS- version update to 2.9.2 see NEWS- update to 2.7.6 - Improvements - Zone status also shows when the zone load is scheduled - Server workers status also shows background workers utilization - Default control timeout for knotc was increased to 10 seconds - Pkg-config files contain auxiliary variable with library filename - Bugfixes - Configuration commit or server reload can drop some pending zone events - Nonempty zone journal is created even though it's disabled [#635] - Zone is completely re-signed during empty dynamic update processing - Server can crash when storing a big zone difference to the journal - Failed to link on FreeBSD 12 with Clang- update to 2.7.5 - Features: - Keymgr supports NSEC3 salt handling - Improvements: - Zone history in journal is dropped apon AXFR-like zone update - Libdnssec is no longer linked against libm #628 - Libdnssec is explicitly linked against libpthread if PKCS #11 enabled #629 - Better support for libknot packaging in Python - Manually generated KSK is 'ready' by default - Kdig supports '+timeout' as an alias for '+time' - Kdig supports '+nocomments' option - Kdig no longer prints empty lines between retries - Kdig returns failure if operations not successfully resolved [#632] - Fixed repeating of the 'KSK submission, waiting for confirmation' log - Various improvements in documentation, Dockerfile, and tests - Bugfixes: - Knotc fails to unset huge configuration section - Kjournalprint sometimes fails to display zone journal content - Improper timing of ZSK removal during ZSK rollover - Missing UTC time zone indication in the 'iso' keymgr list output - A race condition in the online signing module- update to 2.7.4 Features: - -------- - Added SNI configuration for TLS in kdig (Thanks to Alexander Schultz) Improvements: - ------------ - Added warning log when DNSSEC events not successfully scheduled - New semantic check on timer values in keymgr - DS query no longer asks other addresses if got a negative answer - Reintroduced 'rollover' configuration option for CDS/CDNSKEY publication - Extended logging for zone loading - Various documentation improvements Bugfixes: - -------- - Failed to import module configuration #613 - Improper Cflags value in libknot.pc if built with embedded LMDB #615 - IXFR doesn't fall back to AXFR if malformed reply - DNSSEC events not correctly scheduled for empty zone updates - During algorithm rollover old keys get removed before DS TTL expires #617 - Maximum zone's RRSIG TTL not considered during algorithm rollover #620- seems we no longer need jansson- limit geoip support to opensuse- update to 2.7.3 - Features: - New queryacl module for query access control - Configurable answer rrset rotation #612 - Configurable NSEC bitmap in online signing - Improvements: - Better error logging for KASP DB operations #601 - Some documentation improvements - Bugfixes: - Keymgr "list" output doesn't show key size for ECDSA algorithms #602 - Failed to link statically with embedded LMDB - Configuration commit causes zone reload for all zones - The statistics module overlooks TSIG record in a request - Improper processing of an AXFR-style-IXFR response consisting of one-record messages - Race condition in online signing during key rollover #600 - Server can crash if geoip module is enabled in the geo mode - changes from 2.7.2 - Improvements: - Keymgr list command displays also key size - Kjournalprint displays total occupied size in the debug mode - Server doesn't stop if failed to load a shared module from the module directory - Libraries libcap-ng, pthread, and dl are linked selectively if needed - Bugfixes: - Sometimes incorrect result from dnssec_nsec_bitmap_contains (libdnssec) - Server can crash when loading zone file difference and zone-in-journal is set - Incorrect treatment of specific queries in the module RRL - Failed to link module Cookies as a shared library - changes from 2.7.1 - Improvements: - Added zone wire size information to zone loading log message - Added debug log message for each unsuccessful remote address operation - Various improvements for packaging - Bugfixes: - Incompatible handling of RRSIG TTL value when creating a DNS message - Incorrect RRSIG TTL value in zone differences and knotc zone operation outputs - Default configure prefix is ignored - changes from 2.7.0 - Features: - New DNS Cookies module and related '+cookie' kdig option - New module for response tailoring according to client's subnet or geographic location - General EDNS Client Subnet support in the server - OSS-Fuzz integration (Thanks to Jonathan Foote) - New '+ednsopt' kdig option (Thanks to Jan Včelák) - Online Signing support for automatic key rollover - Non-normal file (e.g. pipe) loading support in zscanner #542 - Automatic SOA serial incrementation if non-empty zone difference - New zone file load option for ignoring zone file's SOA serial - New build-time option for alternative malloc specification - Structured logging for DNSSEC key submission event - Empty QNAME support in kdig - Improvements: - Various library and server optimizations - Reduced memory consumption of outgoing IXFR processing - Linux capabilities use overhaul #546 (Thanks to Robert Edmonds) - Online Signing properly signs delegations and CNAME records - CDS/CDNSKEY rrset is signed with KSK instead of ZSK - DNSSEC-related records are ignored when loading zone difference with signing enabled - Minimum allowed RSA key length was increased to 1024 - Bugfixes: - Possible uninitialized address buffer use in zscanner - Possible index overflow during multiline record parsing in zscanner - kdig +tls sometimes consumes 100 % CPU #561 - Single-Type Signing doesn't work with single ZSK key #566 - Zone not flushed after re-signing during zone load #594 - Server crashes when committing empty zone transaction - Incoming IXFR with on-slave signing sometimes leads to memory corruption #595 - Compatibility: - Removed obsolete RRL configuration - Removed obsolete module names 'mod-online-sign' and 'mod-synth-record' - Removed obsolete 'ixfr-from-differences' configuration option - Removed old journal migration - Removed module rosedb - changes from 2.6.9 - Improvements: - Added zone wire size to zone loading log message - Added debug log message for each unsuccessful remote address operation - Bugfixes: - Zone not flushed after re-signing during zone load #594 - Server crashes when committing empty zone transaction - Incoming IXFR with on-slave signing sometimes leads to memory corruption #595 - packaging changes: - enabled geoip module: new BR: pkgconfig(libmaxminddb) - enabled cookies module - enabled queryacl module- update to 2.6.8 - Features: - New 'import-pkcs11' command in keymgr - Improvements: - Unixtime serial policy mimics Bind – increment if lower #593 - Bugfixes: - Creeping memory consuption upon server reload #584 - Kdig incorrectly detects QNAME if 'notify' is a prefix - Server crashes when zone sign fails #587 - CSK->KZSK rollover retires CSK early #588 - Server crashes when zone expires during outgoing multi-message transfer - Kjournalprint doesn't convert zone name argument to lower-case - Cannot switch to a previously used ksk-shared dnssec policy [#589] - update to 2.6.7 - Features: - Added 'dateserial' (YYYYMMDDnn) serial policy configuration (Thanks to Wolfgang Jung) - Improvements: - Trailing data indication from the packet parser (libknot) - Better configuration check for a problematical option combination - Bugfixes: - Incomplete configuration option item name check - Possible buffer overflow in 'knot_dname_to_str' (libknot) - Module dnsproxy doesn't preserve letter case of QNAME - Module dnsproxy duplicates OPT and TSIG in the non-fallback mode- Update to 2.6.6 - Features: - New EDNS option counters in the statistics module - New '+orphan' filter for the 'zone-purge' operation - Improvements: - Reduced memory consuption of disabled statistics metrics - Some spelling fixes (Thanks to Daniel Kahn Gillmor) - Server no longer fails to start if MODULE_DIR doesn't exist - Configuration include doesn't fail if empty wildcard match - Added a configuration check for a problematical option combination - Bugfixes: - NSEC3 chain not re-created when SOA minimum TTL changed - Failed to start server if no template is configured - Possibly incorrect SOA serial upon changed zone reload with DNSSEC signing - Inaccurate outgoing zone transfer size in the log message - Invalid dname compression if empty question section - Missing EDNS in EMALF responses- update to 2.6.5 - Features: - New 'zone-notify' command in knotc - Kdig uses '@server' as a hostname for TLS authenticaion if '+tls-ca' is set - Improvements: - Better heap memory trimming for zone operations - Added proper polling for TLS operations in kdig - Configuration export uses stdout as a default output - Simplified detection of atomic operations - Added '--disable-modules' configure option - Small documentation updates - Bugfixes: - Zone retransfer doesn't work well if more masters configured - Kdig can leak or double free memory in corner cases - Inconsistent error outputs from dynamic configuration operations- update to 2.6.4 see /usr/share/doc/packages/knot2/NEWS- fix tmpfiles scriptlet- package /var/lib/knot - run tmpfiles scriptlet during install- update to 2.5.3 see /usr/share/doc/packages/knot2/NEWS - use libidn2 on TW and 42.3 - following modules stay static: - dnsproxy - onlinesign - moved modules to shared building: - dnstap - noudp - rosedb - rrl - stats - synthrecord - whoami- update to 2.4.1 see /usr/share/doc/packages/knot2/NEWS- update to 2.2.1 - Bugfixes: - Fix separate logging of server and zone events - Fix concurrent zone file flushing with many zones - Fix possible server crash with empty hostname on OpenWRT - Fix control timeout parsing in knotc - Fix "Environment maxreaders limit reached" error in knotc - Don't apply journal changes on modified zone file - Remove broken LTO option from configure script - Enable multiple zone names completion in interactive knotc - Set the TC flag in a response if a glue doesn't fit the response - Disallow server reload when there is an active configuration transaction - Improvements: - Distinguish unavailable zones from zones with zero serial in log messages - Log warning and error messages to standard error output in all utilities - Document tested PKCS #11 devices - Extended Python configuration interface- update to 2.2.0 - Bugfixes: - Fix build dependencies on FreeBSD - Fix query/response message type setting in dnstap module - Fix remote address retrieval from dnstap capture in kdig - Fix global modules execution for queries hitting existing zones - Fix execution of semantic checks after an IXFR transfer - Fix PKCS#11 support detection at build time - Fix kdig failure when the first AXFR message contains just the SOA record - Exclude non-authoritative types from NSEC/NSEC3 bitmap at a delegation - Mark PKCS#11 generated keys as sensitive (required by Luna SA) - Fix error when removing the only zone from the server - Don't abort knotc transaction when some check fails - Features: - URI and CAA resource record types support - RRL client address based white list - knotc interactive mode - Improvements: - Consistent IXFR error messages - Various fixes for better compatibility with PKCS#11 devices - Various keymgr user interface improvements - Better zone event scheduler performance with many zones - New server control interface - kdig uses local resolver if resolv.conf is empty - new BR libedit-devel for the interactive mode- update to 2.1.1 - Bugfixes: - DNSSEC: Allow import of duplicate private key into the KASP - DNSSEC: Avoid duplicate NSEC for Wildcard No Data answer - Fix server crash when an incomming transfer is in progress and reload is issued - Fix socket polling when configured with many interfaces and threads - Fix compilation against Nettle 3.2 - Improvements: - Select correct source address for UDP messages recieved on ANY address - Extend documentation of knotc commands - drop knot-2.1.0_pkcs11_check.patch- enable libcap-ng- fix configure check for pkcs11 support: adds knot-2.1.0_pkcs11_check.patch- fix soversions- update to 2.1.0 - Features: - Per-thread UDP socket binding using SO_REUSEPORT on Linux - Support for dynamic configuration database - DNSSEC: Support for cryptographic tokens via PKCS #11 interface - DNSSEC: Experimental support for online signing - Improvements: - Support for zone file name patterns - Configurable location of zone timer database - Non-blocking network operations and better timeout handling - Caching of Critical configuration values for better performance - Logging of ACL failures - RRL: Add rate-limit-slip zero support to drop all responses - RRL: Document behavior for different rate-limit-slip options - kdig: Warning instead of error on TSIG validation failure - Cleanup of support libraries interfaces (libknot, libzscanner, libdnssec) - Remove possibly insecure server control over a network socket - Remove implementation limit for the number of network interfaces - Bugfixes: - synth-record module: Fix application of default configuration options - TSIG: Allow compressed TSIG name when forwarding DDNS updates - Schedule zone bootstrap after slave zone fails to load from disk - avoid activating the intree copy of lmdb- update to 2.0.2 - Out-of-bound read in packet parser for malformed NAPTR records (LibFuzzer)- split out shared libraries, knot-resolver uses some of them and atm we are forced to install the whole knot2 package.- lmdb seems no longer optional- create a new branch for knot 2.x starting with 2.0.1 - Bugfixes: - Do not reload expired zones on 'knotc reload' and server startup - Fix rare race-condition in event scheduling causing delayed event execution - Fix skipping of non-authoritative nodes in NSEC proofs - Fix TC flag setting in RRL slipped answers - Disable domain name compression for root label - Log via journald only when running under systemd - Fix CNAME following when quering for NSEC RR type - Fix refreshing of DNSSEC signatures for zone keys - Fix binding an unavailable IPv6 address on Linux (IP_FREEBIND) - Fix infinite loop in knotc zonestatus and memstats - Fix memory leak in configuration on server shutdown - Fix broken dnsproxy module - Fix DNSSEC KASP timestamps parsing in strict POSIX environment - fix multi value parsing on big-endian - Adapt to Nettle 3 API break causing base64 decoding failures on big-endian - Features: - Add 'keymgr zone key ds' to show key's DS record - Add 'keymgr tsig generate' to generate TSIG keys - Add query module scoping to process either all queries or zone queries only - Add support for file name globbing in config file includes - Add 'request-edns-option' config option to add custom EDNS0 option into server initiated queries - Improvements: - Send minimal responses (remove NS from Authority section for NOERROR) - Update persistent timers only on shutdown for better performance - Allow change of RR TTL over DDNS - Documentation fixes, updates, and improvements in formatting - Install yparser and zscanner header files - Improve lookup of libsystemd build dependencies - Fix compilation warnings in endian conversion functions on OpenBSD - changes in knot 2.0.0 - Bugfixes: - Fix lost NOTIFY message if received during zone transfer - Disable fast zone parser when compiled in Clang (workaround for Clang bug) - kdig: Record correct dnstap SocketProtocol when retrying over TCP - kdig: Hide TSIG section with +noall - Do not set AA flag for AXFR/IXFR queries - Features: - DNSSEC: separate library, switch to GnuTLS, new utilities - DNSSEC: basic KASP support (generate initial keys, ZSK rollover) - Configuration: New text format in YAML, binary store in LMDB - Zone parser: Split long TXT/SPF strings into multiple strings - kdig: Add generic dump style option (+generic) - Try all master servers in multi-master environment - Improved remotes and ACLs (multiple addresses, multiple keys) - Basic support for zone file patterns (%s to substitute zone name) - Disable zone file synchronization by setting 'zonefile_sync' to '-1' - knsupdate: Add input prompt in interactive mode and 'quit' command - knsupdate: Allow TSIG algorithm specification in interactive prompt - Improvements: - Zone dump: Do not write class for SOA record (unified with other RR types) - Zone dump: Do not write master server address into the zone file - Documentation: Manual pages are included in HTML and PDF - drop patches which are included upstream: 0001-loosen-openssl-dependency.patch 0002-make-configure.ac-compatible-with-old-tools.patch - also drop all buildrequires just needed for autoreconf - new buildrequires: pkgconfig(gnutls) >= 3 pkgconfig(nettle) pkgconfig(jansson) - create devel subpackage - enable rosedb and bash completion- local state dir should be just /var- enable dnstap support for factory and newer: - new BR: protobuf-c and libfstrm-devel - prepared lto support but not enabled yet, still need to find out which distros support it- update to 1.6.3 - Performance drop for NSEC-signed zones - Proper handling of TCP short-writes - Out-of-bound read in zone parser for long domain names in origin (AFL fuzzer) - Out-of-bound read in packet parser for TSIG RR without RDATA (AFL fuzzer) - Out-of-bound read in packet parser for malformed NAPTR RR (AFL fuzzer) - CDS and CDNSKEY support in zone parser - Add defaults for TCP config options into documentation - Detailed error message if zone reload fails - refreshed patches to apply cleanly again: 0002-make-configure.ac-compatible-with-old-tools.patch- update to 1.6.2 - Limiting number of parallel TCP clients (max-tcp-clients config option) - Ignore refresh and transfer events on non-slave zones - Compilation with Dnstap support on FreeBSD - Possible file descriptor leak when terminating inactive TCP clients - refreshed patches to apply cleanly again: 0002-make-configure.ac-compatible-with-old-tools.patch - moved autoreconf -fi to %build so it wont be tried in quilt setup or similar tools - move up the %if case for systemd in for the preun scriptlet to avoid warning about empty scripts on non systemd distributions. - used xz tarball: new buildrequires xz- Add deps on the docu packages to regen documentation - Enable systemd integration fully - Add dep on libidn - Cleanup with spec-cleaner- Only require lmdb-devel on (Open)SUSE 13.2 and higher- Updated to 1.6.1 Bugfixes: - Journal file would sometimes outgrow its set limit - Fixed incompatibility with OpenSSL 0.9.8 - Proper handling when machine hostname cannot be retreived Features: - Support for DNSSEC Single Type Signing Scheme - Compile with lmdb-devel to add support for persistent timers- Updated to 1.6.0 Bugfixes: - Fix zone expiration when AXFR/IXFR is being refused by master - Fix forced zone refresh on slave (knotc refresh -f) - Persistent timers database opening after privileges has been dropped - DNSSEC: RFC compliant processing of letter case in RDATA domain names - EDNS: Return minimal error response for queries with unsupported version - EDNS: Fix interpretation of Extended RCODE Improvements: - Maximal size of persistent timers database increased from 10 MB to 100 MB - Added logging of persistent timers database errors Features: - Persistent timers for slave zones (expire, refresh, and flush)/sbin/ldconfig/sbin/ldconfigobs-power8-05 16523236183.1.4-bp154.1.873.1.4-bp154.1.87libdnssec.so.8libdnssec.so.8.0.0/usr/lib64/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Backports:SLE-15-SP4/standard/5a02deb01ec9f919b8aa1b90d190b0d0-knotcpioxz5ppc64le-suse-linuxELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=c49492e60caacd87169d990b1507b6c1cc05b11a, stripped PRRR RRRRR9!ݪ$"0.AK*\5=YYUT7!+.F0XXOe}XpFڝw!X?$51 m0 Aّ|%Z;ki T/z%_qN,=YX$ T4+Qf𥿉In`w dv;)F 6P/2ezYxU O:BU]BRF4=)Ƿx_;Ał; W#+\JsI $T/AUȬEs>҆h ֺK[dՄ 4%QUqdtS.dWpK|U=a#Ŀ\ѻ$F\i2HobmG,}l^x^XSv rи##h82M؀߶KeuQOPt}gZ~ !+;(t #tG8r6]{S3sKa`M%̡&ɫCG—Pڵ":`.je k帅z13k)(ZE0~gK&D=K6B`3+U/20(~>]5ѻ#͙L_PV)ĩo˹=ULf*r=δ[i|vU5_th*5_CG9Ĉ)KM6{uIT56QL[u9%,Ĩp.yntrnX:K G@(;U5= ٍaQ4׃uYX]zvz+K=8|j,SAJҳ%Z}9wu4Lu{Ky (cf ]\ O mJ,sN|>FoO.e Lj9:aɢ+yaeN ;9W_N! ۶(69BD6qTqL<*Ձkكҫ\jr3u_>G|b痵nfs<A$742lN-4&Tb/> C9_}"3"7f߷Zw:ei f-nGιr:rڗCn7`R@-VLωU%BO|ī|[粨74G{ye](3շ\l+QmKU!>|C! _  Z5.$=M>5|>۠Ԣt"wcG}].cQ4sO7)"PFv>M7D|'imy;KH3(ճ{N.-ZL;“YYXq0lx ׆ j8 Pnrdn#|؞H/n?.% u3?w8Y*'V NS8zr2Eg_GƖF$ހUvoWTƘŃ` B|;Ӏ(UiYusMY !m/j,#0,d%VIF&[:>4y`BM\hgCr MtJ8O?R_veMr\ _3}~}B,Oq%i)r| ˩ϺEצc9%UBBM<-3"ʼ㸰V\Z|\6O{n֍B">C^T1fSʮB d&ɝA>B6Q/eb ^]aDd-lgUqrfyF.*/䭔CCfi3 Ml#p#bnciYICwCw oa618vOz=w}t`d(UЯ|dB/_ g,zz 7#5'YZkUhdn  5B^h<{fWE{tΡK >#()dKON8P'NhUy rRVNyު'%,PT"ȫ >ߗ|i{WMwBUq=qt\b [&A J u%xRrhR %Z.Ms{ӻT* ZRJ`Qgc7 (Yg?woOL$k~MJWRyeP{wK2d;Lt:dB5Gqe'|f;ByM[ &wΫu*=Oվ"#^,RslV1jpa l4-I"Dbrt gOVw|"̽ l_[pOruhJ GJ\ghA6L2k)+r "ƕms: ElrB ?&h;A(`,LN d40^@̨!z,ϴ)7/fC:D(mY’|>Njڻծ87KFtEԸ@ k+bW(?:dn%Ɩߴ@Ba&MEj"G0XiYy-X} (׍ {W}"bbI}cl^evDK9T-ݥV1gTnnE"Zpo[>b7Tk&ۍ"-X~g8f%bLC}Gv6֗GVӠ^L1uuU?Vn~tmq: &uB7&{Ny, iԊQ.@%0[fxWyśs$jMd~YW /WxiC^"Բ~Gb4 !mrܮ^+_dC?Y)'"x#rTJD ȏ *d\uqQ{IW4|Qqo!"),iH @6Djh,](?m)b}ć-lY\ w>?b4Ԑ}= F~~!P&4h:i*N:@l BAIU'L9Mn/UVLwٯ^K328 2h:bSDXB-. =[=n`-Z*94(`Gv_Ä:⇑R4 ݆ϙqubKv:c[UH* Gv1Vq0]s֥ӧ{lnmUUa[CGոT4ۙ'4qJzjf*k*3>'p5?BV x"Rҳ8#h?6bT#ZҮe O#,`ahd%țrw]B~(%&]]w:TbRڤHЌh3QDr+ӌPserYm]u5]k)0+r,n)7O_IlQWÐy0&sٺuI&-THS;[%B~T^5(`Ȍȶ"pcqҁq5i(%vO#~&C¢o"v8sŖg#} Sk2G?uT4Haf NH% vu~A ˮ[RuJBNBq>\"1 *c=.,/ tI93OH aX`)\A\'~-N;6aYOr4Lf*Dž<`L( 6{U I[nD`R_S Og8 ?D Љq!`%zgjnRJsw1#VӽfOyL$WX4vNraPG ,[FmK>oi k=;#ZQ^(9󛪭W#7\$./PJS­i0o']D^ȹMHx䊡A#nbY )eePt6Rm3yas.m:.zǯNjn sW=z@RRH\a^Z8V,;e h _>REJd+IOs9 Hzn/Œf6P=H]"{?NXuNm4܏#8Nt4lE^ec%?SMaL.Ita.]dq2/ Vژ$Gܹ6Hp.335=aWߺ.l@x?Y>LK+ŞzNTF5W0S!饙X4-R!TKɘ!>^,QM?'VϛtPxy Ҥ`]h%nT CJ|Slooa2n;|bE<ʖ\uG7>j>&ki W)|ҩ8 ʤ<EPX3A ?Yj ~۽ U5I R6O0ưxmMdi;e9B2ܷmN6PfaV?by<|w-gLYښ)@!JVLrG=C`͑Kʂ-pߜ@TJs&AtUvw:*I:x=NGm'ӳ9Yv|!(b-/sOPý8{Z&仢[#)7Uu؉9MԪݿ_@ srz_aWVD.ci,V>Iu4续B[c3K*x(%f(/0Zv$CO5k}yF™`Gegkj8ZpޖiLPð,S$Wϰi G+%y^o S %-5_E'o*d;/ :("9l d~^iV=w;HW#TL-7F̜B\cJ%UCX$IT56f1ث^]i3E `}HsܜWo(lr ;FR87H^CjÈ$>ڝyG:Qhs"Y; eM0T_̡r;X[vҴ@&k©Ӭ?L!\1'}ՠW½EsJ5R|ʓ!@B-76qPa3fևN*ۨp3CCŒ~(w,2F8J3 {t)c^ =IUOwJ+*D40ֆёM̯J00{It_&9qK) 10g^WbbK=A9(E9,?%4ɗ5ajp̀ zb ӯmT" ߺ_~t>]ؿζtF/R}5o ͛rec4 %uy5e gwSgy1Gbq٦?;P8fpk8nS` 9}oe)u񰟌`NAg?r̟'蕡ӏ8a#3{7hU 9s`:DQvB' ̂(FC"9hOEtgU4B.)7/rՈiF NAݾ$)) aѺR[AN~Sk WCMJ7YVΥú[4ͬ_P^JTpa QZ_YuGt &>w 0# ީuWjay`bqzImJż J/&{#^<[X+bapǔHFYePxhȸV8Qv$Mg:nFq7 G/[\sZ=Թ@0ώhD#ϲ$P>Z)L֥!R* Rw&v@)r[1 yb:=SxLg`fSl?0BN픮&QPڨ6xx?np^}P)8L+m g_c ™-bw:LUdbuO˕|#-_6B-@qg3ZLljڡfi\L=os&O%w?TӭX]F,[m>k.v DL̩;jͦ__oUyBJI.eOў6J3oE]-WIZAkI=[yAvN/qrL h_D҅h(#eiw՚= cdFY{^6pP~ֱFs%e*>x1{5|^z0c=uĽU]r B3Aj}BB^a"c.%A~ "Gk5Y)8kԍᬵŎ6V 7Z+3S!&zlf;|NfR&ʆK#Ԧ;jx;D93zȍFuUvg!zWaݽ0~ȥ{޹tj9ê3gֆsi5 |P`O[\ks8^(RYX LUwWY64o~+__֎?DW$iGTtĚʡI[' /SvVRt,S Qo ԍL?dB~-^aa{6~e/չyDkEWz=m]D1e&‡9"w i!P"8 #D/Fpe0F @P?GUB%CHAa6JԒ`|7{Pio|Q]n%sH#9Z+!UٓQ_FPIJBO8 F3e O݆inkg">υxgʋ_ct4ʀ̢@r 3<3G$^/^ QՃ+&[n4Қ&tv ~8&%$~='Z?n?ą?n~9 ]*+dL:@EXkj!XW-z|.|%6ev'_.44?^o Pv{}B^gɿwC-GJZŒ<ӆW`T"3;ew8b²mײǗk'{99ϋ$B. SFOZKD] nxE Ӂ91A [tw)\ԔOI~n$f63+B9` ō`ks#g۴c8w|"v/۫*jxVI"#Dċ]?L}qͶ3mw*#dR/CA-AEe#dz=Y>6lQT AJҊ8ʻR\jUٝԜgk=e/]:3H ݆ݶO%$q_?Dn:Vd[mpp#` rbO'Z'ˢKl&6.]!;mwɧaž'U æ'C] !/}n8%FK<>zJ]/uVhV?&6NP:>(wٯ3⟶()=4gְ*n_.S1p?m#5 #?["',H^Z'@e#J0 (' ㍪2+7j7Z٫ eCMYc(+K:( HMvόap8Si-YN!)7Gt2txx3]qdo8cxDru>?)R$L|FϷLerS?/NT%]'8lϡP[Bhiv%)3vC_.|W(nŲܖRkBuHHrrqw)X24!ZBŵ=/o*[!hWzHiaH?*=E ]#5wEt8{3tַ= =bDR#vCqU@t4^?Iv+0nד! n [Ve.e:ʝq(3) _h)M'NaPL9 .6a|_NX1a!~FU { fg;8M,=T!Nܢ\R^:UƉ {z/5f)_->\Dev’)ؾZo(wzmQ2xae*吵+fkGx t&=!,{&tOzUxzԬI F# VCɯT /!oc!fSa]9nrLY.8Ժp eA62pKPeGݽ]pN52JW^Ej)+1oj6nmX,:p -:XZԧnpAP' @[tY4TmS-+)T]OV_eJdT3qF5:{Am b7qw58crcPAUWwtPcJ 4S?p.,+1RwQI 1%5Ut36m{)A Rt]>(ƇOe`>OU-ІE+m2ݐI}e5y3&??)[+gNeqH5(8-@?B.6uZ32mSUaFo!(5Z\H Hؗ@U_ypFY}w /(nC0CrHcۿjoTSF4:J }C$胏$ա-3*yCd'\i24u,qLo@yu%Ȗg$H?^'wuK`RK7Ivs\$:wMPBK>Gorׁ+i/4w2]0t&KȘ.;h;cY36 ̷~ _;9z8|+nwS?f!oə $a`VMN%VW<݇|qJ\8#$9‡:;2V(<,v2=gwU V(lt2–|BN\VZ(_YbӝP㘂jķX$R+BXku^G6W9a$Ip%- ]>0g=Y#n%;VP_,p4l$%Ⱆ4=쨸_/Cq$'p&7MszcG k QxM?Jn" $>j?̒jhqHTy$ {y`VTzk54MqVy1/<1uu GYO>'/d|ॏՅ7Mvx%dM#Tގg:afs YsZ vmJ>|{CY\Z15$xFMP?dĶe˖°B=c_%S-3 TQ_XU1xX+iMCro0Kec QK \;`PC[t}Qe}{6*XYv-d-hu@>xOѲ>D_s0je/w1ؑ4mOkkQn[h\J7kpNy՘6uivg ϵXR% A07^nׅLyAH[3I\Y"VWw_TT{υ<8l%9ZvV  /jk׮K^9Bqv_O0>Og d$.A5rY nĨtF"[NE9"-T]0@c-lD#hKlؤc njbP ~][ 8p.x%)H\QE"̌x UN yAtyvh̘ART2g'bcfP@[ 6mg, F;Dshwϛ^(q91%0 A硋$N.t tcMD0?t"Ϋ%+݄sFVU~JϤtOVT>xV% EN"{A;ds#fu E!<׸NZq|hᅓ~}=mob+9:?= \ۡExmg~TQkH|}ɵS{r B!2)Zt:̮6OzL ꈨLlK=G ڲ.g=^bv9,?> &#CO@= <7 b*請L SCSֲHY|2G>ٓᢃN#{^Ι04ItQK/V)YӾFiS m>qEԷѓ 7)W.{ I\A,{џwV" `A2B},J >YRDt|z[6[tP$IFxL$om^ŪtLf]T I]G+P Dq|&%*N*8olsc‚W= tz9E7~Ǹt[7N>dچ]%3%2rUL 0&tAb£~_,y*Q<"APH`k2E[|]_:35w\1lh' G "fI=!{?q* p$pFȐUK;[wy/Xn8w\bK_w7̻pשhP}=seD :uw_d8 g)cIbfu ."Aԑ~uSQY>!"u`q 87.NU eMtA:;E,=msX%NlxBPvQΝ0v(4k.ws!Z!V-U5 bTґ^_aӝaV'^A5Wc.B !HRt_TSW?:ηz64>O}`&_/r'&E$i/zRb3TSG!uuϿIX2Z.?r Q:,cy?Y;{QϻS鎉Y3[QH 4UjPfIDATΟs Qo̹ 2_㚾-;| x/@ns5BSKVK4΢S8 ;Z V6>Ly޾E; @?)VCD߾aiPWJ&#}џ;Xp #ė*XVA)58r&B9[z0e&yCzI&׉ݯ;4;O09z;9pagIWbq߄P# S"/oa#x@A:urēŒaSyh쑊u85 *mDm^{Gjg\/2?]'*|7+IVjoyӃeZ5_U56˶w0kvK7rK>[Wpvɹ>8Ny u$xM> ۢrb7+yS[s-e ncW Bu5Cdɂ@Xnf߼ҮºӨM8vOf; Ո[v5}2q0 L=@YK͹ W{ ZLF::| ,؀VCWJf&^'Iv1?Ý{oX7b9G%w#A> %c Ze§~3A,K,b8:zg vpLu~.A- :O5(qj+&D"[ =YqDtk fߴ ! rYBE~,?UM'O 0r) SdҥO*:SN4&խ9╥DYk.)ʡsV 5y]J)y荸,4֥"6bfGƜ;.BoWtP^WҠ jEDtRZ { \`@~˝X:nأUPE0Vaec)677<jX,݃I~dQEpO{k|T'WTk/9:$ yFAoe&(raT4A0¥T],ZH ſ$}P|)eNn. vt#0Wؠ{T (ŒipWҾ}{, &>aݦB'44^9=,p޹ p|^`B)g83XmpߤvTj'*`?spU>QWP=w#dKM7EWwݧdpSl@g{ I/+8˂>|y2lPhKVL|bu(ٷwalTT-NWe-?\HdI'|ӪS+ 4ڔ$PyW[A~j`mQzVk;F|I?վʏD3W%'l`(F/U7eA  ^G4?<#Pw~٧zy٢πK.:V.3^xUI3c\Z֕P#X9(cUgHJu7^c|up`If7w{U M$f{d{m@5 9VuΫ84Z;\3*hw#f5xO03jLD=YAg^/FZ]W#U ֒ .c؃#@j0rS)掊tI%Z%:\ ;=^"ǘB?5q 2ʽׂF-8o-Xȩ\J4ݟ1Ů]<?][AGfc{uaS$<+j1“E HrhyDjww'(&'0;q4C6:.cwk,U>Lz\ڿxK&_epߖ#%i`1>r_#ɽF) .yiҊ.HkȂ }aTL 3{z ֊K4fU@'0 2#bfå<ԂC Y._>E!xxAYQUC]dOMbo0dMqѱ8CcP_9 <(fese7/@љY1 UEz5)a:{r=$zBGR}Jimrv LeNkkN0_e Cfa(E7q dfX)7ڃ8/-kydv-~B|rp&Q \;rC2 Z2&K; !UOD0wM[mDUy6H E(;_~4v[,?\x\UK^xv2Pw XQאP{ӧ_**ylosR1lt- >Zi0\ޘR.DPBi<&Nk s߰# 4 0/.Ð14nXbz.e NʿS /:H.=D"Q:`!l]kTJF=L2GJ۫7Ex NNAE7UB3pN-Cpv42}Vq7:fq+`<h'y p ZhvR|n[%LT;eg4i/Rc`$}HNu;n-۽< q5<'mxe֛ll.1`5(O7LA}8W/.W868jSzs0x"٨#')'p֜GwYIPfoUPi_ɄuA*:#t_""uYD@s(T}hΫy>Ή* Դpn9t:ƱW3QS(Gp1t' PbSJB<#O7,!< y'&0h^:m.=`Sr̿c/vrn؄-7z¸sԐ1݅rAҡA, xO2+!;ي%! mC|Bݷ[DI:D*vOUuM_:w񼒣4IxH&>[,~ d$ Ռ )ˉ W?yxA@}R44o\βtkf)WaYovr}- P&jgw6SXoqF回 wyYBsh4UҞ*{k,/ ED8`<ntl7u˴Hޡs1.53^`e*`zkhm㪁-yjKW86J/OQ~&hM8AmdKV3n'Թ]^gVUyuڢ)שj!SGWZy$ ,:l(9]w WP:ɞzJ3[vdt aE\OOBm?pra&&Kw a9;QKs"O+mxC /+4Sq _DuoU"c[7Bjbegi0|lS89$auCmzGO^7Nfhcm9NZܴWi{8,𶜀`3iO02,'C 0*eQ/}XOQp:F{.*6@Z|ٵ:FXi 1ʼnWqR=y٤r}RU6< LDb>k7 `toлHf\ͲDz `9:xrRG2Tx?F {{rwv ?oUWs$3Mb:AJ'D_FJ7VWgK*p{LDV#]^Bo gUaVX@&}1%eb2ޜTkD 6 wH(`*G5p`Q1iB0˶6I8$xHƔ7ԟm0=fES==D-ƹA?u? &$@$wݶxLzERq GǫI^9z.,e%ȐBf@+් &ٲ?aPNR~/6x U@㡀2vJ {3̉a`6ccWׅj!{ğśP-Ԏr6~h.*Md4_:[!κ\% wly|k\A&076.{Rb[Q&igv{Ҟ(EB P|wHx\6bv'w7;}VwW=<:Gai,'$恈yjCmevd2:,<1Ea=EOH@CմS[j9V^\’Al ҃e? $7Fqq e;B<&o a+5}kg{BJylyr;,5".7'@ L9+)[e뀮]FM) oPՂm?TdZ&nr2%@"wn7DP?N :cYqQ]ݳ$^:b3 -/Q.j)"=T=K@r# U f9C+LYvgB-1ڗzU&3zۭ[cz 7cqF@vbD;]XeQ{hKp^r~/"Or3lc1b߈3B = Y1u|1-5L]4Zc1M(Ֆ>]̒ doX֧-ʀFD]ψ jm1>?֩al!ց.(Nw df2N$SencE4>Wh~= `IWx!*V֮Gn}sT4q'U26s:\U稛͏+AdW}!}HfҤ]ۮsv4o4mh'[){c֔E)ӦD+Z7pѵ.H ؔ.eMn3V[!6a{|p 3Akw qvx*5ٰc<&'24SGR 9O͟ .e'i.5TM q2ָwjzTG->v*NE&kPtY)޵4Ǔ%tACz Iڷg-9@|ѧ,\qğvZ/IWjaL v3,ߵe_ :Qй_Ju`eD6}4҅cp*OC"Ffz[Š/ᕯZbt3u^ D!/0S^ȗ s(gX+;MgHemƯ4t1t/-6֏fr,ux*sL*s6XLe3ݾ"QAdkF(k6ڽqn~'O*/ǤZnq^3y>} ED\Mf|Jb׌_a~Ҹ֭ wS4WJb|*(5& Qɤ;6(ƽ)O;tb#,[*gBuKjul4<~D2O"r|s2oṿwgv<<.yvy 3-{*0FcwtOw\Ks4h y)GS'cdX6]p: 8u,'Æ ,ghM &Xyq'B"O~7 RNu(K@]rʸ1=`Ui}" }W8EI消Ւmmi%.5^wO2#!  GFS ٧LL>e]V̷{T|ܪ&L f0VRBJor_ѭ XҺ_ μH4U\Ys(7bRt 6ú{%sд4_i2\D5/3@d{}(UО5*r' ly;[:޹"+i.FJM*P;j;'̈t۬vX9"=*֯Zt%Q€i"62ERW7{)\^HS#QV w6(,hb(!b,oǭ~⩄}j81<_'T Jc'VͬǚeNa< W؊=F+&[CTak6l,\GGj;9T*D!mbD5n`BRЉIxv(@%\7" RƒSNR`X{b 5҃ǝwm`D?́Ц0o%BaLR0n 3ߞ? #66E4/#iZCoW.ntx ]LFpGokE̝*Ljl,:'gYh+j$K,59Hi+0<~VZ!`qC^6u%C8+O?d/A/^LȘdE C8]έÊ=^j]?MWƙӶ*`FwK <} r-#ft١'b{(ei^O:eVc7|I8.s_y{76-`LJNGDo2vi lmf Ze$!̂% MοF?iLw8{<-|B]5:B3mF9_V% ط*T^ej:r/ M_w'n, bHMG'f[RͨD;M5EWMy=*OQ&+0E[=QJ,f0\զ<լؠ)|Njݻ'O;Ҙ]Pl( P=k^DNp3)hUu{ZQ ZLY)^FUYW+,CrL,XH"ͳۓ%eBeys%)gd L8Wa~l _ j uI!>WY@"\6.T V;-̚cK+PK8GQ䐜&햚 ~o"^@ok•䜱!l_8n_Gv= 8W&ާ1Ұ2X6hUq;x6෕Yϟ``w)E" o,S 0-IPyOՆEZ އkY$涚$>`nW"xngEtFJ GFf5%ax /->Xeal`44yqrK :ײJ!VAu%RW@*4!57ѽHϢKazg|%糨^"|?ϖ-[X_O.rtD*ށ9"V'جc #-+]OC /-rC+\e,4-pe*Yw!tOL󙰛)섄e7)gxYoSꕒ,A, ؅ P)ͺ(V=o0lҭ_\j@"_ PRIcoMZքAE b1&_]ilкken]OyE{U"fCuNRp3;`c:5 EDUk^^dqbF1yGo)c|&j^ch [z;ltbI:,ud@I1?%o;b*Hj dճ@U)Iw-zw"#޶<רkso1K%s*F&GBʀ gG׃e)qD|)h0JtNmHŔ0g~WjW·\3; K֩{mPI,dV,R~^ )UG&o86)M*majg[U0YX&-Rb ?ίU<̊;nP3k@CXq#\bw̦#  9$e32 "8^(Gn3͵$ꭚ U p~5f b- Q"G 0o sZxUc qY`r-K$d] C Ql+ D}w }jt8a5uv{ӨbJBu#Ri@ nX껭ℚH3͘ 􎦖̍0JFvڽxP RHUb&Eg,8hLNkk|d$\9≂Laϥz!Y?(S6fi`h\? ޣDX p_RLbuay*`-_ZDWӝSJn қ@{8B"9sd8DiʦK:lYTV5<!F%C )U+:".E:{cNƄ 5}f6]-$xNMSQh.ܦ?upPHû{'CW:yL"5xӰᾭԭ'&*ǟ[48#e\6w\ǫ& M ⤈;RJa,|c 3w&M\86E.*`:COYU#*WH֙mݹ+3Ⱦg&S9 K-K֣p$0Pe}㥚Eqm (fZEW s3gRgoxVL$lq8ƃ@2ǿ?+mԜMnF)Qyw(a Gf'F'HI+1nE'v>&EfVр:)#=}הt9 Sϱ qP,6킨#n .!`x6Grpf xxCnF1p$ɩuMd!Xgh`<+d {my NZ{Xw!~B*ɴ&28}%>I]ܤ5쎯> H[Z#K>ȘK}Q⧼HLhhXyI86Kx>fj"LY6&HEVQx'eXutf%9H>\XU6|Uܟxc3!b#ܪo 5:vG=WwtUm~ƪ@zZT|}i/Qj᧢ƍMSSqe?,A66@25^ֆZ BK mxFa\;_+n})_[Vڗ/df6.) *7jvzޱªqarm"Էqc!ڲ)Lql<fst_\`P\u'"[B:E%i BIuӼUb2^l'\}KK=4e_X>Y П%SLwD%CI6k:0NJbdT+ltȕ}d^k:i_ 3&%>oėPGg̺Ņ`V]X1|~D"+2cG=ř`m4 -F6  4H6U8CGZ3g&/y"eRQ^21vߖIl6< x? *B] ML e'BYD0 !şPPju c4@}bcP+pV:cq,9l%Rܐ@٥GjEqz>I6XH+cLti2>dqrobѱx٘p6JoaiN(c$f*% *M\Ŋ#MJ9[m#v4j{< ss.0y/ݩaÃ1S}pV:F; +_/9@ϮdDvHhW@pNBΩa'kΏBAs7(rTq}gņ|qDLZi>^bf*|7#0aI9K ‚>h,>j*4>5ä l(G+o*1n mDAF8Ep w:yB`H4KZ$0P)TcB%{ 8d T# Pn3/EB/xAo) 4͉'N:W+){<М-_\K;z%J u˦0G4OU %D&,݃l]Rf=}l⼍9ե(T"Y1éS\ &zv">b 5\+veZTy!Fɻ߃2?a؜Ҋ@SI?u`h0AXBq :IׇJ) ܉pL|5Fb˿m?4xqbSS{f6gx'y9f7R2= CEAjMBǨa T%,_vퟌ2%Ջ籕t)~.M7YzȱAr [΢0RoF͖HZĴAqe-C8"n#ȽX襔7W"dy(% l3Ì/`d"+2ZvlT|t׼F6ɓ2}F$|6GI%eJ%C>cgZIwpϥVc(Cg Uv Vz#* *{,g˸eeWUhJtBݔ;^ :xj8D >ryeu+-3N^lڶu!FfFWCp/TPͨ+YOb 8IPϫGM sƸGt8ؐzQp::$Q~*4YhQTZsMnCɽ/"P96n,+(s Y}M.zȴMa)my]1;8ŌA7r8S^9b*oL˽*TYf<|٫`h̆IvL?*aK?y Gi vzO;8f9M,j)R/b8CNEկ X=jG9|;/%/hw櫓lTUӼNt$tx h; S 쉝ckCuUJE)ϰ\Y8{?;Q]+e._?@Soj. nq%wa,_n3XGuoEdǮq]14P]*S?$]i+? `>Ӷ'-!i971!}?jSمU3o, w}ဖ9'֋kNfyQpNmTxFU"d )#\ 4r%NMi_X4VBVY#DIX؞<\ΊPA0/U_֜."3pt.q/Iy*ټmi;Lĺ@ LkAo_`'n>q@ !TM vp7X4y׉Z$J4 '?@L!c=fpʱ9vϴߙ_<;>=UFjwC_H.YBU|,Wc!yuMf%uiD|t$ rs9(]Ί,\c E4wcOkҭ0m2fB<$rl&m(/À(+,+W#Ȏǐl-Mg D9o:c#mxVߞ Ye;ڗ Л=G/L++pMrQ0ݖ.}03}dsE, 9+Hb1u* C&g&ȍp6x{|rqԏAa.#q$m]0XHmgS}&~Q-; ooЃK\ԋ}%UEt&aJ?M K^B&v";4wT 9v r 9Tաz<lj;5-| 7Q+ k>)g^Q[.VoHwbrYb!`Ɓs%fgeocџ[G F|͂D5ZvR1M%pTMO30KB+ڥO'[-D1w$[9tM#!_=P 1FH].H#6hF2{|Ù4)YR7 wu2_B9 !`3-.D4\}K40{7&4d֍M?>S cͤtݰjtQX>3cA4( PS7aX8:7b '󘲽]d柳_`cy1;2wмJCð&۹C 觪|2Χ >`å]7x~.ccztO NsTG_tΠ@TeYۂa(Gc}qͮoO 3+aQKq*\, ^LHd>[ݡzch'$pZݵ~E|}+<$KgZ_)!笜WS$7pl{<-J)dNNj,H )e O[wJPf'& \_#i- w¦M{hUCѠ(X'a 8v5:MFT5pXQj#S) S7ė 4+I9&t%5FZF˒r߈`yN3qmYU*GNLZ ԓ.*aF  iSZ?|wyߑЉ+~u u/>5C{rc3Ӝxva_PDݼ4l7kfaXjFXr~m03ʫ2I)*[ݹIG?Ne6S8V|[ NO>Sq6STê3nCe i[If_nJҸ'K~#;ߠCqy?24p===91P؟.>Lyqh>V []'J;et:ۻ%M0vY \"$G6"d^# GB#e6vzH+րE-;aL1WB(B ,ZO5"=0|)ĕ3_!.{F& ӧݏq/A;.{_6*m Gu4ޫY83e繚E TTCt1m4ZvWdE]5 k|b>2G25GŐh|K3ɜ7J $JnsU‐Kzu2w"F J3G*|s<` MBPSzV7X T#fࢃrj eNe]aSLաJp.AZ˔G_ L|ӊoLo saɬ۲7[F~b!2 ӄ.nQT>) zh9β SRSZcdR\&:gV Bq|{fDu0eIi<'l)4gJ$ΟVھo.zGx@NKXz<.$5r# xvD{,ĕB h^^b[~7 Q~#6q'm`Hh2$n2GYѢ,=(aQ /Fb3ja"moӮLXBMHHm8޾٥6N[qyaT$=gBWvu&QH׎U ڎ5 xH&҆3|y\y'%WLӪUY|$.*~sBs<>49ĥQ0p:\SH'.ϻq]|`h>Ed].4T<8쐻Ity'dZ+s-WRd3#.-钱+svAԍ<ȩi6lGOBh7ۛڦft d*݉eF@k+NżBIt>η~KEm'N,\Mh${G}-Ȏĭ%`?wV=(NUu.ɐJS{$C!]l΄  *Q“_iOg~%>J^:%bKU7bL[P3kg"PD' ʱJ= BhO28,v5V7O?Ϣ ~V> z':bjX+X ?Rgbo|`ZhvfHzu)+|e|=z#Vi$B~uQȶ1![_~s]NA53'.y!n{2C#F}H#L p 똗k$F07ݴy1OA9hOYO&P  Sz3 jpMH)) i nM['Z"sza.yAJId`jNOTϸ&[`/ w>DZX(8"䮰1ؾ!lpd<膏yΗVÈk%J|-⫖Ua{v+ւ1K"2U[Zփ &s I 5ttMb[ 4Uds7]}oNB-;\\2ϭlk%֣a1H^'T |*\c (ԩu+ hEDWȴ9 ;ajYE(FVɷmd#ҧ!QD@`e*B` {;!J*U}X{V t吸ayLC~@̮oU*>"M&׋yOC4 Հʡn7qtx~"Ԃy|F@+:3n myjʆ/.9ԭ'ͱA/.Zjǥ9șm)׵9Q,eȗ'M?AknР{z @t^Q[vB&0O<Ժzk%\/"] vr \?T#,pE a"Y.swZ9VY-ap!W6T7jwY*l6l>i'u|usj! `h.K`=l)[^GGv( 9OKnoO2ڦZ4`Oq~65!Gڿ#mdtH\/%IO8WP@}_ׁZUq<*28Gt丘dzh3߳ FŎlrbM2!j8\ s o|ejVKd3٨ Gw$6bgn_2Km"Pz)|FHUC|IܼWR3.AW Y 8%56tH>[ եPC65y{KA3gsxH w*YM-ڕ}哓sh%9DrZp).C~2ueP}#j6ꬁ}vF[ t{6>F5KPb="NfKSYC LC&4x"wJXYvx$%۵ ;,OcE.4Gϯ;VOcHgc$BzTZs{,?)]LQsF;!Um)2"Ԏ)X] ˛F'N/9zf{u Oqp8.qU3^DEe;TweD=FtdQ3JN _ue.Q͵H.+b{f~T73G/n4ΕY 8aޢFHQ1Ep~:9m׏S|'9{ B^kx3}ZW9~,|ޭ}1$˒K A NVTx;e]T(1ץAK0Cp,e#^\`W[bؽ֞܀u&$( jI8}~ 4 9;>|>劰!t߀2|ISxVyN산6;냮yАwuܛ2j n|&}:@*VAyEȀ׫SJ6(G SsN)D { ZU*tklJ6F:'FChS3hO.y@k]܏ !F|$=f)8d 8".|H5nH?rI ٗRSB@TspRĚMQ-9gɜLDYb.,| \"j"IekSa ʼiZM^Kp]r~@$\Pax#dӒ(N<Ɣ-X٥ȸXK/ΒA7c@tԨLE^_챌&N7u{R]MaLM3@L{M&umq,΁H' pɨJ/ ZЖ^s%'KOZϽ?tzv='5HhI}1`;8&*}6}bYPЋ'9U@b🀱E{ &unT]¾qa?f.l@PDfVנ .\FS&He+;# bqN"W˳gJFbK O.y4j\Srw7eAVXh?)I,dXi0P!R:זK-h,V5e")Y3kC\NYBb"㣚@w?MIEhoI H~%bfluH7t,J"$.|ћ8)_uo d 1cdQ.Ĝ 0pYa3-  kKټО^oV$ ȵ1$R?ج8hW`􃾓l?-@Ci8E}% w . *EZILf\-k 'qNٴZ7L[ChN/4./|iPTiv ʳSt%.v6z8{ nOt![R'j{F1יZ}ς1%|7]7 @z2ɊRq&*_sej$讹r%ZQ6>r+m*L~zY㘀*>nseMnt~˃S[ ͞i_H{SvCT` 35J3Ķ|GnF=f TBQlw6ЉQىB[7d0@eu ۉkm7"|bOi6ps[\2ݽpENM6ģm0փ]ǖEDxxDK&JVV4kFjKy&ˉ552Mlɣ~AX@HcQۨj4a"yEX:SW GĂ%%Ike~ǐ6RD`(#YLH7(;NQѡY2"- vPT^EL=ёʋ#sSݥZ|F S7kJ&6x=X"dd"քLodM?A=#K-ԈԊ󠟰PLPk%ϴP d:?PNn8f1Pxяp%ף_t~WWh"uO>zCJI6)C4'1Bhz96+AVyKmǶZnOc=q5HEu 7H8Wa7 xl_acR;m5řQ4;=C#4j.X>iZF(9kD ݖ0f,q;Ī-4ɏ{'{s&2n|t]{NCr/ՃĈ!.XȮB |9f^gwm>K/LտD|0ө|cy>*/. d|&x*gOƥ-yYVIؖGOQ8n5  `)"B њI^31KS}fn֒VYe)gera/؉'2a> MQ|*Q`Y?mroŠ;bp2wͣo6̹GVTwWeLkob HƤy1F`a0ݜ G\{[ԋ6{jND-yV5{4fmu ̓^~qQ""-_URW!1 PQ#kpΛFVf72Zxq8{8޸i$ rsr͛TzNcچ\M6Q1=1//*SE[?`t8,<зP ~BCVjGiFijJc1gD %AGpDZyAZӺ7Kfp}"CΖdnm !͠M^d-P5rNڋZiit^}W ˅|G x9p=fTcSm~ 0v=?HnQ8w1:+HLݙq\srzNv>[Zr;t!7o 3`ڵHpg=NsP8]O6#f|03D&GNN5G{2AXI& ^y%0r)TA5rog︉NY.|1 7Y$qsIȖu B*z+@M2%n@( g|: g 6W>\!ܥ#Ţ1LML*P&F`lg&{#H m(D1MHr$ð#0E.}7s'E1^;3:2vşexx3b\E]@+ zn--AB<U" `BZfBB;R­d4LB2$`N޷U,,?ӕ_)nr֝p~~잕U^Cx6ߥnVW=j60yFԄQ<b5r'&˦' NA=Ͳ'}?<3qv-o?et9 +KUdٿc0FX=גX2Yyg7,5>{@H0  ib]4Ο ˃Di rSA *Tן9fQ,WaPG t雪(*b9\!LN{{ǡV˘WfUR!^/j.yh'HZE/t04X)-kJJm!xn*#%a$YZt)#XyOi_xp%FŠ27l{LEE;z8wj/g-Fa^ 3h+@|%oC 3hGQÖJ7E:w|QLjL R$d {}e[pXr8QA[ YHTۙij3jt5ȅ1+#XȴkFЮ!5?D龅$]p'˜kq,<9sFA[S3S$R , 043k2lm&zj\pNfe*m:ι3EO!P8IzDD- :w1^JΠJc,C ^h]ƌagi3Q_ ˡP ~*IBinwQ%ξ:p;&vF)U81eK< tq kc fG ^ZδTK?w;j3w^Zݑ-: l1=i$h(*縒.JZ?(eќ 7忍ɬ5ʋfr>I7CA3o Q;`!ҠBB5ˊe,+H XGic)4z{P3E%Yu9@g23l +Or|k\RHĺNO9,uMUYā8HHJ`'+RkEt`ə8GȓZn}bP>ױ19_6. zz}ҡIYM 'Z:ncTr]0EoDZ?ӞOÎ\Fڰ6楪oFI j~^s*d;o+EAEoIpH/~+pCyPNqI"n$AxF o 4J$PP39jR?8;/5M7 VN[2 J*Yf."BX!bن/Ƥ+ɚZiqE ۨo2Hߜ1PQeZ([*3!RXglo:clž?\נ7 s[yVx^b(@;E`*|YOw|hm|u;1eu޵;IŴSʝ '4?!YȡHGEGlld,dz2$ỷo}d}1kRB;=z$Y :D mQYAhr-%hTW  0i)Uk] Q2Wz& H{Pamor\ς#Ŭ:t/4^^V~C3Rf=ur1!sbN}̋يj_7񻝨d>3!rƿ׵Uf+,%(↦Oܹ1UTecnBrtoƦY oEAV䠝}<{NֲEKspdh<٪^T WrÞSD@X)Ib"DUrBzWѡ/Rp{e#O0S_MF!]W}U_@2^ׇx=bŖẁjT W]|R-4-yԈI=dz\lyG`2Ã\##$5~G!j}zq]=>c*q=>CzPiat`$m V| I(ZdNEP/|sԐٳVf ZWd,cOjkq ޏtEOnj~Bw[_0 X4 Ȅ6WqB́GuӢwe>ԢmU58Pc>ßT/7iO*:xaP 7o;a#`xgO R_wɠ5h` IM}LĪ+TRR"ޒ1pع6{~vK;TznOפo~[ 0< U9YA͸gemh`F&.[NQAR[jE̍xh CR}5}oTOV^[ S3JvA%2Z/i.m3&H$QWlǹ\Knn{bJ߅C6dMvLV_[FV"'b9=W{6Aog9SoAMZfՍsJ֨D _A1嶈+=)Ԋ޼! SW2愶PW0[l7z-`Sȶ8Ɵd^H׫^q"ӡQ*W.b5.$#pgH.JȯByyhT9OsT.9:V*t"gJ I1tA ;)|{ l%%TU7jNbjz~m4Rw,bSc,Ƣ Pq/DĂTW 4 so :I5: h` =P4*q ^7w`@ $t8W 8ۮ" m F36ymsD^a|%?4٣UqzS pu+ioR>Tضb6jDZ+ߢ 2%K,fB~5 0!ec.]Ԇ#pFc,Ԉdљp胍YI:,ʬ/$I T4qU.ȁb!T7A< +zIhar-+k~a,h>CdXz/ʚ6bѣ6w!.AP[T 0\?DQe8{5IIQeASX9{պ\yíbt+$]>'a8NH{#0!W`(%&miA`T0y~MXKH}hUW3 L8Mz?UȹEtbOY|*p_ٜHs~pnpF70֢ Ӹ=CB0 Җu#n|-iJ@k'wUj#&G6Vg Րҏ7A+Em=B3+olzMofb_n3e4o=6ɰDyEH iJҶ ~+ =~9ĵq[䵮C3O{{bbIAW_xԔS 7ibz},vрjD**!C2\m5t]v @U9Jq11yRƅ), `| 3rL1~l[1Z}ڧ;~( H H#Y+0{g/Yb!Wpc_'i**@eMΦK3Ӭ, L~Vmm twڠCh4ro7i찃=[X6'*N2a[(X[9F3,r^pC`xԾ\ꊄ6"A_Ķs丞_p`pJMx[pŻST7d$k% 䩥MɪiPl$UQ&2wc.1ʸuM4i=avʡK7j2[G C\}%`uuzAjFV(}:H7c]#ʢ+ql8;hfO*F78-OnMΑu]gZ1P=))m6ky3$e7ՑֹzNI>]uӗ_BR i)Zm^'4WKUoXfC]?Ef[YosOsH7v-tjYޠq8T໨5U{I;SW\:?[T>|j{$ bY5a{^޳{QoJ7w_4'b DŚ`azD2Y vd$`84SVE$+ƯNjuD7:A4C |vs҈wHsn3*Qt,KEDg9kDy QܷA_:mʠ-좻іD޵VڪXٖ'E+ FPB׳Tho!>gUs _Q+ƶ5Ec@hB {Kwt7`JǍ,X@ǰl>ז{\ Ot\uϖ (٢/%LВY*(k˝Uo  3O J"hc>F[='ܻ{w'M]s ŽhA>. JYH#F%^gUS۲i!b {$ | Y=jh* 6:x_q$ +n]4yM'o7f~0J(Fhʌjn:t CJ/fGC, rC0~'*vLDpn~rnSx@)&G bW!&C::`AQD1#S;]+>LcMJoe/m~Y+!].$7M)GdD,Gݼed o.q!{0) ɷ)D#rɭe7t>9g@Je)zo'*h#0o^5ls'*?Zl 阌hw;qdzD 궺d¸:Wv>s^@ g5OLɉԇ[g)uOH 3 _K" Gd/j'C7 :HĞ  YZ