tpm2.0-tools-debugsource-4.1-lp152.2.3.1 4>$  Ap`Uu/=„ 51YҁNiׁ@t&IAv<+xaLn3* MG":'/`~To?rߛNn<*7S־DPBR9b+ypv\?Enl9 ǥ k~ڢ۱ d,Z&kjioZ/%oM׿57Upxhu!} A3ɮu=E0ac02dd81a9a69f62aaffbfeb8205cb3f5cbd3650c293316968fa0cc45262abffb536efc4b893c55609255abe36bed8b1fde1924`Uu/=„e*:*ؕ\Iչ],>Fz|nQɧao2X+ih+fCXsnV:]'QRƍ;wۏ#ʬ(p΄ה \M?$MeaGٲ<)PMQ@,Hgg 0Y>us53Mp;h?Xd + R (5 N`   L +Z +. 0336 6H6X6(68697@:9F˘GˬHIXЬYд\] ^4b)cdhemfplruބvz TCtpm2.0-tools-debugsource4.1lp152.2.3.1Debug sources for package tpm2.0-toolsThis package provides debug sources for package tpm2.0-tools. Debug sources are useful when developing applications that use this package or when debugging this package.`Udbuild76 }openSUSE Leap 15.2openSUSEBSD-3-Clausehttp://bugs.opensuse.orgDevelopment/Debughttps://github.com/tpm2-software/tpm2-tools/releaseslinuxx86_64KE4! |L1uv.HysTB |%{2k Nlj 3} ll-\O'+vm<1()'p  1+:1# )@u+4PU)k## Ag  L s  ;   x M I  %1 5 ("i VgD w AA큤AA큤`U``U`]]]$]$]$]$]<]$]$]$]]]$]$`UN];;]$]$]]]$]$]$]$]$]$]$];;`UN];;]$]$]$]$]$]$]$]$]$]$]$]$]$]$]]]$]$]<]`U``U`]]$]$]$]$]]$]H]H]$]$]H]ɃX]$]]$]]$]$]]]$]<]$]$]$]]$]$]$`UN]$]$]$]$]]]]$]$]$]$]]]]]$]$]$]$]$]]$]$]$]]$]$`UN]]$]$]$]$]$]]`UN]]]]$]$]$]$]$]H]H]$]$]]$]]$]$]$]$]$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.0-tools-4.1-lp152.2.3.1.src.rpmtpm2.0-tools-debugsourcetpm2.0-tools-debugsource(x86-64)    rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.1`@]@]c\@[t[}P@[6@[{@Z@Z@Z@Z@ZZC@Y@Yp@YTYI@Y1S@YXO@XW@VMatthias Gerstner matthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.comvcizek@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commeissner@suse.commatthias.gerstner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.com- add 0001-tpm2_import-fix-fixed-AES-key-CVE-2021-3565.patch: no longer use a fixed AES key in the context of the tpm2_import command. Fixes CVE-2021-3565 (bsc#1186490).- update to major version 4.1 (jsc#SLE-9515): - add fix_bad_bufsize.patch: fixes findings from compile time fread() checks that indicate bad buffer size specification. - add fix_bogus_warning.patch: fixes `maybe-unitialized` warnings that are bogus, since the variables in questions will be initialized in any case later on. - changes in version 4.1: * tpm2_certifycreation: New tool enabling command TPM2_CertifyCreation. * tpm2_checkquote: - Fix YAML output bug. - -g option for specifying hash algorithm is optional and defaults to sha256. * tpm2_changeeps: A new tool for changing the Endorsement hierarchy primary seed. * tpm2_changepps: A new tool for changing the Platform hierarchy primary seed. * tpm2_clockrateadjust: Add a new tool for modifying the period on the TPM. * tpm2_create: Add tool options for specifying output data for use in certification - --creation-data to save the creation data - --creation-ticket or -t to save the creation ticket - --creation-hash or -d to save the creation hash - --template-data for saving the template data of the key - --outside-info or -q for specifying unique data to include in creation data. - --pcr-list or -l Add option to specify pcr list to add to creation data. * tpm2_createprimary: Add tool options for specifying output data for use in certification - --creation-data to save the creation data - --creation-ticket or -t to save the creation ticket - --creation-hash or -d to save the creation hash - --template-data for saving the template data of the key - --outside-info or -q for specifying unique data to include in creation data. - --pcr-list or -l Add option to specify pcr list to add to creation data. * tpm2_evictcontrol: - Fix bug in automatic persistent handle selection when hierarchy is platform. - Fix bug in YAML key action where action was wrong when using ESYS_TR. * tpm2_getcap: clean up remanenats of -c option in manpages and tool output. * tpm2_gettime: Add a new tool for retrieving a signed timestamp from a TPM. * tpm2_nvcertify: Add a new tool for certifying the contents of an NV index. * tpm2_nvdefine: - Support default set of attributes so -a is not mandatory. - Support searching for free index if an index isn't specified. * tpm2_nvextend: Add a new tool for extending an NV index similair to a PCR. * tpm2_nvreadpublic: - Support specifying nv index to read public data from as argument. * tpm2_nvsetbits: Add a new tool for setting the values of PCR with type "bits". * tpm2_nvundefine: Add support for deleting NV indices with attribute `TPMA_NV_POLICY_DELETE` set using NV Undefine Special command. * tpm2_nvwritelock: Add a new tool for setting a write lock on an NV index or globally locking nv indices with TPMA_NV_GLOBALLOCK. * tpm2_policyauthorizenv: New tool enabling signed, revocable policies. * tpm2_policyauthvalue: New tool enabling authorization to be bound to the authorization of another object. * tpm2_policycountertimer: Add a new tool for enabling policy bound to TPM clock or timer values. * tpm2_policynamehash: Add a new tool for specifying policy based on object name. * tpm2_policynv: Add a new tool for specifying policy based on NV contents. * tpm2_nvwritten: Add a new tool for specifying policy based on whether or not an NV index was written to. * tpm2_policysecret: Add tool options for specifying - --expiration or -t - --ticket - --timeout - --nonce-tpm or -x - --qualification or -q * tpm2_policysigned: New tool enabling policy command TPM2_PolicySigned. * tpm2_policytemplate: New tool enabling policy command TPM2_PolicyTemplate. * tpm2_policyticket: New tool enabling policy command TPM2_PolicyTicket. * tpm2_readclock: Add a new tool for reading the TPM clock. * tpm2_setclock: Add a new tool for setting the TPM clock. * tpm2_setprimarypolicy: New tool setting policy on hierarchies. * tpm2_shutdown: Add a new tool for issuing a TPM shutdown command. * misc: - Support "tpmt" as a public key output format that only saves the TPMT structure. - Qualifying data or extra data in many tools can be hex array string or binary file. - Add support for specifying NV index type when specifying NV attributes. - Support added for tools to run on FreeBSD. - Skip and notify of action that man pages will not install if the package pandoc is missing. - Fix precedence issue with bitwise operator order int tpm2_getcap - travis: bump abrmd version 2.3.0 - tpm2_util.c: Fix an issue int variable size was checked against uint - pcr.c: Fix buffer length issue to support all defined hash algorithm - changes in version 4.0.1: * tpm2_checkquote: Fix YAML output bug. - changes in version 4.0: * tpm2_activatecredential: - --context is now --credentialedkey-context. - --key-context is now --credentialkey-context. - --Password is now --credentialedkey-auth. - --endorse-passwd is now --credentialkey-auth. - --in-file is now --credential-secret. - --out-file is now --certinfo-data. - -f becomes -i. - -k becomes -C. - -e becomes -E. * tpm2_certify: - --halg is now --hash-algorithm. - --obj-context is now --certifiedkey-context. - --key-context is now --signingkey-context. - --pwdo is now --certifiedkey-auth. - --pwdk is now --signingkey-auth. - -a becomes -o. - -k becomes -p. - -c becomes -C. - -k becomes -K. * tpm2_changeauth: - New tool for changing the authorization values of: - Hierarchies - NV - Objects - Replaces tpm2_takeownership with more generic functionality. * tpm2_checkquote: - --halg is now --hash-algorithm. - --pcr-input-file is now --pcr. - --pubfile is now --public. - --qualify-data is now --qualification. - -f becomes -F. - -F becomes -f. - -G becomes -g. * tpm2_clear: - --lockout-passwd is now --auth-lockout. * tpm2_clearcontrol: - New tool for enabling or disabling tpm2_clear commands. * tpm2_create - --object-attributes is now --attributes. - --pwdp is now --parent-auth. - --pwdo is now --key-auth. - --in-file is now --sealing-input. - --policy-file is now --policy. - --pubfile is now --public. - --privfile is now --private. - --out-context is now --key-context. - --halg is now --hash-algorithm. - --kalg is now --key-algorithm. - -o becomes -c. - -K becomes -p. - -A becomes -b. - -I becomes -i. - -g becomes an optional option. - -G becomes an optional option. - Supports TPM command CreateLoaded via -c. * tpm2_createak: - Renamed from tpm2_getpubak * tpm2_createek: - renamed from tpm2_getpubek * tpm2_createpolicy: - --out-policy-file is now --policy. - --policy-digest-alg is now --policy-algorithm. - --auth-policy-session is now --policy-session. - -L becomes -l. - -F becomes -f. - -f becomes -o. - Removed option --set-list with short option -L. - Removed option --pcr-input-file with short option -F. - Pcr policy options replaced with pcr password mini language. - Removed short option a for specifying auth session. Use long option --policy-session. - Removed short option -P for specifying pcr policy. Use long option --policy-pcr. * tpm2_createprimary: - --object-attributes is now --attributes. - -o is now -c - --pwdp is now --hierarchy-auth. - --pwdk is now --key-auth. - --halg is now --hash-algorithm. - --kalg is now --key-algorithm. - --context-object is now --key-context. - --policy-file is now --policy. - support for unique field when creating objects via -u - saves a context file for the generated primary's handle to disk via -c. - -A becomes -a. - -K becomes -p. - -H becomes -C. - -g becomes optional. - -G becomes optional. * tpm2_dictionarylockout: - --lockout-passwd is now --auth. - -P becomes -p. * tpm2_duplicate: - New tool for duplicating TPM objects. * tpm2_encryptdecrypt: - --pwdk is now --auth. - --out-file is now --output. - -D becomes -d. - -I becomes an argument. - -P becomes -p. - Support IVs via -t or --iv. - Support modes via -G. - Support padding via -e or --pad. - Supports input and output to stdin and stdout respectively. * tpm2_evictcontrol: - --auth is now --hierarchy. - --context is now --object-context. - --pwda is now --auth. - --persistent with short option -S is now an argument. - -A becomes -C. - Added option --output -o to serialize handle to disk. - Removed option --handle with short option -H. - Raw object-handles and object-contexts are commonly handled with object handling logic. - Removed option --input-session-handle with short option -i. - Authorization session is now part of password mini language. * tpm2_getcap: - -c becomes an argument. - Most instances of value replaced with raw in YAML output. - TPM2_PT_MANUFACTURER displays string value and raw value. - Supports --pcr option for listing hash algorithms and bank numbers. * tpm2_getekcertificate: - Renamed from tpm2_getmanufec * tpm2_getmanufec: - Renamed the tool to tpm2_getekcertificate. - Removed ek key creation and management logic. - Added option for getting ek cert for offline platform via -x. - Support for ECC keys. - --ec-cert is now --ek-certificate, - --untrusted is now --allow-unverified, - --output is now --ek-public, - -U is now -X. - -O is now -x. - -f becomes -o. - Removed option -P or --endorse-passwd. - Removed option -p or --ek-passwd. - Removed option -w or --owner-passwd. - Removed option -H or --persistent-handle. - Removed option -G or --key-algorithm. - Removed option -N or --non-persistent. - Removed option -O or --offline. * tpm2_getpubak: - renamed to tpm2_createak. - -f becomes -p and -f is used for format of public key output. - --auth-endorse is now --eh-auth. - --auth-ak is now --ak-auth. - --halg is now --hash-algorithm. - --kalg is now --key-algorithm. - -e becomes -P. - -P becomes -p. - -D becomes -g. - -p becomes -u. - --context becomes --ak-context. - --algorithm becomes --kalg. - --digest-alg becomes --halg. - --privfile becomes --private. - remove -k persistant option. Use tpm2_evictcontrol. - Fix -o option to -w. - now saves a context file for the generated primary's handle to disk. - -E becomes -e. - -g changes to -G. - support for non-persistent AK generation. * tpm2_getpubek: - renamed to tpm2_createek - --endorse-passwd is now --eh-auth. - --owner-passwd is now --owner-auth. - --ek-passwd is now --ek-auth. - --file is now --public. - --context is now --ek-context. - --algorithm is now --key-algorithm. - -e is now -P. - -P is now -p. - -p is now -u. - -o is now -w. - -g is now -G. - Support for saving a context file for the generated primary keys handle to disk. - support for non-persistent EK generation. - -f is now -p. - -f support for format of public key output. * tpm2_getrandom: - change default output to binary. - add --hex option for output to hex format. - --out-file is now --output. - bound input request on max hash size per spec, allow -f to override this. * tpm_gettestresult: - new tool for getting test results. * tpm2_hash: - add --hex for specifying hex output. - default output of hash to stdout. - default output of hash as binary. - remove output of ticket to stdout. - --halg is now --hash-algorithm. - --out-file is now --output. - -a is now -C. - -H is now -a. * tpm2_hmac: - add -t option for specifying ticket result. - --out-file is now --output. - --auth-key is now --auth. - --algorithm is now --hash-algorithm. - --pwdk is now --auth-key. - -C is now -c. - -P is now -p. * tpm2_hierarchycontrol: - new tool added for enabling or disabling the use of a hierarchy and its associated NV storage. * tpm2_import: - --object-attributes is now --attributes. - --auth-parent is now --parent-auth. - --auth-key is now --key-auth. - --algorithm is now --key-algorithm. - --in-file is now --input. - --parent-key is now --parent-context. - --privfile is now --private. - --pubfile is now --public. - --halg is now --hash-algorithm. - --policy-file is now --policy. - --sym-alg-file is now --encryption-key. - -A is now -b. - -k is now -i. - support OSSL style -passin argument as --passin for PEM file passwords. - support additional import key types: - RSA1024/2048. - AES128/192/256. - -q changes to -u to align with tpm2_loads public/private output arguments. - Supports setting object name algorithm via -g. - support specifying parent key with a context file. - --parent-key-handle/-H becomes --parent-key/-C - Parent public data option is optional and changes from `-K` to `-U`. - Supports importing external RSA 2048 keys via pem files. - Supports ECC Parent keys. * tpm2_incrementalselftest: - Add tool to test support of specific algorithms. * tpm2_listpersistent: - deleted as tpm2_getcap and tpm2_readpublic can be used instead. * tpm2_load: - -o is now -c. - --context-parent is now --parent-context. - --auth-parent is now --auth. - --pubfile is now --public. - --privfile is now --private. - --out-context is now --key-context. - now saves a context file for the generated primary's handle to disk. - Option `--pwdp` changes to `--auth-parent`. * tpm2_loadexternal: - --object-attributes is now --attributes. - -o is now -c - --key-alg is now --key-algorithm. - --pubfile is now --public. - --privfile is now --private. - --auth-key is now --auth. - --policy-file is now --policy. - --halg is now --hash-algorithm. - --out-context is now --key-context. - Remove unused -P option. - -H is now -a. - Fix -A option to -b for attributes. - now saves a context file for the generated primary's handle to disk. - support OSSL style -passin argument as --passin for PEM file passwords. - name output to file and stdout. Changes YAML stdout output. - ECC Public and Private PEM support. - AES Public and Private "raw file" support. - RSA Public and Private PEM support. - Object Attribute support. - Object authorization support. - Default hierarchy changes to the *null* hierarchy. * tpm2_makecredential: - --out-file is now --credential-blob - --enckey is now --encryption-key. - Option `--sec` changes to `--secret`. * tpm2_nvdefine: - --handle-passwd is now --hierarchy-auth. - --index-passwd is now --index-auth. - --policy-file is now --policy. - --auth-handle is now --hierarchy. - -a becomes -C. - -t becomes -a. - -I becomes -p. - Removed option --index with short option -x. It is now an argument. - Removed option --input-session-handle with short option -S. - Authorization session is now part of password mini language. * tpm2_nvincrement: - New tool to increment value of a Non-Volatile (NV) index setup as a counter. * tpm2_nvlist: - tpm2_nvlist is now tpm2_nvreadpublic. * tpm2_nvread: - --handle-passwd is now --auth. - --auth-handle is now --hierarchy. - -a becomes -C. - Removed option --index with short option -x. It is now an argument. - Removed short option -o for specifying offset. Use long option --offset. - Removed option --input-session-handle with short option -S. - Authorization session is now part of password mini language. - Removed option --set-list with short option -L. - Removed option --pcr-input-file with short option -F. - Pcr policy options replaced with pcr password mini language. - fix a buffer overflow. * tpm2_nvreadlock: - --handle-passwd is now --auth. - --auth-handle is now --hierarchy. - -a becomes -C. - Removed option --index with short option -x. It is now an argument. - Removed option --input-session-handle with short option -S. - Authorization session is now part of password mini language. * tpm2_nvwrite: - --handle-passwd is now --auth. - --auth-handle is now --hierarchy. - -a becomes -C. - Removed option --index with short option -x. It is now an argument. - Removed short option -o for specifying offset. Use long option --offset. - Removed option --input-session-handle with short option -S. - Authorization session is now part of password mini language. - Removed option --set-list with short option -L. - Removed option --pcr-input-file with short option -F. - Pcr policy options replaced with pcr password mini language. * tpm2_nvrelease: - --handle-passwd is now --auth. - --auth-handle is now --hierarchy. - -a becomes -C. - Removed option --index with short option -x. It is now an argument. - Removed option --input-session-handle with short option -S. - Authorization session is now part of password mini language. * tpm2_nvundefine: - Renamed from tpm2_nvrelease. * tpm2_pcrallocate: - New tool for changing the allocated PCRs of a TPM. * tpm2_pcrevent: - --password is now --auth. - Removed option --pcr-index with short option -i. - PCR index is now specified as an argument. - Removed option --input-session-handle with short option -S. - Authorization session is now part of password mini language. * tpm2_pcrlist: - -gls options go away with -g and -l becoming a single argument. * tpm2_pcrread: - Renamed from tpm2_pcrlist. * tpm2_print: - New tool that decodes a TPM data structure and prints enclosed elements to stdout as YAML. * tpm2_policyauthorize: - New tool that allows for policies to change by associating the policy to a signing authority essentially allowing the auth policy to change. * tpm2_policycommandcode: - New tool to restricts TPM object authorization to specific TPM commands. * tpm2_policyduplicationselect: - New tool for creating a policy to restrict duplication to a new parent and or duplicable object. * tpm2_policylocality: - New tool for creating a policy restricted to a locality. * tpm2_policypcr: - New tool to generate a pcr policy event that bounds auth to specific PCR values in user defined pcr banks and indices. * tpm2_policyor: - New tool to compound multiple policies in a logical OR fashion to allow multiple auth methods using a policy session. * tpm2_policypassword: - New tool to mandate specifying of the object password in clear using a policy session. * tpm2_policysecret: - New tool to associate auth of a reference object as the auth of the new object using a policy session. * tpm2_quote: - --ak-context is now --key-context. - --ak-password is now --auth. - --sel-list is now --pcr-list. - --qualify-data is now --qualification-data. - --pcrs is now --pcr. - --sig-hash-algorithm is now --hash-algorithm. - -P becomes -p - -L becomes -l. - -p becomes -o. - -G becomes -g. - -g becomes optional. - Removed option --id-list with short option -l. - Removed option --ak-handle with short option -k. - Raw object-handles and object-contexts are commonly handled with object handling logic. * tpm2_readpublic: - --opu is now --output. - --context-object is now --object-context. - Removed option --object with short option -H. - Raw object-handles and object-contexts are commonly handled with object handling logic. - Added --serialized-handle for saving serialized ESYS_TR handle to disk. - Added --name with short option -n for saving the binary name. - Supports ECC pem and der file generation. * tpm2_rsadecrypt: - --pwdk is now --auth. - --out-file is now --output. - -P becomes -p. - Added --label with short option -l for specifying label. - Added --scheme with short option -s for specifying encryption scheme. - Removed option -I or in-file input option and make argument. - Removed option --key-handle with short option -k. - Raw object-handles and object-contexts are commonly handled with object handling logic. - Removed option --input-session-handle with short option -S. - Authorization session is now part of password mini language. * tpm2_rsaencrypt: - --out-file is now --output. - Added --scheme with short option -s for specifying encryption scheme. - Added --label with -l for specifying label. - Removed option --key-handle with short option -k. - Raw object-handles and object-contexts are commonly handled with object handling logic. - make output binary either stdout or file based on -o. * tpm2_selftest: - New tool for invoking tpm selftest. * tpm2_send: - --out-file is now --output. * tpm2_sign: - --pwdk is now --auth. - --halg is now --hash-algorithm. - --sig is now --signature. - -P becomes -p. - -s becomes -o. - Added --digest with short option -d. - Added --scheme with short option -s. - Supports rsapss. - Removed option --key-handle with short option -k. - Raw object-handles and object-contexts are commonly handled with object handling logic. - Removed option --msg with short option -m. - Make -d toggle if input is a digest. - Removed option --input-session-handle with short option -S. - Authorization session is now part of password mini language. - Supports signing a pre-computed hash via -d. * tpm2_startauthsession: - New tool to start/save a trial-policy-session (default) or policy- authorization-session with command line option --policy-session. * tpm2_stirrandom: - new command for injecting entropy into the TPM. * tpm2_takeownership: - split into tpm2_clear and tpm2_changeauth * tpm2_testparms: - new tool for querying tpm for supported algorithms. * tpm2_unseal: - --pwdk is now --auth. - --outfile is now --output. - --item-context is now --object-context. - -P becomes -p - Removed option --item with short option -H. - Raw object-handles and object-contexts are commonly handled with object handling logic. - Removed option --input-session-handle with short option -S. - Authorization session is now part of password mini language. - Removed option --set-list with short option -L. - Removed option --pcr-input-file with short option -F. - Pcr policy options replaced with pcr password mini language. * tpm2_verifysignature: - --halg is now --hash-algorithm. - --msg is now --message. - --sig is now --signature. - -D becomes -d. - -t becomes optional. - Issue warning when ticket is specified for a NULL hierarchy. - Added option --format with short option -f. - Removed option --raw with short option -r. - Removed option --key-handle with short option -k. - Raw object-handles and object-contexts are commonly handled with object handling logic. - Support routines for OpenSSL compatible format of public keys (PEM, DER) and plain signature data without TSS specific headers. * misc: - cmac algorithm support. - Add support for reading authorisation passwords from a file. - Ported all tools from SAPI to ESAPI. - Load TCTI's by SONAME, not raw .so file. - system tests are now run with make check when --enable-unit is used in configure. - Libre SSL builds fixed. - Dynamic TCTIS. Support for pluggable TCTI modules via the -T or --tcti options. - test: system testing scripts moved into subordinate test directory. - configure: enable code coverage option. - env: add TPM2TOOLS_ENABLE_ERRATA to control the -Z or errata option. affects all tools. - Fix parsing bug in PCR mini-language. - Fix misspelling of TPM2_PT_HR constants which effects tpm2_getcap output. - configure option --with-bashcompdir for specifying bash completion directory. - changes in version 3.2.1: * Fix invalid memcpy when extracting ECDSA plain signatures. * Fix resource leak on FILE * in hashing routine. * Correct PCR logic to prevent memory corruption bug. * Errata handler fix. - changes in version 3.2.0: * fix configure bug for linking against libmu. * tpm2_changeauth: Support changing platform hierarchy auth. * tpm2_flushcontext: Introduce new tool for flushing handles from the TPM. * tpm2_checkquote: Introduce new tool for checking validity of quotes. * tpm2_quote: Add ability to output PCR values for quotes. * tpm2_makecredential: add support for executing tool off-TPM. * tpm2_pcrreset: introduce new tool for resetting PCRs. * tpm2_quote: Fix AK auth password not being used.- update to minor version 3.1.4: * Fix various man pages * tpm2_getmanufec: fix OSSL build warnings * Fix broken -T option * Various build compatibility fixes * Fix some unit tests * Update build for recent autoconf-archive versions * Install m4 files- update to minor version 3.1.3: - Restore support for the TPM2TOOLS_* env vars for TCTI configuration, in addition to supporting the new unified TPM2TOOLS_ENV_TCTI - Fix tpm2_getcap to print properties with the TPM_PT prefix, rather than TPM2_PT - Make test_tpm2_activecredential Python 3 compatible - Fix tpm2_takeownership to only attempt to change the specified hierarchies - use a _service file to sync with upstream tags- update to minor version 3.1.2 (FATE#326270): - Revert the change to use user supplied object attributes exclusively. This is an inappropriate behavioural change for a MINOR version number increment. - Fix inclusion of object attribute specifiers section in tpm2_create and tpm2_createprimary man pages. - Use better object attribute defaults for authentication, preventing an empty password being used for authentication when a policy is set.- update to minor version 3.1.1: - Allow man page installation without pandoc being available- update to major version 3.1.0: - the tpm2 stack introduces an incompatible ABI to the previous version with this update. There is no compatibility layer, libraries have new names - install-man.patch: dropped, because we don't really need it - tpm2.0-tools-fix-hardening.patch: contained in upstream tarball now s etc. - upstream changelog: * tpm2_unseal: -P becomes -p * tpm2_sign: -P becomes -p * tpm2_nvreadlock: long form for -P is now --auth-hierarchy * tpm2_rsadecrypt: -P becomes -p * tpm2_nvrelease: long-form of -P becomes --auth-hierarchy * tpm2_nvdefine: -I becomes -p * tpm2_encryptdecrypt: -P becomes -p * tpm2_dictionarylockout: -P becomes -p * tpm2_createprimary: -K becomes -p * tpm2_createak: -E becomes -e * tpm2_certify: -k becomes -p * tpm2_hash: -g changes to -G * tpm2_encryptdecrypt: Support IVs via -i and algorithm modes via -G. * tpm2_hmac: drop -g, just use the algorithm associated with the object. * tpm2_getmanufec: -g changes to -G * tpm2_createek: -g changes to -G * tpm2_createak: -g changes to -G * tpm2_verifysignature: -g becomes -G * tpm2_sign: -g becomes -G * tpm2_import: support specifying parent key with a context file, - -parent-key-handle/-H becomes --parent-key/-C * tpm2_nvwrite and tpm2_nvread: when -P is "index" -a is optional and defaults to the NV_INDEX value passed to -x. * Load TCTI's by SONAME, not raw .so file * tpm2_activatecredential: -e becomes -E * tpm2_activatecredential: -e becomes -E * tpm2_certify: -c and -C are swapped, -k becomes -K * tpm2_createprimary: -K becomes -k * tpm2_encryptdecrypt: supports input and output to stdin and stdout respectively. * tpm2_create: -g/-G become optional options. * tpm2_createprimary: -g/-G become optional options. * tpm2_verifysignature - Option `-r` changes to `-f` and supports signature format "rsa". * tpm2_import - Parent public data option, `-K` is optional. * tpm2_import - Supports importing external RSA 2048 keys via pem files. * tpm2_pcrlist: Option `--algorithm` changes to `--halg`, which is in line with other tools. * tpm2_verifysignature: Option `-r` and `--raw` have been removed. This were unused within the tool. * tpm2_hmac: Option `--algorithm` changes to `--halg`, which is in line with the manpage. * tpm2_makecredential: Option `--sec` changes to `--secret`. * tpm2_activatecredential: Option `--Password` changes to `--auth-key`. * system tests are now run with make check when --enable-unit is used in configure. * tpm2_unseal: Option `--pwdk` changes to `--auth-key`. * tpm2_sign: Option `--pwdk` changes to `--auth-key`. * tpm2_rsadecrypt: Option `--pwdk` changes to `--auth-key`. * tpm2_quote: Option `--ak-passwd` changes to `--auth-ak` * tpm2_pcrevent: Option `--passwd` changes to `--auth-pcr` * tpm2_nvwrite: Options `--authhandle` and `--handle-passwd` changes to `--hierarchy` and `--auth-hierarchy` respectively. * tpm2_nvread: Options `--authhandle` and `--handle-passwd` changes to `--hierarchy` and `--auth-hierarchy` respectively. * tpm2_nvdefine: Options `--authhandle`, `--handle-passwd` and `--index-passwd` changes to `--hierarchy`, `--auth-hierarchy` and `--auth-index` respectively. * tpm2_loadexternal: `-H` changes to `-a` for specifying hierarchy. * tpm2_load: Option `--pwdp` changes to `--auth-parent`. * tpm2_hmac: Option `--pwdk` changes to `--auth-key`. * tpm2_hash: `-H` changes to `-a` for specifying hierarchy. * tpm2_getmanufec: Options `--owner-passwd`, `--endorse-passwd` * and `--ek-passwd`change to `--auth-owner`, `--auth-endorse` and `--auth-ek` respectively. * tpm2_evictcontrol: Option group `-A` and `--auth` changes to `-a` and `--hierarchy` Option `--pwda` changes to `--auth-hierarchy` * tpm2_encryptdecrypt: Option `--pwdk` changes to `--auth-key`. * tpm2_dictionarylockout: Option `--lockout-passwd` changes to `--auth-lockout` * tpm2_createprimary: Options `--pwdp` and `--pwdk` change to `--auth-hierarchy` and `--auth-object` respectively. * tpm2_createek: Options `--owner-passwd`, `--endorse-passwd` * and `--ek-passwd`change to `--auth-owner`, `--auth-endorse` and `--auth-ek` respectively. * tpm2_createak: Options `--owner-passwd`, `--endorse-passwd` * and `--ak-passwd`change to `--auth-owner`, `--auth-endorse` and `--auth-ak` respectively. * tpm2_create: Options `--pwdo` and `--pwdk` change to `--auth-object` and `--auth-key` respectively. * tpm2_clearlock: Option `--lockout-passwd` changes to `--auth-lockout` * tpm2_clear: Option `--lockout-passwd` changes to `--auth-lockout` * tpm2_changeauth: Options, `--old-owner-passwd`, `--old-endorse-passwd`, and `--old-lockout-passwd` go to `--old-auth-owner`, `--old-auth-endorse`, and `--old-auth-lockout` respectively. * tpm2_certify: Options `--pwdo` and `--pwdk` change to `--auth-object` and `--auth-key` respectively. * tpm2_createprimary: `-H` changes to `-a` for specifying hierarchy. * tpm2_createak: support for non-persistent AK generation. * tpm2_createek: support for non-persistent EK generation. * tpm2_getpubak renamed to tpm2_createak, -f becomes -p and -f is used for format of public key output. * tpm2_getpubek renamed to tpm2_createek, -f becomes -p and -f is used for format of public key output. * Libre SSL builds fixed. * Dynamic TCTIS. Support for pluggable TCTI modules via the -T or --tcti options. * tpm2_sign: supports signing a pre-computed hash via -D * tpm2_clearlock: tool added * test: system testing scripts moved into subordinate test directory. * fix a buffer overflow in nvread/write tools. * configure: enable code coverage option. * tpm2_takeownership: split into tpm2_clear and tpm2_changeauth * env: add TPM2TOOLS_ENABLE_ERRATA to control the -Z or errata option.- fix build after adding install-man.patch: autoreconf is needed again (sigh!)- install-man.patch: even after update to 3.0.4 the man pages are not installed correctly. This patch fixes it locally.- update to version 3.0.4: - Fix save and load for TPM2B_PRIVATE object. - Use a default buffer size for tpm2_nv{read,write} if the TPM reports a 0 size. - Fix --verbose and --version options crossover. - Generate man pages from markdown and include them in the distribution tarball. - Print usage summary if tools are executed with no options or man page can't be displayed. - man pages will be shipped for SLE version now, too (pandoc dependency was removed)- disable pandoc for all but openSUSE, since pandoc never was on SLE- disable pandoc/man pages generation on SLE-15, because pandoc is not available there (and adding it would require two dozen additional haskell packages)- update to version 3.0.3: - various changes in tool options - man pages are now in section 1 (formerly in section 8) - tools are now installed in /usr/bin (formerly /usr/sbin)- update to version 2.1.1 * Potential memory leak fix when tcti/sapi initialization fails. * tpm2_listpcrs: use TPM2_GetCapability to determine PCRs to read * listpcrs: remove one redundant call to tpm get cap * listpcrs: fix for unsupported/disabled alg in -L * build: use supported comment to suppress GCC7 fallthrough warning * kdfa: allow to build with OpenSSL 1.1.x (bsc#1067392) - drop patches (upstream) * 0001-tpm2_listpcrs-use-TPM2_GetCapability-to-determine-PC.patch * tpm2.0-tools-fix-gcc7.patch- update to version 2.1.0: - dropped 0002-kdfa-use-openssl-for-hmac-not-tpm.patch, was backported upstream in commit 788a17abbe0000c560935ef9f31c9a6892d9ea33 - this version now can interact with the new resource manager tpm2.0-abrmd - Upstream changes: * Fix readx and writex on multiple EINTR returns. * Add support for the tabrmd TCTI. This is the new default. * Change default socket port from 2323 (the old resourcemgr) to 2321 (default simulator port). * Cherry-pick fix for CVE-2017-7524. * Fix tpm2_listpcr command line option handling. * Fix tpm2_getmanufec memory issues.- added the new abrmd package to recommends, because the tools will otherwise not function- 0002-kdfa-use-openssl-for-hmac-not-tpm.patch: fixed unexpected leak of cleartext password into the tpm when generating an HMAC in the context of tpm_kdfa() (key derivation function) (bnc#1046402, CVE-2017-7524)- 0001-tpm2_listpcrs-use-TPM2_GetCapability-to-determine-PC.patch: fixed tpm2_listpcrs aborting saying "too much pcrs to get!" (bnc#1044419)- tpm2.0-tools-fix-hardening.patch: do not disable fortify, do not use -Wstack-protector as it warns also for non-utilized functions and then -Werror fails. - tpm2.0-tools-fix-gcc7.patch: fixed gcc7 case fallthrough errors- Major update to 2.0.0 - dropped fixes.patch, now part of the upstream version - a set of man pages have been added to the package - Upstream changes: * Tracked on the milestone: https://github.com/01org/tpm2.0-tools/milestone/2 * Reworked all the tools to support configurable TCTIs, based on build time configuration, one can specify the tcti via the --tcti (-T) option to all tools. * tpm2_getrandom interface made -s a positional argument. * Numerous bug fixes.- buildrequire pkgconfig- Updated to 1.1.0 / 016-11-04 (FATE#321509) - Added * travis ci support. * Allow for unit tests to be enabled selectively. * tpm2_rc_decode tool: Decode TPM_RC error codes. * Android Make file * tpm2_listpersistent: list all persistent objects * test scripts for tpm2-tools * tpm2_nvreadlock * tpm2_getmanufec: retrieve EC from tpm manufacturer server. * Copy 'common' and 'sample' code from the TPM2.0-TSS repo. - Modified * tpm2_takeownership: update option -c to use lockout password to clear. * tpm2_listpcrs: add options -L and -s, rewrite to increase performance. * tpm2_quote: added -L option to support selection of multiple banks. * tpm2_quote: add -q option to get qualifying data. * configure: Use pkg-config to get info about libcurl and libcrypto. * configure: Use pkg-config to locate SAPI and TCTI headers / libraries. * tpm2_x: Add -X option to enable password input in Hex format. * tpm2_nvdefine: Change -X option to -I. * tpm2-nvwrite: fix for unable to write 1024B+ data. * tpm2_getmanufec: Fix base64 encoding. * tpm2_x: fixed a lot of TPM2B failures caused by wrong initialization. * tpm2_getmanufec: let configure handle libs. * tpm2_getmanufec: Convert from dos to unix format. * build: Check for TSS2 library @ configure time. * build: Detect required TSS2 and TCTI headers. * build: Use libtool to build the common library * build: Install all binaries into sbin. * build: Build common sources into library. * build: Move all source files to 'src'. * Makefile.am: Move all build rules into single Makefile.am. * everything: Use new TCTI headers and fixup API calls. * everything: Update source to cope with sapi header cleanup. * tpm2_activatecredential: Updated to support TCG compatible EK * tpm2_getpubak: Updated to use TCG compatible EK * tpm2_getpubek: fix ek creation to follow TCG EK profile spec. - Removed * Windows related code * depenedency on the TPM2.0-TSS repo source code - 1.0-alpha_0.zip: removed, use tpm2-0-tss directly. - tpm2-install-binaries.patch: not needed anymore. - fixes.patch: fixed random return build errors.- update description- initial import of tpm2.0-toolsbuild76 1624003940  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~4.1-lp152.2.3.14.1-lp152.2.3.1tpm2.0-tools-4.1-lp152.2.3.1.x86_64libfiles.cfiles.hlog.clog.hobject.cobject.hpcr.cpcr.htool_rc.ctool_rc.htpm2.ctpm2.htpm2_alg_util.ctpm2_alg_util.htpm2_attr_util.ctpm2_attr_util.htpm2_auth_util.ctpm2_auth_util.htpm2_capability.ctpm2_capability.htpm2_cc_util.ctpm2_cc_util.htpm2_convert.ctpm2_convert.htpm2_ctx_mgmt.ctpm2_ctx_mgmt.htpm2_errata.ctpm2_errata.htpm2_hash.ctpm2_hash.htpm2_header.htpm2_hierarchy.ctpm2_hierarchy.htpm2_identity_util.ctpm2_identity_util.htpm2_kdfa.ctpm2_kdfa.htpm2_kdfe.ctpm2_kdfe.htpm2_nv_util.htpm2_openssl.ctpm2_openssl.htpm2_options.ctpm2_options.htpm2_policy.ctpm2_policy.htpm2_session.ctpm2_session.htpm2_util.ctpm2_util.htoolsmisctpm2_checkquote.ctpm2_print.ctpm2_rc_decode.ctpm2_activatecredential.ctpm2_certify.ctpm2_certifycreation.ctpm2_changeauth.ctpm2_changeeps.ctpm2_changepps.ctpm2_clear.ctpm2_clearcontrol.ctpm2_clockrateadjust.ctpm2_create.ctpm2_createak.ctpm2_createek.ctpm2_createpolicy.ctpm2_createprimary.ctpm2_dictionarylockout.ctpm2_duplicate.ctpm2_encryptdecrypt.ctpm2_evictcontrol.ctpm2_flushcontext.ctpm2_getcap.ctpm2_getekcertificate.ctpm2_getrandom.ctpm2_gettestresult.ctpm2_gettime.ctpm2_hash.ctpm2_hierarchycontrol.ctpm2_hmac.ctpm2_import.ctpm2_incrementalselftest.ctpm2_load.ctpm2_loadexternal.ctpm2_makecredential.ctpm2_nvcertify.ctpm2_nvdefine.ctpm2_nvextend.ctpm2_nvincrement.ctpm2_nvread.ctpm2_nvreadlock.ctpm2_nvreadpublic.ctpm2_nvsetbits.ctpm2_nvundefine.ctpm2_nvwrite.ctpm2_nvwritelock.ctpm2_pcrallocate.ctpm2_pcrevent.ctpm2_pcrextend.ctpm2_pcrread.ctpm2_pcrreset.ctpm2_policyauthorize.ctpm2_policyauthorizenv.ctpm2_policyauthvalue.ctpm2_policycommandcode.ctpm2_policycountertimer.ctpm2_policyduplicationselect.ctpm2_policylocality.ctpm2_policynamehash.ctpm2_policynv.ctpm2_policynvwritten.ctpm2_policyor.ctpm2_policypassword.ctpm2_policypcr.ctpm2_policyrestart.ctpm2_policysecret.ctpm2_policysigned.ctpm2_policytemplate.ctpm2_policyticket.ctpm2_quote.ctpm2_readclock.ctpm2_readpublic.ctpm2_rsadecrypt.ctpm2_rsaencrypt.ctpm2_selftest.ctpm2_send.ctpm2_setclock.ctpm2_setprimarypolicy.ctpm2_shutdown.ctpm2_sign.ctpm2_startauthsession.ctpm2_startup.ctpm2_stirrandom.ctpm2_testparms.ctpm2_tool.ctpm2_tool.htpm2_unseal.ctpm2_verifysignature.c/usr/src/debug//usr/src/debug/tpm2.0-tools-4.1-lp152.2.3.1.x86_64//usr/src/debug/tpm2.0-tools-4.1-lp152.2.3.1.x86_64/lib//usr/src/debug/tpm2.0-tools-4.1-lp152.2.3.1.x86_64/tools//usr/src/debug/tpm2.0-tools-4.1-lp152.2.3.1.x86_64/tools/misc/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:16529/openSUSE_Leap_15.2_Update/6e9d576597bb5adb0d4d79abfda314fe-tpm2.0-tools.openSUSE_Leap_15.2_Updatecpioxz5x86_64-suse-linuxdirectoryC source, ASCII textC source, UTF-8 Unicode textʆz롥7Zutf-806efe65b5c1bd2c598ed99e879068cefdc9cc24e19927784ac5a73a0b35babd8?P7zXZ !t/j] crt:bLL 9 `$^pW;m~>\7#a5GDŽ_iifñv%a |~^ԻfeBXrGЈ B>\t*GrQv65'4$qwijsi>&l晪|43i:[,V0]T6F^hlfvGooJ:UZ"Drv"-מ{n-Ip 5ϲA-rd(a/ځyحcY 7O}Ud5AeO1 ;1 Cqbܾ(oTM90铘LЊsا^_4섫/p莪03T, 1X_b}A?Xx\PTS4.Ɛ'y 9R03-2: {`T .3E K$Ec|Ac\ph=M`6gI9ެn<:dR-:pUR^G׈HGN`ؖ(8q]\އrv'mjf䗡 BLڦ7/EgbM Rr4 JnNjG[\`PO[u7Zh٨L,ʼvQ:PޫzCC_| ͵gAZ}:J< A:Sd{'T=oa)N{{;%8{!XA:6TemP/.sWi _<`cE7r6݊lkUtkV.4~ШIYy1@hW>XuA6V#a3H)ӮfzsЃv-M=7%W]5ev2=mIt7B 0YƘs <8Y^ZZx~sgk_e5+lAMm,,AUmɜ՟Гk2A/y1W[ް$HݲLI£`mmY%8*%hJkaEܾ p׉U]n<3˄ ~_>:OErUqmj&|ݭ 6ڝc:m'ʼGPG}~LO>> ܚTl5=;!hi1QɊ'9^9Q~[( #T2bSl@S!d;Z2}d;yeĴ;4Ʊsi&#@u1l/=J^:{SZ/c ڀZm=m Ft, +6}wR ??F ֑!aIfQ6UT"Y3{4-1W.S}*Nͳ88}b_u) TjdjlzO>Tof),Qips2oo8nSBx@]Ҁ`p0=#gj[ m`)~41-؜pvtzՁ98+q㾾 2G˗sټ.Ow x j d.֓^천o3g}wtp0!F`hWK G?&7Fr0/ X<;L똀dKkBl0*/ٯ;7"g uqި)+ _u,^wHp&}q\/Mo}9|'b2 9,n%M;Ntyϱ6J a,`j4ǷfveZ ZfKT Do/v'y&tXN%%b{U#D m f]s;xԹcL*sΪԂ8a["ڜdz ӽ@R+yD/3@:_- [^Єh:]DIdžRN@_w^{#5"ߥ- Ƚ!;_Bܺ¹#dʋN6l!NILjS6JxIФ1Q #wgH$k}̲O)5[sY1uYZ~>{[銫_Xd{ǡf!4gh(N bNP^OρN-~P!q}82HԋZYBkۉ%X'jOݕw-j[a)?|e,Hk'wMB[WmvޯC^s\<< ui9nw ҡ^tľ*W|sn8Df~ܑpҌS:~=e*)jE @u#^ O{S0(Lg* I\{{m>pكdI5sAoXnܲ`E\P8!iV8xρNwnV!˭`5\ߙQ햇3xkz\>2[-:HsخkmVϜYWrP$&h`~=mg!OMkPQ]iF^GYa1=eo˧VX! T9ݶ{=DٶD{NsUײi5 OF؋Xy'ڧ(!LHaɩT{Z0vIP/JZ ~cKUO~arsq/g4Q{ .o6ny";l@I-KUbiu>]p(tSp 1/V~ZZ:T8IyZH9w Qz/Jۺc2-R4GcqJˇ~lŶa&<1lIN93JWYQYJX!"tA8YVlWm2vu'aLiU^I.J|ױ}U[JI#1ZaM jSxL]4C]鵆6WO (u3rԉFӖ{z ֑77{,0bNObH.I/2eK Gl ގk rKhH +[4OR,d`xneڪo,+!1ѮJ3r; OU )S@5M&6R61`'3m9x>8.gΏBSynZQ˙eG/^M&BҬy Md[|JH\XˊMqS>l~Xuٽ"bwUcL/: ̩9t&alA,_KJ4i\qXldkBHyB:m_16!tI p|=3w/{- 63w?W: u (\=`fdۗJݨ5*Lhx)~M Dҁ5$ƶ24 d`À{y8I2!&. C.?yg98_>ΉhdP\ߜr_h&r5%Wĕ==͵(s~*@'nݺncpS9C\O۟ңp'% t[eF=2 |ѕ̤S}Z{-u@נxBZye]+X@0!A@{6 u}*|m_(A1U)!^dϰ^=x+P"B7S+vw łU1\ ,n,,osj9;q_j F4N"Yb|nY;0ZƸl,'^cbr !,a8C?1Jܱ2/7N%V"s?8z^JD&.؜f Ь X3 5d9 }Aa2NNׇAařV{ ֿ^ Ygl3-a&̢nJ CFb]d2ʯ\4!v|:v!eG9G wʬp-Hv7U%&57d( ,֕I_,k6$ Q fIYO8JRKӝ\.SΕ:q)`U bw8þSaDnD6jqZ Z"|d?7Ofo$of(BإZC,altx&"M`hmFTW:CLH0! /y1OQ5NrG˵<*uЪtBVPn^7b1{C}"FMBjԸ+]}|sOix;1,M0MnP W#!2n6٧L7%yelQG:8/@ɬ,ZתּFm_ sTD EU({SSs>ܻ 7']JgѐwM8KeiH3x$eD0OU?pNCRculў-^!Wf;_l«qWI $kNOrcE$'\\FL{y cPX=ВQ| c{;v 3&Q$\ã'yd`Eda%R/NG 0#P-4p!IĊoWIp2F˖@ b/JZmh_G q34iVջ h+DlǿUH@/;'G%H{f@fJob5e&oe ,:. #m W,-̾ ۩暺R)8GHVl"3zI@Gݼ52v)=h3}Dcn/~s`"E>$M}͗/n.=S"ݵӶe65;5P O5iFHRЀe0A=9XOl(5 Ұ'bGP+Ӝ{.ѡ$$WHz_4:/{T*޳ȡO:2 ?` "" _{t^M@G^2%l"*vۂ (K刉恫,;?%3t@DI]զOM91! =kPcBq<986K韈 j&c&(- 'MHdWܥ~#l=7uD>~¢7dqCwWaC*NmlV\8w޾;2vP ӣl ¥O$E]AS_ 3;o(Lݔ\]u^0w*!:G^397I#~9\K:Ym4MLId!őU۔gJW>',Go51q3"ʫFA^8׉cdUd2x`2H\#|l<#L J3Udnkt-~l҂W58ϒ!E7}UsTW鄋7_&#CvJj7OUW|瘟|ѨZ25{~dNY\LNYc0ʄo#1vN\xXC!zzҊwJ^@-aMDxM\ aOŀ3 ֧f057VR2Ҟ,5 )x6MĔ /_^H;TPRfh75i犵di(BSeZPc9s${)kD@x@nڠs KLuFgw?=iAZRZX%G7xȓn/ ,Ob]M/39>ߧ!YjAoS0ب5G0b5"Cb` ڱuU]\:jMjt~Yݩ>O_rJQNuUא4wG:tؔ_AJo.o ƪEHI~ {Ia|nQՍŤZ(_d74 Hn=Uq8̗؈qV{1 `_LPUm|0-mҝݽ,DJjl#} \Ä!Ap4]Rjx[Y.}>[L."/BA<#$_vQ,0}M\yVL~D (^hbS 6[@1b8(`dKXPo_u %x?.ځдBvYrV݅LtO(Ы'$q â@oQR$WFnk4fT6uo;W3OHOz-tg(7حg~X&o=)N{=eghe= =LФ=2("kς?:%cM qDN4$m3qzVAfQjRPC۩xRfI=0xh~|0 Ŀ?|B:u>f2.jnmVy'cy vҌPwZѤ ".w=)1@Z@VOʴyed'D'[NŮ(kO썦#K2'b^{u$؉ q`{Ŕ9WeF~FƖW!V;/zB2aO˙3eíIWG:OńGKzH5Ez@mgMP-r6 -7+|dL7h NKjpز6y]kp4j=R m['_{ST%#GׅyP̦C  n23gKrJvUm=/Z:Ņ{!kq^‡k01:b;I7[cmP3Em׼h ,kb撥@'m+<ч6&B/ |EDw~ XͤbCе޻;<}XAϷk HTrRY:ߛٱh|d m8gS$*?HeB(\HPX SE0ЯѽSÇ~ڟK WFK] #|?D ("8x57E#04kt-UNqWY9GUV; ݟ^{~7ݦԙ9`&^Bu:9`|ܛ {3}؉@?cG`aiATl?PJ3A5"`0aV8n 8L3f@LkW*i{!CŊ#1}rG$B \_ǜ_q7ly=ӡ~fڌ:mKF!9|QM9J6?;/b+- K4P;;P= RTE3t6B hvsq=FK7"$l.\Ka( ׵/&=ԅ{l}??HeR̻[[])moe¯I=+r "9UJٖ0PX~'@qHh'+MBiA2Ul #hL{sQ>L;Im@I=2_M1kǃG=e)q["Rć{Xz[0w+ ;0+M.H6;ͣA$þ۷pϑ-`xxygM63PNVVFJuant"|0lu(nn=LlS5IRpkE%.oʼn8i2!hɏU,9dqvqT?L?'E[>z!s@okalФ|3?9BWI 8|ĒR(0SQzl^@դ^G@t`*V&@ c#gݯ0{GPtі=d_ăUSw[<EB41uRɶ"V(&+XSI}NT\HBɋ@  SXIX Y,y(yv?_j}DY~}HnR*,-2o,Uņ-||||{8'=FKiVW ա(#)3r mI%ֺP7tyϷuHE(BzH)ehֱ45c}nZjLWD$4$*K* 9-(! Rl֧/Vjo뽍OSZ<(l 0OH+R K^)?S<.], D( A 0r!M_fWwJ2&lgּ&۽nMz]H+3)M\Dq4$oe0nYՒBUK- |Ӝ\`TRk;-#,*iv@׈WwH$>r ڥlukGT[;a2umcLPѲOK/ Rz;(56&ƶhk+/$B j+ީrޮ9s 3eܸב6YC4%OM HByeȂ|כּ0ӹelHn& I0psqD}Gr,$xk?U9e$VJxڸMXn@D9Ii dxvx8%!֟BozgKţj Sӳr%hcVpM%^5+ Ani7C p3WnIGgp`"B(œu EZLg ]8ΧSҘl[јis@M5N&ʈ+^̀$&D1aǂ7I㋆@m0oqpSC 25e\.du z8}I 2&#g#=J`k%#Xkk`)d\PAhD674_PWJ{26SZ%P?Z7lB!UȕYD,ʢM {ԕI3E׿yo֌z֢k sxk Iiɡ"m7 vO EN F(TK?Ϥ6i)"쥻2!\iQZ@(.ď[߫yoHS;強b+B7ɂ ر; Qu#.:mͽmٛ{⅀pp~{]re'#~*o~ 2>^ cgĞ,6Ff#e  ) +aյ,3+nPkxV/pVDpvSlK# wDaаTMU9͊ivf7zO4GE (7e HOmG3}CC׌jmYДP)|_\H/ ؃ӰXp` ۴@;Y? 7>j͌.NܙM s HǼAvKTWz"Q6(X@= 2ЉQ.\6SU }tv*]f6OC#8mGg#4vJ= 7Q5]«Q к:4,!@ͣ'.…:( Sևt0S*9մ0Vhdg8rfNp]>iv4^ilG]ql5BlÜ}I/El~U mIaET`1_`[[jJEEu_~Ö$}&),MTn4G<\>h +0_B|i 7ߺݩIc&W:rP}(]9:Qi?BKTtˡRgI9m _tT! }EّQ[(*c+˺("9M!rcwvV\QS?LTn-%~Fdl]z0#-/}ߥ2KCߟfC Q݅S {϶^y\A#?y MY0|߃r E[T.#c>*]Ed lҊ\W$R>0E2ø1MWw)fz>/܏8_ǘ rGa>·q:9T6G63 2HF>d7>6J䩃dza>?guUS 7f>l|8 YhL<Ôb6Ǩ4Y/ Xx$O AVp(R8xKG9ͯ.\^ّJ @C{*'!Xޥpp#/QɛKQ0we l ^VCu#wKP  Ki7hY<Q\JF CzBV2]ޑ7ԬNvq6ݹT+P%_w ܹDg$K%@ fB-tz!1D|9.gemQN3Epnq|AM&sXnŗBv+Fݏ6"LjT= ` |\,j X~bJ.G2l*!p8*7զ Ō!XW)5-ZNXܛNZ^3߭ J9a J)Igm:O?{7bE?OuEݧ]9 ~el9H;Ct܏#( edj@5{MKהlc3b%( cem/GGh;R~L%i!`7kbvD_Μm{DԵi[.THv: +7?<k:)+'`iUH85=VFLn14>Cx61O= ic- qЩKK(tz&x^4׎Y0y顤+2=h;z Ʀ^t=+lM_tU Jv'Q^N@)z;OkCP=@4Dbi0X^&/s Y:lM[ D: EI)y i/dnI~S|^~. mxȹ]p V%sL^=MA!yy*%OjF;#t}䱩s췜14AaGf>#銙-ņe\)+3&HҘt DL19 ȍnꤑ_o]ɩZa}PEүUڥd<ܚq P+1{TP?g/<s]^qEY.rDrwdl4j:>JU*[=o₭Btk%t@(?RD-HKޘdcNP M 5GoVFoF Q)^w9˰f~ 5!< F72FHe5Աb+⇺LзbIB8{~@"Źs057'=y(Rڡ^ZU~捈$c~{~px@h6|?@'9<&ƚhH0"R$t7* P}AhT־0뗐Q:ۤa_ [+{]g.,| rO9oJݪb,WP$բZ=g0^lcK^ӜU~ }A'+S)P >b52rYp6J)k tCu \{hQ퀠lHKl'~2*[vT7hiә,g2WRx 2L8y&oO2S@StL s'Сۀ}/61wQ̤- LU3䩟B}- "Br#87bG"~}YIoxt):b>DOHg),@+Y1g^G?K]RGy20ȠRyegznoifHeEqk^$*hdܛEo3xJ4ʫr#"U)鬪*Pe 9N~ ~G5H&E@486:QPpg#l 79:9)(F}po3qmBH09ajیX9jclm9}F fR’STlxMw ~b][Խn4]w5 |r:5VXnJ(Ă|}ob7+W0bԶL̃jGO^8Ìtb}а 6˿S7AqEh?iX'j-ⷆeX![=#@7v*_%̶Mm-p VLxzsk'/HY)pf1D҃IjJy/z&) CT>@DkSZDeƾ$G7`1XV$k㇯ncN"124]{X ̨$]xA.3W ,_Y r 9$\"#ڼ/ɲ!!A@4 *Gk|Yw]&LiJaRFM')XPLdm5LÆJ 6^-iМg{C>VɾMM+kDT[MYDPɉk=m|W󥱻C+:i@*]Z*+O!ഓEq~L!Fd?~54V"6QNCSk-dvՄSu0jY!n-3%u/N2¢{BҸ?d%"'(Ron#q9BH(0Xf^@U}aRn8\sV0!Jֵ36MnSg5ik =G* ^\ȎU)(9D@Y;ΜLߥwe3xn氎 J+~M1˖GEJQ}7Af$}QQ)b@QY0Wis-%j0*'Ԝ*=d.$RkFbq,Dv-"(~~J=tEBX,1mHk"_BrݎiŶUaG=͜iBC {it:Era̎څ/}f%}6[LǏz>40'> C.~sEG&:a@͸=b][(NN7RJI~8rN^bDm8e=!l5$*jdufY>p>5N9֖'hڌE;k\١M+ͼ!qe7$6&u?cʿA$-sx<Т*=!0՞݆w)=|*fꘖv* ݃{gvQ3o^Z!;TFJNA+(BӋ hշ8j;tܷ-qw~=Ӷ;L^P@h-A3 ?cwd& Cǥ._"uvV%#̬jL!NL"x#2/q 3$ҖI?y8V 97#!}-[a ;UC$ӾR79Twʁ`Ѳ Y+Xj`Me!I>'_?%MF*#$)4pc:a=VJ^֨w?kB_dHrLRM>{.)ON9' JhU_L9` )a]e#Msý5\kmf/\ܪ!m ui>+쒩5|DtK=ҳH8IGFbQZZ$T.+LdlBo i+qb?-{keM9l&ݵeWM$6p!^^CZ-flp{19uGqnz6QY9Hw/8b~YCT|-P%Q1=rg1&Kه4+c)+/yzp ;\Os|`MPU:((B|,k=,`Xx'.6`>R7c/ xvgbԂG}CdkhRMN[ۇi>t4iRpYC>EpkUĬ؇ fO˫9lG ݅ii/ůʹZ58, W"b2N idxU,|U l1b Y7U8(Mt4ژ>Qy,,"lӼFBBǼ8b ;@D=fSc*tsSoxy߾-3hv/ +dJ{NE)fjmL\KpRAnؿ5oWsq74+S`Hc=bL6,) e%-3H  1ڎ̭j- ע>,awSg2)A4E4*΂0B}"YGl[HX'=(T<|iJT1 NCGQRb{ 5'LhyS@]#3ZDt1M M~<'TdwjF X[kk,dzĉ8uop٘츎VQFZ|{9%;ݳ^m!maaI;=>#!<}צ ]AN8 Xhzvx(nH*#y;c%p GmXN11}#xPy0OL/icr2fK!^ ܽ1;X&Ud<0p9lhEc".\, ~ՂUeGc%Q$BǓ=E3FaBNWԽ"-za V,r:|G\(Ƈ[w ꠽ΥHqx_~͎ G?&K%]6<,m'' 4~Q^U4睼%0h)ܯGf /y;ޡ{T12 W#PIFf*h?#a=G_{xq rt2ξV!,G9ЗkX6&xbO4N(}zwf2wML넥7*}MP\en>@pY?9GQ16| pDeCy Sr# $hezBО#:63Pǒ? Q=+Ƕ,uW♺HI 7ZAЏ(-kړur#l?m/ȫcM#2{C &ҋ|y a$R.CY*c@G,,]lH/뉄'J%mݢ&eF _|~l,Vin"`-a|p%za?/BfMi1&p>%C&co^e7Sa7Wj~$z"/hf^oPfs]p4 KtE5A$urR}wӚ{Fu3g|'vM]Y)$%ȉh`U Z#|*@n >F4`MϮ3)J_ðz5i;RfL9RUv vIH#jd Qh6%-+=~ .xF s=368,|SZ="F鞲C8 "N ٸ'iU6ns0ulb N'$-&ߦ#3^%C<[u<,Zvz!h+jHX o9[Gw4Nz/>rS'd~LLk|AЪ*a[~R 0r `x\q=}6csۉ|oq: 7˓SͤCBESt KSl[wY&bT}v8,Qgԍv/w9P\=nQz f " d9=IbNi>ubHT.w5HNB7`եdp h0Bm_!)#UZ  SQ‡K>~N8/hxr8T)/鰝>/?AVD*j;3wmzE8{ :V'S2)X}&=L[)@?˿pOɜfMilB`irHyKJ !I1:@~1 I|`9rޙK̉fx:Xy;=ZqjGT&NN.%^g2&H1 :,l>xyJIb2+bˉ{x4 ) >-\BA<2@ {hMhصݝNe&Kk'Tn׳^<~:"Q~Hf٣6 -#9Z;}L|y4LSuKjhC73[ 7o{#N \:kO/x!d<&)g<H CKiw_ѿL|JCw"5b](,b[ѷ}2S!:e&B`n":{9mtGԗ H34BM^oL_òmРG\;O_"\ +n.7d{4SHWn@z7Q!ӰELy:&.,z,0vι=RA[Y'=}/h.gGx^UyU5dui{82AM'"0 1~$$vEWFq$08iCqmu IĤ׷CKNú^zYm-7@Q&bdCaJ .>YG۬"\̅Ў_b^@hM/&>TNc9y+YLÒ&KmBuMkL{7F_gd_}pc쩕?ZJu0dRYICO%q+F(Uh/ѡ ?ŲhtO!wE|ܐf@DW|Df}f.~-bk1kgcO[\jv۩*v vJ56dNGڲC~Y>L⢧ E)@F . } Y@?,d\xB-@OGK6)?G\S I>ѽtE%* =42xɍ`B2]=рsӋ>  6H &P6! vnY ]Z  H$bw*Q=i-{KX.<.cԔI^:E$uK{E⓫{$HY0x'7-l0eLhZˎVTc J v)=Οٲ6^ 4%A^]\I[T`10IA>@ARG<#pшƕu t΃tOc4'I)~@sL{ko;"ƕ 6LҜ"ň3{p?Qzp`Hb`<{~Sqɼ:928UQne. V5B}GisaB,夠-6%]@h6u*O]HO]xiZDg`>eޫ>-Q{˘#{@ߐr:oo2EcC{@aLd(2A@6TRr4ˡȪ Uʯ:۾>z"|A3::ui@B~O4Yb"_wDPPR]I\[Uzy_vUy.%S[Q/}oT'mn&#L^l5ڟpNƃ(|i ^OjzyiEI|׾o#t*%nO뙅Ә{_IH0vU 2ޯsI?^BHϑ09?$nzJRHuy&-AC\g`ppmAmK2tޖ G5"K;sz(ɴ6W51mr3"z_<y/sֿ)dK> Y8RVɒ9]r,.XDwËؽKqEUOӈhH|j~>]_`R\F0%Qvn; ,$zvUbTr7m+GQ'2#z:Yx쉍- th~dָZb>V|8;[%B$>X垨o֥kB݄'} PqmP0+;/V;yδEc$;N'/-R3) W!9'xOJ8fLٿcZ@dLl׊mha8 s[*Pu#^AesGM [̊tK~"tyI j۬B8E iaѱ\vz'ß#|j«\tCԤC@3 zFyINzI8X'p̬Ђ^mPtG3wD7kK1$5)q|O~'zĮ&LSe1ֲv/n9FWw!ku᷑E_9<+ГM2淉,/T\5kLGOs LV-&:/B..ie##nmg60 kd-ę3<:U9j@|a'JSW)MYb>*%f`wB㰁hhժ&Ñyc) u2 ik.vKsBŵ6hl`la |᭯A'F(Z d(<}:-mt|1TR"pc|~#5[g.vÝaRD+C`Ci^'2w1uރqצ jWkܾŠtc;UFlD=>,d5\~Wx_&['mI=FI ŋu]_ǒmJ.f0'8#/$h)V61%>n?88cW;g4ufom%}w?Ӹ Jyf`輄T Zb.+ıJ QUTmGXe+TkҮ<8h*Iz| 3îU)䶞( SY@0Mrlae6,;8'S sDL:E~(^!/4iWL(t՘jg18[un8=gk`Xϥn*yr6l& ]+[aScmzۛd4c\롕fjÐIxf}/DÎme;&-Yrֶ}Xv73r? }N.(CeSL+5ɈX7r`q}K,ahHka^z㭒xY[X KUdCâ&6eI ˬ:d؄Rn FdIV8`];vEGsEK`'X9L%U]Wl `͒KSԟ)ؕ-nBdXi!-Dט&ÇWv-~$4ΰ ڞ!SEAS9tl%]v&+~E>q<kj'oytmv[@pYD=rzԺy*oK.vSЅ*n002 oSv CQ.+<,6J)Ti]rg,'\_ȳ>l ZI2+M rM'hyYh+Izd%k؂^Hu_d+ nϮz? }"xv2Öwwe$ -Å7js琽W,~I]k͆2*ã$#d1o}©AaDž 2$AIb끤DL/2D-Z~ꮼ H]xm%wdOŒӘB|C[:04,i9a+H&o`gK q=13R~؊N164q没J7sUӥɺ&׀1>oσA{5]፩sNL,fI Kh3"m Koͯ5@;n(Yy͈aajF1w}%m֊v$?)*]iyQ; ΢#BHTK*_i(4ԔRב}h(f*HB35)ĩAz?({,n5?,5.CL |rlc%ICOMy3DL&(Oz^Q.VpڑUDy 6Yz3+07}?E4mLjs/ȃD'O&bf1ٔ W:ADw_n2zb#}@WSs:㲮-H1m6HN$-b,XۼMY.DCXZ%%/4qXb@@]SυM P7i43s*pIOm>p 6K 'g1*nԭ14Rehգ >&!K?Aq8#БLU j I$rl{A T?@7۫߆݄}[xrx=  } *'N][fş㘁r&@":mhkvBb_%8ԛ ߸Ywot"0bp%(INh}/jmY,2oH]Is}Tbƍ׉iym]SnA\O><1l.#( VvT8~mp&F"#ƉxWL:T^-7dCM eZ?V4ʛ4U.I($b,4Nki F.[rXJ#8N"Kͱ&}Zړ@IHhlm:cZ_61RCRc[,qkUM xJ&Ok.h^GP пf}K]#_lZجC-йi/ d?cp8WT@^hÅ <)%"}*n2I*fjH\:-ЁzB1/ i$2Fۆ,a޳WênR6A*귐j΍nvWfV/:˃}XWv.L w|tPjV YP0H*Ԭ^QG-3V1&_A;h)\&4^E)cqLs9kΫi]z툿7өɗFE Sp[ )n#㙙J)E3_?.^nx{/ ,Vk]oH)`U.n]2i[%e='"X30Gbfܽ)A, L%'{+n33[P!#)DH@no'IZtnLfNu7+.5NOKA"dͩpTg%HYҥ:|_SkMh 4ЍM;J *8?gpp+ \Qtl!yx/'Ǩp#\ g)R$]eD?MK,xDJHJAu?o(x#\Ecǯ㞶j]4Fy7.TIF6uk1Y;FѳVڶ3QtQA EV2HBƖDh[iϬ+jbߠFDH r_8.Z\C7Q[ 5j ۅׅHs!裮kݒ>[%z LBF|i;i6LA~0?IK <=0RU?CN)U,, kN2Oէ[ weDeΰQU\x(vRq5.Tp p{Q9Fl{M~(7zO59=8[Pbt-%z:c/ˌrYsۗ,KgNZru.@2|XF@zr逩=KHKBd?2qt3/DNF Led P>rfg]]b5k ÆhXl~q ^?Y!R&fmd@Xx*ʒz/(k{nXA3B!tX ELZ&ۍShoB tڍ8 Tjp@6g/29 gmm:qC~I2jt<ɷtC}_y2 Qm~"&vޘnTKH;AR,BW b0 ᠑c_- <rҳٷeqsSBӼ]\ l\}dy- V5iAUK#ᛅE> 'fD8ZQt ZS{S6ws8zpRL8n4 hS~^AxSd 9v3fQ'$`mryY-aPDŽpR Zlْb_3tzFckMk\ */STH ZZ 'RL5MooYOWvx(HsrU5잚xE.˭>?b[׈1v7<ǽNlQOB[%ds'~HmX 1H߀C w;jG>̔dXY^;$i@ށ0YTgz<eW޴ Y&ƢP[$um蔃fR=v8~zABUpBW?rG~fpi2 ٟޥ!xS@3OG!faVb=@!ұLYS K_\)YMVsGlcI9h.o>|sJkP+W FƐ R!>\6F]sUba^EXF[Y,{ߵЋv\4qc}!ǐ8&Ƴu905^?BP y=aHK1u5{ډQrGB&#+ltbkC|pp Ju? lsFo׋u#Bڈq !>W:^Pi3W(CR' j;mH1P2\=dsg:HYc 皏L3?2u@ 0)-y+06ka"9ZsgHL ao8зx'9UuCHWY1e[N_H*U1{ÿ=ua@HQP?o㶦@2uP!H(ϳ﫳nw!ZI'X:0GnemuL8rN1gu}WV;"_/Td!Zf"Żz*a*ygaN"7Ⱥ:rhLƪӶ%id!^Ͼ1YTo婭Y3TڊOs[H.2}\@d.s[|yaۻ+ X&))0&yOA:)=Z<;K?לQ}ݩbztm)h S{[$=E#+e3YOb"Tɇsӟ4V2hI9]V0V./O)B3\;5+M:;"gt33#6GgR_dRÔҳ85 ñx6\{1'xf2Df *m)h- J)]!cm=eS~8Q0-C(*Уt8$TF[M0t&0 Ͻr$<^D[fy׼ ^7taVWyn/MX !+!}Kýdᳵ8>~#I## )=N"uIf|GImǽZ}C@r3ljH 2kֽ;LrI!nIݝ b+ ਸce@$*( s.|Q{ bH@iu;o mCKx3#Bwss^BY;2M8h%OaVB,('?P8(i2׌E=mp\C}_'O=Yycn/5`z]%*fC۽"[ 'wR%ZޚD>n&ft7{!@7\1=XEG Kg"P%nl~Vr }W+iY`<7{rBVɩ͹s%;6PB!PcdtVm35#&x?=ho 䆓'IѶHt-}:e&i[T?fClLf`O[>?1??8S=bqeŭ#fVU9FIُ}犾 0D [ʈ Fg| 𭷜[A1)%K:hs#C)WO𠃪j|TUj7/CZe28AX.>My?&|<`pAGg Q[ ǖ+4xd:cTZ~*|[ٖ(hsi! $qSlIRcJ-f% sM>[3֚.#qJ%h:a3-ەr6rZklJȸ1G,p2E.s1/ݽ+iKNxII^bv/جvzvr]+d|?IK$ F2L";]Z&x1 n9l[ qZUE|BP'Fj ˟ ڇH DdWc?)|T%_\rR[Gro3%j`ьí.tInE5;E#w" W N ڹXu]3A3x05˜hvwt)(w&:+=LkΡHBLW or|s!rB;k64M0qEnP VϦaѻ_]޼,N J֗0m}psНPuNxEcCVbza(8?df+jG\ m{lᴞ&)tuaz ;wR=lҳfm@I>v5{ۈhi_3*(Ώz U"+ t&ۨp_DTP `+!&ೈtk0*7as4ҠkPdzS;5=ܑ"o.6>i7=T3{@*ŗȴ>4:-Sr'[mLd&}3%ߓD $*2^ ;4u'Y)Wϳ#:$p2;̠aiB Le!V! |7biN]q''0~zqڕY^Br-HȚ|[}E'(g[f%qg6cʵ,}' $k)_6"Qyˈ[vK]2H39s!fW۴ģڐ[F2$5Ӑ鸼'K,[M-Na%A2NiTӑ¢rVυT)s{k=M|^ʏ Ѳv:%v4ƢSCceb\?7AJ./Ԍ33[;|3 q:ףDB dt}-ɣC-a!15M&"K'ndab5oğ#@?caU[_6t'vOVgs~ctYBo >( Oj#+Kf~*KFgrhMp3Bf p[OuzœETDWpfn-G:5e&&Q6Va6\Ϭp!dz>#Tq!:95z=wx7yg jumT}%D.j1Ej֧%d:7DNy 'H\m{8&!ɇRx,)R>:^eY_͎7®Y쉔]ӅdTv!Sdɘ\m_Ag-e F#cw iPZ2¯6]ClQM*{MZ- bWBfB"ZG( }V͊M!>򞗂! Ubͱz:,n%R 3]vUJ#qA~o1;Qjs<%f䣥5;*ʜ6:,oD5j<:2ۦ9q{AWÐx3 'd2'>|&MvbSVDf _px]paySہ~"h @ins!:5t1-h~˭p~_83nI% 6fEYϽ5e1ޥ&y+ O _(NΗ6ƼB/WGUGpzurɩ/l8ݳb'#nQ?3p4i s!jg`$ƐЭ|\ (tsO0GT ))B@FBV0鐶,G)Q% ؂`رQWӂ &X?BWnyjmZtK-fS iP6kg(U(u9&" cdXjE a<\Y c.0x yb#TWonPJdPapoNҦx̩{t;սT\@Ⱥ10I4L,srsG?*4#q` y}6BؚHR,qf<59&&>hK¥C].9s7ܙp[I^8"!~/nKjMCkΪc֫ޤV@ʷ#E>t@|6f^3硃4!/đ})m/ZaZJגpV/ P;} )}Pj1c=XKb3o.Sr Nc)=i"(LN5,~2T 7.de hgO#2-#o.&kۃkǓŅ_f&PrM,ϗy^1E#"Œn& uX@v_S*J#QKqVyxOjs:tW{^S^-8X[Ir..O!d:WU) (Yg/‚د]`6.Õ=[u;ѿsKLL En6՟g6JP~3Uv+7K6 o{;1flbdCJr?yERk\S6s&qv͢3pϲqQ1Nnnr[E@5dx*իMy..HNy5I! 1QG^wMU,ɓEp 5y1lR/C=BcGhvM;lnfkLoՎoJQ9EC,xE¿Xy|"_r TigҘɖ\ι_<^7 +gJ'̯"mGt-=­]g{F؊x+h}ks_)5ɠ$}v; RHؠGĪ&h`")Z~R&-EYl%mNoٔAo$ԆOO#ID)$O%\bh,~VESzه>g\#jV6|[CF}`A?0IfGwe"X+(#5mߤ9E&^c{T;B/[Llkl7OjPw.w&S:j|}  dJv3ΰLj1jt)@,[z:/NaTq 15VSL~gip%ދ{JHvֽdtw{Z|CInd9)eThKXNXi1+Z}9 %CmȠN6A)KڣgBZt$}'+b`o*(R~A.f8i*셁zXmOij~HsA>~M4xrӫh?R]MjF NByN/`ԃ0K# wP)]ꨪLW|"݉<t=+ɦnko:-1NxHHVraxYgE_Q1/* 5_]U7 MQLrd~:@dre:Z$@p]:'+TD# 4"(/յY0ee&~_3@P?[gLO`['lqM9yӞ(TmlwrS^pJ]b[Pne 25b3l0vq:_\cVGJD_5.dڢJ@^uiNyi Ath3TىUc/c$gV^AWZ ]aby\6)Yr,."mʺD"c K Ǭߩ$NIp<]ҡV Nh.,шD4? xzPX9X;[Kt+z,эHSi ^4 fw:м#/gwDlLa𥱽nO,#1 I j`8%ZďMwT{tֆ!(SP07>.u.cwo@x=RpL\*򥩕t1a'yצ򔮧GSk[K tbU؊,\Uub+D6k2IuH{-6C!nnb zЙti ;R+m[.?#@SSФrfBqP$3d[=fp!ce'&!4i(ҵIܛ Vbn'-4KXĉ.!9 ^isz\mЀN:C> R.!pdQ)og]t(`8"Rc(5֞>XήюW+5_v#b,X)=$>v3X}NMmnA߷ybvnLvf+HUf@osd ql,{*94QZ?za\B E/ۆm}[W7aݜ]FJR8Auu_t/K01CUTt1vVh?9U]],wq-GWug@m!`ƆuUPOudByޮ/2 _0VdB)CɨC5Cӽy.^tV |9e5!̅ѩ+%`= y{š-suLSؔuL(R} U ~R([5.}dr_ \r (-͡T'nNRKoB)B]tBs]kMfZ$xmv.|ŧ7 j'iѿ/3D!RSDCu7LOX:򑆐fo+oB(09"WPֻ{<0dg}ķ@J8pRf_( LǛLf*=o6mٽa mA 0yVQHǼo*hZ#eءam\^#X7?"ƱjCY0gfih[L1(+\)+ }t1\pޟ{G8wd](ʀ~+ѫYI>14-87jz$FbyoiODzh`F⣪ͳ޳;՝Gw_ئ,48¢M,u"M8b")oaÚʹP=%j9ۑKǍʯf(ܘv0[ EQ5_m,*KUvSᬖ# ]Kky=RD](%kIg>I5187:4ΦڕC6Ղۻ]wI][p >h- oNNQ4J.hAkP{dI/JW;;8HW*Tò#ʅ2%?κ&RIo.1)S9; ZxbO*#6n5rNr!nt vW#C:Y oאW_z{>O@27sL!_ċshlX 4r̮qoȠ3 s}Q5H~ {/PmΩ(b=o\#$`/<|'o]MlVZT㒄&YYn\A잩cX_ v-{$$<*S3i0 6?6Lh hs16l^{t^f x )7Jû~W[aےZ]8x1A ;&y&Ks&1Qzܯ죎V7xbai{J(F_ǻhkg+0_)gp(oxP#`Ҥ=K#lGÕ9d6-׵rkI })^P.Zv &,k`#v?,49p_kPc<:5.LV3e:OVl|m0`ݨwi\OG`5Ϋ_N1wl=}1 7yq5yA7l}}ҷ2G.]r?=b>Ldu qVNｸ3zGo޽@ MԗwbpZ;{$V@Rw̸c sX:gijQr{}$p& goUTghp@1`0Z)(aelʿҵ^ztʼnw Q'W%[r8pH+xaB2&zq8L)[=%~KQҊ58=[ IR {aBbqe/C,;_4ȮZ)9Ƨ>R}}["V(Qݝ4 Ffb+I1t/{Fj)M9Bkl[{cb7xWT4u;Z{$G G@g:m("ccΨYQE g5|npYBi,l!*rk#ft&(|Ɯ*sY nOzPCg b @k[:~ ~nW\GENYέRh>^00ц;+G$]Ïhkx8 Gm#XβD֫dJ;" v@ĸ4rALTZu&.uKcC2|!O'դg`)E_&x&ݝ˰SxPlI'@Zihm*X;uQf+Ks|m0+ H^4I JEc$ $l4f$KDڳ1 mAn,Nrn^j3h V٭WԠXj7E:kh8bt %z:gG!" Veߋ1H\2gnށSLӳokt77|kP-1WWӌ<_My2m7=hE*9o-AI,+j!Pz,'ؔ ˂us32\Wc4(Y5ZUD•'rǮ"yV$97 8q0n^#`ayE B0ѶvЇI{BFmht_v/ʷ<7 Gָ]q$ ?}7xFG.#RHmObu]|;CRUUt]ƹuZ.F׶Et?y"F~%ÏkɴS+B!VbM`q#NR|{E>8Us-2sB_Y܊ rdZ/QץA3pNWf ĊOt=̭z_Jbh1Lh.)ԗ).O.bԊ!Ro+088૚le&^Fo}/Plwe{7M") '/+UKSMQkldƖh&KG- 'U,gԺq&PA j@X4ĥWEpu9.JvʇOt. *аO]PM* 7igvB.iHF&K_2Y7Cc We0\D8Os{%!Հ/syַBqPФkqZFKLLt(| ΔUFO0W?esZ?'F jσ 'Dl ŋ0tA Fg jB`RNrǴ0j4`?M~?F&A:AT1ePژXf.W> pP_0[i`)u,䯻 yTlBHb;-4R,c1Q`x"$ja߹@].WWƀpvaHa%Q4rg+Í-^x|`/i>9^ 4>wkS~ai7ew,R3cf7h )]>7dLH*ڑAN]!+̪uYvt^QHI8א$ uRkX!QIaȆ e.iKC"pM]_@>A$׋K]Zw*ʣTLר@14ήے\#ǛvNJů:_ŶR5bZ埃n a3&@M^{1Xʤ% ckcXʟG#[iPXՉW{ >ۼКKIYk*3,8L2B98ƫSDw1y_m9HhC3XڵmA c:"\ۮcg8ݬs5FE*E4~^ 7RO ,)#WfB[JdF܌e=ЍS>zL&L9j} ZZ:^30+m %qb9K@X !}-"4b2 K5<1㱓:ΆY7!Q 2%6frZ ccaWgHmM Xp "Q{&z2D:Rͭ``L~u V!x4~BᾺ-dls5ìmj$-G1qi@La_ %%Ue^PluB8٦_=NXS? N ?7ИE{%ws^NiD)/%'4\x3T"W}CSY}$KFU!ؾ9W7) f T7n>`i_=~@k`CTpCA$Ju#'3/0RNt:7ҟunx% cuyX}ᆉ BAq)>F4vsRN@Q< K+JH->_6ؤ?E ø&:l%&'n״Uv8H3ꮘQɩ-j|؋!QZ%L/ *\A1 t*R"ɕT%\.֚Po=>xxݺl*Zx&H ?xma}vpdJGkDJcaAA}r_]GQNzw҃\ٻ5/պk6$gM$;We&5BJd/F!4U2aPb0P<ա+AM* %lFE58%Uxw n)c;k̕P´2f>aZχ<:Q7 z{5Z0!z$TC.?WVYE:\tlC|&'{?liC|H'\}6>q}U mRfDŽԧd5ay`9 6FN --"@M,!);SGCj "ϝ:mwVڠ:ZgZo3i$xWpmφ~ՆViq;14 Bs}A.pᯧ"|^žJ(c~?oӋ+S}ZxҗD]40B-5#Xja ?igQg0??>p )S4Vx˴|>ub-\&s]sUZ{,&ܒ1g\w!),jv,ѯbax ==Hu0%hK, Y)e ѽcCbM)qs S\i>"O~;}Ҝ-)xk(q~RQ ~AYVOfcMrXOI Z!S2Q]La7in 2XLҙ{򿕟U;ǹWo8J~? txLKY dd]ѨT"A\9o[&[6l 藡t̎c4C?9`zƍKzbZAvWt Y\cd1Dm=0] m2ՂW'/T݉ӠUQ/ճ_$? WE sfWﴠSޜS4_ϊ 9urp=4'j$d2r>w(YzXɠRof4 XJ'ؕS*g-/2Gh#brDo1 5[NM`(W\b>0؁pǎBM)tq#AZco{wR0"4 S5 kS㒞9 EUbYhQN:lqӍOD/"'{8$|òjp4&[1O?q< 1SoCPFRΥjful\lBhdi["UYXH֖H±vVz*+I܏P7{,+.%=q)8c2XYTCiIp5qqz`-[ SD,&JUc=^/<$~Lۜޯh(u ]~M궍W 0 |+a-a)Q\֟}1EyW\◰@rJPhTROo- 34s]ݙٌq{T/Pwj1?w XfƤRσ*yʬD'H>w4*@)}dB|,2I'Ik:%K ӳ4Y9a1 j׶A3zwczؤݐ|:-q6fhE|,VVL>m՘vc EUHVB~2;^g6 #d#Q~{-&73ڣH:WLcKZA.UZ+m{? k),}&Tb@ǭRjdrهw;)Nqu/W NS3a$`Zԅ埝 q/%;k+$b[# ）`M?=~ENLu-r0NG49RC}"s@pa *]~_'Ha԰kSifx$4fKPgVX~S47>Fy wno+|S }pm256o>WAc+qUc sV}EVFhWVكCK=}df97Y)y('|̬4M^}alPKʛzNGZ-F\DͫJ5c{]BQӥ'G An3r' @T 5:̔v|Rվdm-Pe&wY@"i88PQ,&b*YO*^F'vKjd7q-V bE!KUXmR`w !SQp>} )#r,g7 eb2UhfYk8fz}irhm:O|> רB XD9֛vd^lZHPG?^!-C8/&UջC P*pKez: x-ck^G]`@G&/D~G גɞǟh"|4Qmvֵ-S2'H&2"|!fYА x-{^O퍔mifpD!#U,_Xet32:=ʻ3[8eF00X$=JEyZ.Fu)BC6SMT8v,>#[(Iߍ}U,)c7HaR:N ǘ {Z@d9ʁSQF^R5c)QRhSWl"-Ԑ*ykfH^4 ('Ҝ(MKt )S脡lb"ZS0{F엺_Ѿnt!<ΟzGt_CHP8\-Q5]Us/Zj}kE}R|Gz!g;Ùb;sإy8Hr;QޚشKCU%7H+ sqRvHBg<e 8 Avjr]wHb$SXH䅪R!gB$%)L@}!ě/tgq}{hR d"uǐ`H~HŒ#:);b'ܪbX grfrtSmtyvSNj‰H8r;)0Tٌ`Z>[R EUQE5LouEq c[" RCO.R/a΂m 5 B.i[_푫zqU(KfƗc,/Vbƙ qBUW:t!%{% U$ߪkkNz?}<4Ժr!2#AzΐPI,x{,g) ʅ#+jm_CD`ҥ2ˠX8CסV4C5>9@=}y7Ú*W + Ւ9zͤq,٧kUCؾ6=Aj9J?,odޓA)cB﹮M;Id1Y-Lq]m2X 2g>/A˽&cR8fQWkaWp\Ԥ0|N&S8'ul ]w*ũo}_v#8B?)_<8Nx37bRAF@ gY#ư_>h=oȹ vBCmc>9ÀRN<}t(iIsƥ ~6Rό؀h'P5%cɽ2竎6n@KuOBMי'qZpWl9ߏ܄;rFt7])n$l%لdӤy(D\KsBZ #F'ѻɑ.yk(} x7(]=|E> 9F),,8GA蕠1lm^̍>bt!^&?im[~t.gOz</O&3{ WT`YG:KBI͓'gtP<閭|Vphz-ވB"4)*g hRֵL:7ǙgNKOf*JӇ޽9Nx[`i$O 7xJ > 0S8%Y kmapp1Zw`s[.Ǭ-.-=;}QX$ M8= PxA5(9UCovQPd B-2A! uZ;7)aI,w|BÌJ]NsV>ïjߎ?]G{ۛ܈`h D'0y+)It̘yubrICW x,^R+`Ʊ%)JY-ߏ׸XGRf?V!zEK0G3q!wP5_=Bw 7S+`t}aHgl^T#񾍀oK~]U'q]1뵔}hb:}skl >H7)4v ( 5T_71 ٙ=ެ^8&-OV1ӳ-Ǔzp霂Px:L 8 ~u*F\'ﰰu&7VU XX!g|'OkQx@Mfc9P 3ݖ5PXF=Ńw?Y\vj77f2i+|$!lCY_Xadrw=hE= r:iufY+ɥ U]E!k~t );mHߜqO41K_DX2Qc'[~k%2*> thXjڏ&=)Jޢ8xK"O(sp@yUէldfh~C؉-NeF[l2w#whڻjl'#brh{Gl½@'408}V)]TCiRՇu7RM0h;KN1Fh#, Ҵw>LVގap]:i%Ij=ାN套ӋH-jy͉#pjz`*sPZK|^R lʼ"VZT +jw=5IKo r Tq#v":%OZHYFOGE nٙif.Q+2 4f2KHP;GBS[rמ .B0Ŋ_-ć' ` rISm .АEHYB %PLMߧa{mPBe1qk3|Țϓ9H W'tYMDo23BTJ@.6"$v>RUx,yw\xD?-8%+JB,ݓaaZ+OC/^îtEӉS3 JZ|ảogbPa6ì\D\Pm.Y#J()x20S{m$e 16ǻؾSJr\;Q~mp D6iއ{J84BЃTS"s̲{i#}@fy2 mF j`zhqԄ ;4XO-Q ޱZ1.q N.Nex7XCrOy "GL%C BV>kd;Hh}D('Z"@3 Q f[K jSDZөI({da1p]8 8  ?bD}xW2-kw5Sio̮q2qv)sW\|anAs E{(%&.|cӡգP 3Y@ٴA&%5ֶfK,ؠT8hK>az.^G`Bt]5ay,z$FA+>NXy`<E> VVrUh!LRq?!g|5*Ӗ:Qo.:Fr7N& CV@%WԢ1Ͼoel1cXy s +.v[ɿ䴖XȽlSɾ_Rj).ސɓc2Mmj5{!{x=HZb(G>vkkIߋHR<ɣy(F[D%opKVJl>}xi"T0$,jBKBqPN<^%j:y8O)L[GPc[=FJhG"OQKd asSM)rOgo1xVuJ:BS7E{8]%^K{?iXfL1T4@zn#8WAC@QLWF\?5eDu, Q>qbB-҉Mh?"Рm'y\vO;d]e$7H.b#eSRe 4I.@ŀoXwM=c6Qv/)יoe*Y&O&zYMp;%&8F_”xL.}ܟNJax415J Nm2 ٠\ OM|'H TSLW#`0J~agߴǐFǕٍFt?t"5T!Jzēs;E{xIEX/쫡Cc) [zZhDg:ZR*1'Е͟ʽ>?-mor"WkAJSh-^x4?#t|!Ų [< 1pĤ,X#*KaBt1s :V뒽aXjA*`>n ,!Ds nN@: dQG% p5:dP_Lri.=qo^G} ;֌X:q _fhv$J'eSw-*8jo[c^##׽-9 @]-uOv,EEr-j N@4|r3<=9ZK'؊7+YS&10&Dم 1dvf6ʰ# pwg`х|]ߌn1&a\UA.a0AT#K^ ۷Ram"c,Pw&KB_.<[Jv{ֆi갡]Ng-(&bqGn F(+i{ܢ؛rfs^FԖChmClbԎvN⮻߽ Xp֍c3幌C!>v̰5f[oM:2I@}`~tLK\HG;[euƜi5[E*a)Ft]Mo Hs:hډɞA7 cl2#~sp,1,?@BkC\:j碗 hkj 8(TjBm=(\=@"apI eA 귳}! ͦS[{._voOh!d#_zT*p\=1, y*N˧xntf GКTPK$1Xo0ҝet*ڐlu6 Tu-) 8fK4&CDi򞀊Ɂ蕨sJة è OSB9E=195OfY*';mhJVNyDxGeby_Rt$C$z,M}S]@0eQ9.iْMy~d S7֭2:*[G9_e-ާJp`[48W..Ǣ}2zH6$gj] ܪ7$]΁.2YWiOlo }}`[I`c=.[SaǛV YZ1.NCϒ-$[)9uZ"#Z$9WH2t_}p㲴Û̼ՋZ-pZ>Ca|3+Irt'~ 3) _9>j`Qi/ZnPoa,Nu>ڂ2 p|!?rGꡲ=s]aw41vxڧ7I$yŽd `=V灮E. r'{GCq~ bijP\%]*X6Klw>kIEY5??S#15SfE+HQ \$+K/r|ܒ. 9u)!輱IcI~ӷY[%ԞOҢz=^7oF}Ձ^]@U)5q˫%=}s!b쐫؟l czcH9hR$hQ:+?ilHJ"rt5Ӟ ;& FH@FL(z^t+ͻ:i)Np-;6,p+I5ϐ\㯸'X)_]4~(q#K?NN4ʤ_65#ꊦQum-,4ЏA|e}z^Rj N׭!E6Gҟh\RM*za5?hQˍreNJΤMg^Wu;?m|d49qS [V%6к5P[}Ta%g5ߎ C*{[>?^途`ϴiXY2$()C:%ĖPL~Ic ?*EVGP7.Ԡ(%-*ˮ^l<`{<^-,RA2<$[1 ؾbV}U:hӺKqOo$Y ?FJ# 4p/ڝ`tFZG9tl7ie">c=l(<3xa=?r:T`/ь1m}rޚtKVڟH|ϩ܇2ōN8:Tϻ+.G8V㭧fϲZ$;% uR-~vRFR>TN>B|/aoTҽoې}!E7p4Pz?UN?&u2=K4Yoʷʅ]hH\l&-֋7j.C>R".o `dԇ!civbH>'b%$'}HOGţt v~~UXa| |݁ gHӎ*>̼{fC#(aYGjƔIX\|[,S)ds^"^hjp'\y\j.Ȫ7v5RlqoWY uLeޕ^n\'|RFe:;t) |ȩZg.G=QYoin` 5nNbrha֚:&?%a3|bUǷޓ-Wc~SZ RYh*~28㖷?pP }dgHs-:ho&3i*cu^,&3~<.冂RqN,B"+*7Lb'(8". `BR|#lYPpq::p2䊇8p$ vj YtEZAO˩ʺC>sY(_כ\-pkgem޾*FzC^#ݍl fi*ZM,oYЙyeޚb\dcߎk-OA8$$3ޚ\J}б9"ljJv.7#M_=kO&8w+lzb?8q\@gZ|p1}tya?@0@[9U ߸%pΦX:*3.F=Ư 6ާ_60 :V2WU<1!&25hx5ĜbŹqJ1 U&8ZGidI|ܫ Rbȏ FU|Ll+y:קj Kó3ȪZvGDXV+ѐi7iywZ"c[;=@fI8[_tR BI$I~TJLv3v䰛ަR5UV>'sV^ Cb,Z6{_إpȄpdnw&,qE[+en#m yiTBTqf߀'|A Æ% bH-s( kp^J/ M|9uRˑtǰ ¾z[oȴ>5əiAo]BfvI 4^`w2/nUUUrq@T;iMIL>uxUuӪ#h_ #eB.Co a]&eb k>47yA=,)R'+,Pdjb}TBtF6 zy4pPR ""p=gV)|Lx\;+n2:N-/ wԊ!m$_DLum_,Par}/y)]1Q0V̫ ~㈴meu*@zB2Zy^mfFd{ zk{D\J%۪MhEK| @`%V-Y߂<ɻ򾈸9@ bLT8G!؞[@4͒!(UxD$щSp!˜ʬ)nI׹ [R[1 [ơ౩`K:- ʙ k 9r I#FdFLwۊ~oOXP:`X6JDN>`{K`O "#iL=ڌ֞lѕվ 0C)40Fl;S]˜ci3W|Ӹ?C ]r6jTՍNR /f&(k1.6O;Cž D.e H.Lc,Kqӹ(?Ur'`-辐9;Vw#2O>G}gA#'@TmoH_Z;pݸq~rh0.'3^Lw ȔUJ 0׼˾M_sŝzh!ڋf\fu8Ndd\yܫMɎvۙ#QW{9h{eYd]e]F0dwEAZ'S5h`1=SM ad^xq\%,X֗wQӞ%N}YRަB6}?Kv!~NZ / Dat*3r0VL\߲dgP:)b0oKs"D^z&|1Ǥ[j GxYwSs864$0':rz,7qFI HAs5mBbyK΄WR6 nުNxi EسUrER /V&D_q_fM8*w﬍j#`ϲ~uԺLGs̘LHo<&ĭK!ܙ ΀ s-%-po[m ^9mvP[QNexx͉o  j4ɉsN7K ZVܾNEH!"ĺͭ  c]88sx͓dp>Ov[U X7A MlG1q/Y$Ifޓ!6_9#{V*{j(ШdYҲr :E`r'R1GnZYJڈڙiRnȠ"6X'Wgԑ+rҴ%Jtm yNxRM9R`qY,$hLW1pOdw-=Ԣ#۱Q`ƀ4f\I/3u+Z4IIЈ] Ѓ*X:1gf6 >nhm jWq`JJ@63~ M(9dUI@QX~9j!<, hI,_} dLԌ_Ьy@.x1 m%悮v䈨i)'?{Q lDri ԅ8N7HOBBĨnUC?yD5&,]V @&:g..'%b]0{n0QToɉ{l.0c>?H+΅&7dsfY}[fOM;t8@kR :5RxD WI^~.ҝԅdsjX0V@!Sok|mP1;?|N,6c4QX5+2K:ƥ_EVp{@33k xhXmer#C nVE:>铬P*zJP?4vø04?FVa1(A8mG#fJyQCW>\ xʋ#LS_YjȊIN3 X~uSn~(LP1^%Rԕp.Qt]4AlRc'u)<>Fv$ n68Tݠ :g~me컅~ĕNp{ !>ly>0.S )K)zmX+Tx[;w b5 {QNaJbqlٗ]Ga)k6vmvPu0O/_g )UN8uy4t88sVK`@N[>sVI ,_]ۤ>f&p1ܼT!v"MWޒG"ݸᄫ%~-fe^m52ë[R|dԪ a޺ctkuNce^oDCh-UVT̥kS!t /\{tYdl3ŌZr%Q tsI}iת>1XQبZKw]I5a@K‹u I#"%nΝ{g <?(Rԧ^K[+&؊!D ECgdKOƢFtݲaam%oO3TFpp y@~h 4c#v[J@yR+'Y^(.qpNs.Tgֻ5P[M!6W*(~*K esͪIuUy&"*E%h sXSMDOPm=cMٗD><ʺ@f%կօ}͖ _maIV D0+zG{rq&yb񷉑K#̈=Gnp~@d)l@]i8{p/^vai#+|7v]O$֍fqg𨡅Hyq&K<{qJu %A;lOX)cT'Kt) |hyWI ؎ rs ,4 >ej~ΩnƣJdS\` .x=M*ڕ!@G@_aͪ"eN}̯.#!Q9:C.oX[pNFuX-vh ~Te{QR=!=8tIk'(`4fg,_?,4b%`^M}b4T={?_cviZ%g{vHOӊX%L0ʛم߆1_*G ([qV+wtF,-I,emW.xiz͓QQ89ww\M]5s%rjZm '?lŹmrnЄ> 30%%dK$،'L6L]4W"FẀNoGq:q](w$pW9"ՇڴA6)H 6_sf]XS\l 14 >n/P(Fҫ% 3ֆ^b ~ѻMQ!,:g\K']Wך~XYlO5JT%aG"lmJrMkU2[HQ 4NzAvN|Vw7 u+~Wts_$9(Eт;jAzsRoWYq+_x>TK>ZzAijԔ`G"L0J!1=߯ΌaU3;BGW8[% &Kg՟KJ'Rc!JpKLZ &c\ػK3, 󥪾dlr160OˑVGڽ&iw?ؾZ,kکhE[z(nٱm++Tr8MrC@W XgWCR( n1c!e1]CP@k8$k r1Y+3e ) A8k@V<xyw9G^Х$\JGF֕GCÌgy/!+I5ʠĈy/`EuUJydԦB6#]ޞ:ܔYBF@^7ýKI7٨H/?CGoqɉDJC\qich2xJ-茾nrz TM)P9K<*RAx<뵴EuC1L g ri{븅Bup(&>Zێ ̥SKSzPi5G"2v/ G=Q9w`NUׯQ884C{ALX% s="mA?Okx^F2pB.ԲM1P4۝sIRD}w'a_&r镄 եSLmvy^:r;塄yїz#,,̪H,T/qLqJ:ҐqwwӚ`geq-,7O(yaQ(:nF@qv~snrH^)ӬzRE,ډqgGy7sӌI[|A.8Qb$$RWciS|Gy.!nvӊXOo1I-Ѝn5]8A菭6p= avg-dFmR&,ʇ t⦳"y3˷ڎQo@?3pjQ&X1L@8o+r{4U0\xyWi! jv<`"K+-X]uj$:4RbuƇO sTV?}baAz᪛7Fl!DGXFl]d='EM+RTa(,eC 4C3c7 3QVTR&fa{eAt[騉KIggwr'y&}rώ1\s "w1"Z0mX|Jԕ.F]Zn^jGlT}O 5 %QytE?n ٬g/_;g+!NzVEgIΖ {Ԡ3Or\PEsh"6%ɜW EcTl `O$ZMzY}E;Q|-|jYBb`[^=8y{\;R06x:Q81#n|cC"<>RQof|ұ'ʀ?]\nR3vQo>A+b>c'7L(lSG4薱lRC㹓g%VKQQ2 >9qM*]qbopI&U%DYLOȞw\m7K)!Bh!qM=̞5 ר}bYe>>2x\2\I9!Es ~jd;Jt='S lM1fY8luY_'ywΉhqpgg|͗WZCi } 7H*}ߟׅPG{^s:.Ap(/jc1pӱ ̎A9u7Z&?x O$h^p?0:x$4%&[ȝ"v}z2X7RWs.^S_o6 fR#^T6" ɾnd)4V# Eܿ97;|=惾G~yfbq78azݟ+Q׈hfBV(^Nj`XhESZ"gvX HID6 U97 +Fmļ[g>WiI >'/yJ^ CE٥tːo$J|4,@kn =}"op1E\*<]VHuN6*7fW7 irV◣xoº#RuxlTyfҫRoS D-Jɧ @0ؿefk*I}bmi #Mn"3/kCS4XVաQt B'kh fQbɣϘ"Jaȭ]rY3KUM Rv-B0ϯt2(?oX~ ֣~D ,u.\τdJ@;,HMV HBMZm 5?Iݿ^A@s~>؉b3Տ }"ctC ~Jz: Q"MbMpU/ެ5BF 8/}Giu( Z7!;xuDTlH{k:,M7ta\iW<T[xG!(@ϜIRƒy@ SD5KH 0ۿkto@bOwO'C\Sr afdJYffž(KOQ? (^\k|&GzBXj$(P8E {Z7a_E-͕dĥYuFjG1:i v.s|P$X BIA.G:[L!0 =e^sN}Kjۅw2¹y)t.п<lK h:g $jOȃ'R Bэ*rS!Ka]2}5˿QĤ4[T6V9ӭrc~!vdJʮYQU  wif7>뗗p pE/,(syyOot}nl1 o3fDuL3lȪ/ 9] 9.W3uJTLEuuge{*9&ůVkzP%Fsg <bf %:=oLٟ* 7Cv:]%V Y,wot1̳>}b2Wg27T-s&a:H")!JAG3 XlirGfS?ּXؐ律n9` ũ 7bIӤ!Nݢhvy |PrOנK/xw ;?E SdH f3ZwOo=˝AF@NEFx51V=TK}a/MTz\)t͕d/\:@ոU]aR~S)IEu&߁{_ḌTЎ#iuJPLI4Pv%ybxmv5"en<`f\$dr?:PP ڴ|KC02MOꢯdFܿ7v$(R?UѠ}-uYbh6208ݿcکYOњO)]W8H8 :2a4ly5-YaPb1Ljqd(vm*(*C?*^>OsjXGf*Yǘh@7GjxIV@""2+=e2C$|}dkbuho$8"ŗ,h`CBf"/19cMԓ"&qJͼ?~!woކA%Ф(Q˾&l${}|u(YR8ktF^V3iϫl>t^is,zߛ0ߣ;X6ķ;dX٫b8!>ϫʓ߅s_n q`{˙{}Aknoף:M͆w۝yu69tV?o. 3TAP)乑 n}{_GKQ+c1G1ďn ZtrP>o x0)MNAs%PR]dHL'_4HdܕX,xM:}fExM {b٘ux*gNU6|HZ1{CQ@?ρ)!)Fwß #^P]}Q7Z+K"ihe0Wv#$Ar9WG^̥:RPP!7\ipُз c%gҕ$(b0ڔ`xkC\9؎&ׅ1R^6" ֧ʓjWb@>lTg l-;[!:#잂p1dgR(%tg@&ح6Ǵj\ lo+sU 1ܐjf˖kz_4^``L5d5'/N8ڢFCjP|FY;dpS!-xcRY( Q㭬I^/ CHc[tOq64{m.ݦYϡsl@xfDXSNP_s@?Hΰz7NiS hL^) .R3*LW:9m3jƬO4Þ5jiJ9Q-Xߏ*cAN(V_ф>)%e꧇NucsZ{ɘ).@t3 Q 1=}xg! .8{<\xivR{,:@ķ \jGHl,|#¿:P捒wr,^eOi!kHOcmςnJz])T+|{Zg1ٽqdxAh U2g~Ԑ21.gxaܳ<\(.xaT9ޘcR _3a_Ư! 68C^bWl$z7ozTF9lYSdK1 'dVJ5QuۛDdH?f!zDvfr+as6Dht_ 8ׁ̼Otx[/rypq^L!hxg0Y?͙ 5p fȦJT$@ʱ0[j60?(+Lӥc}^< lpFtl"w E§,-#h,/F@Ԅr඄v%&E= ҵ@Vp*#U%_;5$(o*,ЊL;ʄ]- CJl=/Lc!KӔ6G}PATU6(.ct U@{33[|`hl(,A6bT؇<,jf@yw/g6p5hG&JՊBÝ~eN!NEuwf'&D2G2`+])>54@_[[3uUf;a3+hx;J@4!2={ 7K KFG@^UӕN ]{Ȱ'~q8|iy$ɧW5|a9/'* ZulDl T2\0161p}x <*5E+T(1ǿNJlt.mɩR82Ýf%Ga@]{`ؿy#U:`:~׿dpy7lu޲4E2Cg0~L0Vmߍ].G4BÐʐa#UkJzm@wB]D#='6 %(6!8ͫi٭eq؞ ,O>ʖEl( 01MU{vɌTLj^j4=%{Љ Ld\HvhW48`Pʕ/Ss"b /WvmN. *kP O-< erqwNRHkwb$[꺷dWyHP}V{ m]СWcH9,;7xG/2DjIN `E <%t mdH!I XbZ?*knٽW&z']j("gvnݽ*ouQq~bn`{[y(7fNqo(ZBc_ gRʌ"B^Zŭ C۫HY[|7*/ȯ5:q;:C։GF蝓7s_E=#&ԠM׍:saGkOkj8--ƉyZ[̉m j̕DK*̥]smngeU59vDh q]{A#y+eP,; ,su6BL]ْ3r&[J_y/H|MxH'z(p7!yNgDIsbPSvnleJ})_:Y VߪU](#f)(W x(ut |Lj~ݛdpC㥴>4cO5whR &G1^vDڦ=g*jဃqjȚja+qxI0mki7>0 rxpm&̀6{H_0hZ4ڠ_!EU_I̭99GVv "<+T@miVūLzR0q#dߖȃB=X0 UmGF[Mg+( U!'A-ټZXKЯ2~p^ܮ:Ga|x?=zkXeIjnnڥ6^Pq'La d|vߣO׆v-.mI2D@'6DGxh4'=T"m65grS 6D/oJ9Fyjgr鳸j)0xO@zsBۗf0`է(v|FUf0K:+7EiMƑ=޵ Nȥ&p] 7 {K"LOM/˖/=<zbN#!wA^UMxhAy\҄`Э*IL': H\l @ǧo~?ڲ0Bv='}/[mq] yf[GT=^`t.&ViSI3S-'z1%Y(Ί$PVơ{9?N;xkFm V2?Kgc:< YaB$ oPFV*nFW]y;2nk|Yegs'F~'2T? 2y"hޡNݐYƔԶqErA*w=A7Y2À-JobuI99er_A>YeCb㣟p2VLb]-٩9A!!!vO>m ~H=F[yk `9V{ydXsNM:dt"qV>T% \.װ3=ؐn _򯦷ig,!JWK /-iL 94vwX%ߝ<[91,o>$m*j[<0X:nZ=7l/ݜ-6U`WoXfDa:NXMߡI{g0~ŃjH MǛ9h8r_ TLz! 8ձKc˧oV56!#=U'(kxE@0ViWZv"SqEeNVgUOk`'d&2뻜)>Z {K(3 ^Ob 0v/"g썖ѫl#GtdžVN"1މToxNdBC=97oQMbYϲ%S}ȁxJw|egPŧGk}xdJ"̄?,c~;2cj.]U/L,!*Lmn@أGÔQT c&w$8:+T_GKjl :=4ׯ&@pGeXaQfեe6Pf}$8Td~u}A^9ch|,Jdœң n`tĦM8wU8aHWbl0$'!N(5ҥ@e C.C)J1F&Al\p}e;kpWBD׍|=u9Dߞ48.Fz 0*⦵'~l 2lO&zEnH9\ ٿyBԳksU l#dEHKQ6 Gx'{ђХ\DO @߿Y* br`BC=S&Bb!R܅Bbr>|VNJN9@|p u1,ZqnDh{p8>*.AK(v6!y#۬xrﱝYr4{0P6ؼPDu ZR k~qѣ.L\ d^6j+OR r)=SkuXeIKk[{!p>-EwTTᩳ=.DA>k\3dsՂ f 3㹶g6_B:*?jc[߉|- ?4\w wATOLE On|Q v$bI9g\jZPLw;#Gf}cЯ2-?>o ;-{/r"#F[My4}NsH*KeX-^KӀ*aڅ;!AI#hni\qB::,q>Iu.).5V=SO6),FǭkхK6X*`Qp t?qAI#ihΥ/ :ȡꊹ fXossǧI*r %4Ot"ȴw9"P7IAh'ׁrTX-Da%NmTI*79\RR%Fz^qC_^ V!nll?w׬#eaCN_AYc??,`{s\f~>l$)Lo/ʬx"’kf/Q\(|R=bP" y-vcЬZz0ڸU=IgUѻ^^;M_!HBRKrh$g=Ww[`PB趏iwڮJ jrN.u}l&WQʁ]G=W)pb80(F)LLg 8>ql6C )1wD^7,!Nd:kV<>߫)Ms! ͝g 6`QEtExjCAEo<|_z./.bd2$/OciSMBmK+ӞW}#w;">IS% !Oga iZyEs>jb]m,o}Wk? ܕЈCuD+B[ 6l5ey?rRK ]}s,Xaˁ!'HMdopsi[/Z]WcZX:y,%g5`%ԁõ'%(X+~HyNăudǠNF,t26)u9z|l!'hzX+r<&Ҧi@0^-M9VځЎۛ\z}x, F*7qٖ%O(OQj#e(Es|}-;E4WB.aѐ}7 .$DWN<(֕x.>Ul&T38݃%"asc)kO;(n?їN.$Sz*k1, (WW ǙWZ ](ۣ۬Sz/@&5w5ErlW#r jU%V*ZmޛU{סlc·Wc0/RCGd[m~rMu)6^k[e'ےPqq֛J1/.[\2k隉@jޒ.{]pq ǀ@@ ڝI9Ũ^mx»]j>Uaݹ]BR׊=?X@%2ɩ}PguvCwWv yxS7X5&!`  ^+lC@Ԙk >fPY9|]j6Quׄ!UѦ{TAD 7 P:oNʭ!Nê=kI &0k4ƽwl{nxRs1xn3ǤO(zOlXtV<`^,b= D"w锪)d KZC`J_*hb.!3ODA1 kɖz'QXdJ2Q;(Ҏ>Yän%V$j/oqJ~'TPam4v^ɝ3,CirS[! e8{y%ڍTj|ZYbHm򴹞70\B[s /8 D4.+'f&9\薍"Dc0Bv@E2KJ^}d+e1-Gku3΋z"V8RL@|KKl-H<{ 2\g*sx{oۭU{yA_3<3, ~J^YC\J!5qAY6+5tYv9qs#v12_ǻ3Ka%Y>L_y|ϏUt7#ZM\4TqMƘM$~ g,Kgj[rqn1aR#2^;/u&O!2nw` >XYh}(L%;^>5'S@/R&$pnB,&x%l0ۘ?JT> 8jV۽9O&h~(!2"9x@#Sdk+ `&^8ER0NY%"9& |]gZ |\yZ -Iߋ _ Yu#]TQSTy* ʾ|+5Ǟ[D|)?t!OBkzyhZ|=$NE׆{:ٟ¨|evs2&^~2' XS*%2eoVZnc} 7OKYƢ0A*h0_Hӵ,Z"[5*{ۓ/Iog<|ܬ;qֺ; L%_XgН N }tbmVG~T}o3J"v][WnvB='rXxE1<)ε)eH`pщ[ ׭͞ރ/2lqhK9A} :)zܠkfJv#‹7vNo0zV~q@zP"V(L+Ϻrie(`DSW/Z$ ,YIOmNStдb,k5uz|_$u/t/K  |ۅ! Y!ILtjt ŢFd7"R[D5[S jkm>1zDt7JJH1)]ݲ֖뾭h#Sf7byﭸuK 5(瘟 a%~'psP'-C..n،WiO }1^\wN`TxX8Y{kpzic΀Lcyk_;*̘5so-x4R߲L~uzW ,UbeO!b`R_K!D-Ip}iv]q#@ASQFBS{,q$j))Dhc79uF7E[%jD:8!JЖ2ލ/GA q#/^8C+h{iCr"@wVCkP%tRAˢ5_X}{8'$p5Jd$$1\ROgwryYPPP2SD8b*|jK+WeD;Z}} XlF^ @KN)ͽe*o>REBP!HԺcm&8&~ӻPPȏ{mהlMpRkSY- PW^C"IWZ7[~<2Xrvv|KBXCJlz~^}bӉFIFTsdGW6$/]׊ڧzUz Q^XfJk9BNo:Hk8aU`gBkN[Opbzwu\,YJ$,rnR$ɃH5L.jp8S,|sU[tyCM Y1flBp*(j=W;y @S"hMBQ5A6qqYY 2ZWAw>)aiwQ9x4rr'ˮ9'k\WOU%mR~$.@g %ULMtwZ[XnX6%Ep ӅDBERY'g~qlS :"3j^% oosmVNelQP6Q!*An4kJmDJvHg0N5ҌPM^T6u YlTa‘ (ͣ"|ę2YqߴPf8]t63p kvd$^!P)l9-~șfxńfeswZuXS@'3QPy ǰYs2k ym"F@!p%+U~؛Up~zCSI(J\Za7ɐ p>9?M W[Cz~y{۹`z /76@ͳG:CK,ܬX¤cȨj54CBD{ =)K Ziˀv&X S_ crrVw6XN<ۮ\ښhP+M^T'̳{0YmKt cf H4uD38Zo*>0'0g\ wZu|޴h/>mI*}.!Ζ)0fhqQ GA]gtX2hC/ U#0jB0[ '~ckL*K%OYCѤ3{ to?CEK;&9ȱ)m3<3vT^c9R29T<`"Fy" }&Y )qdZM{ 2$p-:'?^.4UQbHAc|k$E =xni߸e?raإ2o (;Փy yyX ۉbArZugtaYL{EN3v,/>Zq;fϻ&4cE W{<`c_H. { B$Edcf ۚ3O$C\UaVXCU._cRcRŷԆ'Uni<RF#;{}^m~ y{MI#[ѽo!vVLЎuy-vMc,cxUDN4B,S@X9Zg@RSO1)nuL1W_>Navlq#z+N" %@<&؍]hAzJ T1 O%\U m#Y@ZPh%M4(Z"{SGG_tLB[̯ C%hΚeJs-ͨ`jH 鼺e]G-LBpj -l5=taEߝxٗ۠Nr`CaƒE_h=Bի4R=[%Pk#iÓ6OQ4U|}Ye oѭCppr6џ 嫏M&}c<-ؤĄ\]p*:nv;d0q5ܕ:ȏE /5H nf,V;:<9Zs֔sjh仲{o‰e0oJp%C#Km0=D`pm^T!;8xc 1a% vV6.ڜ|fM<ViJ|.!Dnf^unBW.9\t  ,d y#mA.M-U ͥ4Am%&tѹF->D.D>)q&۞hQXmMwQ~~V3l52󼃦&d,w+3.]БtJ`E¯a 7Eq#-h  6 - 7'<'e7th{m^I6o4N Hc}gYmC %/xa_&Ny\L7a42>?ߪxJSBփ'S}9F΅7.l n#{zz[SH=ky51$d:gaw10@Ap+@UgG9-$YٶcoG8(uRG \J-劚[JG2,٭ڬx B91SzM,׺ 'řȳ-s,t@pをYBQ N-nuVPٹs.gtbT PU澇cWWoݨN | R_L }lgyW4SJB'g]#G=dus{;xŰoR& ŷ<l5$B߀@;f^`' \d;.?9|m+S т5'O1ʼnt,RhЃݟsuYb&H&Ep=Ar&Sh~ u<{h"7kwzyBB\FeWA|MTϙwi K (;M UC/cv2ӐɤdkI]CmM c͘sW! 8خ<Dfځ ZU`R;K<?ݼډd2cSS!V\Hv:SvF 2<o`/-u#Pp HwW)_zTyts \fAoC-1G`we0XrN9d9UL$ sjK k9yXśKASsl2 oR?su*OuYщG<0لbL1Ow`G`PmH 9}^rwѫ}z7Yj6)%\gC6W@xIv~UTsn]@kncj\?Bw)qYGaO .jmc fs`tuj*VGu2>Ԁ@ۙ;@p1o ̓ʊE+rTnҔ0?FQI.N!40:)”w%ZWob S+:m@w_b44D zEp,;7;G9I-n3N5T$ fg_i6~Bg26!$6ߴD\F'2wj;jA4\B~-I{$-bo?mj:͞\4 t܌74 -O] );ÃiT2jaSX".!=c'gcE07 OciV%tu6I2~x"b/γ 5|/)te4 v[0uY\^Da;K@*q*+wcIMTb 9 ȆZo5Vt( :7%jeaՏT+rOwp S|úZgbK$gh^ΫX}gD[PHKng~?l/g`.&r> T7@nfhמD^*D[1Q<$W`ͨI@sU3eD,{)@<RMq2#jKytmy9g2Bg,e ٳ3oBg2 Il пx|Ju@TD\l֞SUOtVg'7eK!_-yw!kq邖Y7ڟdzdͯNY@ nLt)T8G3C}ߴUo̽?2x;+L+yu-2=)C;g]N/YJw8XDK'}2a )/7|۾So<9G,Mo%gb{S EB:ƒoLy˼ɣYo1bWgLcHb~4^}*hX'2PteS^XK"ۼ5ͩrˣ瑅NhL1Ѐ8=oG%g~O{=U (`sk@oehykc+S>v g&\zR'޵f1c5Z!dowV{)2>>x0AIB阊t of~#w%ipojm9K΁T&9&Ek9b1gX'"Dgl6*8݋5PBU}!&b 8+X CEa{Qv7&N a-G (XZN#2CmdY 8Ro C ؝ /;rQ$L(%)OLBm@79; 4|]Hna{XRZ>M$wgbS!ҸyP?t: [{"v Ko20>ͪHI瓫Z,1XpjQOqB~м6[ܥ7o׮pP(F*TOPz}Br$;o B$q1vsA(2mJ. ©+Yt\7c^>gYsɎh]hF%eI*m~$\߉Heo(L]%k9nN&:#7y/xqi&^?*4Fsł7щDPBA1 RT_?=o.]/tڴDߌxO|4e c0tQ3d¢/5^4T@#Bh+n@f@CRRr\69#sͅC=g)JqUCwWS+f^|:hݺW.C-}~iKc`Td%]8of@'eҋcFZ5$j/_j^P@YJ Іx?lh@U.tHK)2zQd 'R@M3-m;2fJ]ݏ\V>w^+ޓPDa)mwLO}i&|f$TB<,npbLF>1r-hӓK{1W;`@Y^ptay1btCy jOv E((ȫH xӧ_(f6X,O SȂM@tVCM)1 ܈GSybbF Riَj@߱/ $ԣ%6`A'#&ʞ.s0eSã]fREYH-xM6 !h8<)"Sdb/+/~ p(]w?|MXAk@YIU :<MʾT{ 7AML .tz˫WWX hbkXK1@["TG_7.doZ 3td,8b_̵ a/٤FJ[eo<rqk?-A>f[ cw5yD6ӋgB2B~P5DL;x/%, E9P`]qUzs[ͥwJ@eyZ2Xo0*^[C4M *YaBK8`-W@pzQ|F1DŽw4d 7povR&V\7.6YeOx6O̟9))$nH>5:IliI2g9l{ah!{8BY_:zVan7|"+tz'y} B` |n>)L<cxo^=/&PwJ5N%_N?e7\f'=vl6lVc]6{֠!v{O 4Z?&LJYl>G7̧ X!񄥇7PV?xi(혺lF#w~>fB2`N BK:j֤$?9Uܲg &}-X b]o'[!BwtåQ m'e&=e! !WmÖ}|l/謏R-+\=-M JsLfSeѯZa,w˜)'U,nF 5PݯltvC=STcэvlKȄF+7c=C$փ> }  ^O0*y4k1$ "'}mIh駂v9X ;6إiz7>5$sD]D E9&}}'Ff'bw(tH4ߛ]/d7y,vYXcA h#;\|n2lOI$oDZק &K?@v$TN@F%Z"9DN- &!.S*dz߲--+˨h7ʣ*4(<3K~lkKs&e³So̪\WV",kI`$hl-<~BλeM>:EH׍ u()Nwm*[ύSqɊ_RR8wP|v?0Oڐ6tg`T21eFȄ,o!#G G3.U307L.^\XsutmB1r!,c! WP7PHhypdށf_4C z[:Njׄ4}5yꦚnD(WT\pԷa\[R?kaݯZyfPv_D#B7R2:NSG!׽Uy1FOJ~0ZDc%-?Œ& p_b_(z`UVIh7vĨtqo!'|Qg$O=῱|% TPe{H by\UQSHNN*G:#6VIcdpn%**g4+ ~9Xc܆lG5lmNO*X* ]&Hi4e.2w݄Fߤ4ONCʐj::I KSDl.ΡEM#^2jyB^g?h+IvDH9kH1pJcӛVzu e&X_\'N,NjnHT9$hV-:-!Qvﾪc')!:ϋH~yɃ{/gŖ+.)llҹK[z\`7|Iۉd64Qf1Q4Pw2lܝwuE2P p h @:1oc%IT4BBo=ɑWUs%?i9K1&M);R 5o+~n˷ѰiWYC?,q8َVN{B^br\ c ´fu-XPSKWsW|!As 9˂] +$0bwyC`__B+WK;UtIb;^nwYX"ce 1x[.k^5KEs|J)* %\ q ])6Mw4dd',qLDc`Yt:.;TKYD݂:};$Qap4oW@,2~)?,ꛖ> w(Vq;10ISܣ L$*X9|B\Y)TPHY}hf. [*ᐶ^5OK[! ꕑ{19*$_3%hL$xE3J6!ӭ7AJRxO[3)?0 (bSғ`NQ[ zrx,rj_}G wrzkjҦj%ϠS5;(-U_`JD1FqhpsRQa˯`;q$+ \ ƓG4b(wZCD=0i ~AIV.g"X%zA>1CyV>[7^e>#J!J*kW6eE|4IϭSߌ/  ۤ*JgP]2Ua&;X6b;[ݲ :|uiMb>c.+(Rid}όt6׆F[x=th$X̸ۼa>{ª} \ME6$F)a aJ_BrRxcryޣ*U*8!K:D Gk|Ձ2,b6=خL} }ӹ2T-G]-U5k"nuU(!HGvǃ(+96~<807 SU^6Yqx#Z>fme߅GE%>)!34T ;31Vˍͮ \FSJ 9ӧ;l}`36&Yt;C{|Ys #P:*I폄AUj/lLU5{VvH>˃_,އj&jf]na4BǮҧLjbL{ NRd/oBD L¶&Q.ND쿠+$ᬢBxd+(4WP^RC3O⿂lԙ,d 89 :D{ !]~oGAo-I=7gDu0~~`\ p&TzifuZ~o& t*Na?9\LpZE+ʺi%~vgsIgmݼӣilyr q`)!FV1<]l1pw-eWy™XT/!_c;bSV l}bZtD!c˜9ji$i1ckgr݃0<(Gk5$~PC|1h<,k0:6r}OsDRLgޕú hM A^%v/;PIZN u(-ov "#Tߞ>#%3v*xh+@Ry 連m2XvE2VĠKVe)q%e_eT~nzx,CZwMLn=ωQkOrz#d_R+sv *.6RS2q*olcDpm=oɹ!)*~} SD CT>icܝ3H}1er_vPXg&IF.h5o!=ƅ< KH?kM26P<׈pngGhIlZ:q : 탫ҡ48D`t S|we` +zY)nUw}b!'!Fu6EVS{H05#~ Omdf\rsx=wGDmEBISaZG#$jEkO>gZ؀]R7Si/( uRr?XӍ:e9HHQ` )[@,#{-4>Zn,mfۯ7~ UzS /ǼCCbfpfgrR_ը2<am]7UҎqG'?sc:%Ҏ4jp3x塻.ht0c:7;ԚM3GStn)GOJ2'mMp9-N@ ?Vm;ASjYGԽnk` ΞqxUxJзSJuҦFQda5 qJ,Zgy%#!. $m#`!Snl)|q*RPNR).9P]g/ eO%<6jp4zmM3;X该1@e=DOCӺb(U.&2yפT-`Jō\,;N$͚I/_P͎ʭՕ^؟Y1' Mysv^QG79\)BnLfC4_sOyn$l1!Of4e9@o J Z$Q> D|-Fr4Hs۲Hcg XIy2Ė8D+ؐ%њ2SCaB.h)04YV[Jl~Ƚ;z ;%b9D+tF2EV9b5smjG@8A\\]J/Q>gixO}vi32taz\ .-zxvt߸hBEct*NaZ#B# }ˁ4;Cf2GEF kBPM8 rH@,( _݆zQJAz fV:.KOsƫR;e2^ ~|@#t L)YR'd m>ǩXj] KXwIIM|O͠93>6k<B *$?oq}ހ/,Bq*Qi{n/S5V1%s0.F4f~Od=Dt8҃Vc.޻N 4{4"[CܼgQ_X_οh6 ߊ!){*$qS ^fݐ|"PucLm,W>fL 摈wi7Rq!r6pN#/xC~uI_QKӆ>!pPP.q2/3d!db&ɟWuU!L3Qvr&eIaoѢav`psah٭VU! [1_Vq"1%u^ŃYЅɅ>-v:L_|4cf Y\eJ*VڡղN(Lya64:+DG'TxνbmrJ!<en>XWLj# >,Q?"ǂ|vc68kHf8k?C7\#\YIHoH?MwV;T7r=r҉]&a6jL<3!gr݅-g-/ b˒L:1%/"ND-]q2m8.KA)N$8DyR:}!e\1I™>Xa<2l"%.d%"˰lBcr\Njeӵ| 73BMr,Cr- P$M5$˞hvgQLj=H;hI,uSr=r gck}61- o5o!qEv%..LQBI^X'N&G=#˭$Sok'$ؠzQШ,F&ZZR^!.q)c$*ij>*UsR|syAQ;`hGxyͽCӪj=uX2#91k|J\5L"++ e ݍѐ ̏kYD0ҟnòBMm|t<ƺ]zVx~X!ҝxّJP?<yGD?Y!0"A|~vWLV(^F$DKd8j{] <,4t4 G^tթUQA@f=}XVF,GJuVwklXk'r4M,.a7k|ep6D!-' s4;Q`á;d3ǔCD|GBRioujILu-} -u3 &Li "gM2vI]u jx"~dvj_xV!i7#?޽ f4 -WS|fğy]t_Ϲ (L._$ jv:Ea3`G~ OQ>'],YX yꋿ4' ߣvp9i{02d5#-AT2fv>ڬd*I63FeGÛ9*3H7Jz6ܑBGPc-CIqŚ)}L հxI89˿w< < /qp?sO&RԺ[.T&jM۶54y &ß$̝t5oqx5N dB U%RM&H+l򀴁4<-@  g/zpN3%wM6X LDK=Zr``,RD$[ ?l;1,(NVe[[R1PMbJkJYY+R^p z@Q &|4Y r$Yqxc/{MSOl?ou f&1Ńj:YZkO#=2=s2[䪣C+6. 7%x&oIMV_qƈA\j9lZ|ԮQtswRt] 67.xhn [mpb5~rnZEi/oI"\8dDaVXYav!be Zֹ\Xòo. KMA}63u'MMd n{N%7R.[,zv hlM+y2z2Cgc^Z+c[|ҢA ;ٳI}ؘ͞g"A2[ 屼%w| fAqMU!>fy vJs&IR2 a7q/ ӌ/>ρ;9h08*^b=R&]E lCYb~-ao.?1Xs=!9 ^10VO-ŐܚKwF ,zEH1;^QO(=+rX[rd↡#%@3WX?=m %ECGdQS",ۅMMpyI|ѱs?;pI Rv3dqZ⊪UvZ9ى2=o@;V$7zm@`SBcǃd%KprN5vWzkqj?Tb2tlwOL/ߌНuiֈ}tTz}XzNfr Ad\oYAbB!4Cs,ъ\Y42L!^'q3W to ;%Pko_Cy"n]?VV-hxwaCXUlλG7ȍ5dM /_=/P+ěXVE8z K6:GScЖE9D](~ƸQ"AS6:hp̆SdØu1um-g dke@$Q-gɤ':H"GaU '꼜p#RcnNd:=HX(=]]$nxq[cίuV_Kaޥ +1_f}t<«ͨ4Mj}xwjRyג{SȶuU/ ,歙q iQ^0t?%{hxWE^wp7I7.[j!ϗH 鸩d1m%&E7IB[᫔nό@n"eʿ0SQ4'+!!VM'C$Gzh=+F'`_D>[SxdKwhO `z0S tI2,ksID-3X$ᡭ"OG f,q[R*vlez KWW Ofؔ߷pg۱ {iHq2!Y|zLc̫G|ne^Uޑ})8Y.ahH̍ NޮhsC Xmʚzժh[{g 6]1FÂhO|LFrLEmRK=;H! > F|R7?1*8ZМ!?(o@u#ΪNo+l+.K> =NeźR+: E`UObAfs!(}\֞g+(g}A6Fa1jrleS9վ+ŇD)(ɒCC`m;\+5Q>Pdoq?2[{ݻ)2"|9/n8 pD.qiT$g]}]hE7/&BbβmZlv/9+^cƆy4D,Wc9wc 38.8|+t=?ÃGCPrz`YOTC܃c7{ɖn8[4Ru; !{b"K/'u2(kJG&.LBnrD+<¥hGEZE3,*V@s ]3ACS40n\d~dMQ˫0 jM:dy"U 304}^珇? 7(n^.*4փ`WJb IQ"PBI/#7|JKoԫ*8ñ_ՓnKYιO*T(dC :Ă0`E N }$oe^s=`2> 7"Owk%;Q9L,g[~B~ܹй &zS|!ү^%Oj5`i #Q<r7k>xI%>!C DNe`T~~QA܉ M}Bx6\EmB9qhd&$2[Lu{|Ԧ]E(UVϑ7@>i W:|[}vFRRTbhD<#ݢ-qFUɠBҠj+f=kIc*=Jg _&C]*-vb UAr"\坸a~U4s&Cv$Y`@d'M>}SЙO*!<]tȲA ꘄ0##" ƟZ }QeeJpn)54Th܃0VI0vӊA W 3m\m9M:,!c_ɺI  9 O6WPZ,cg.Oȉr |%Ÿ5|< RlYOXX+h?b bX G*N^^CՆ_KkjtrINʓt˩sEתn U,/Gm+1K13 +Զ{r|,OHSw% *~J @Yܓkƅsqv|"^J(&Bjۊljva]2= Bl ݝwPG;K=Ƨ4-;oxNIx'}  hN5¿: .Q[/s6g?Rd%ʐqT19*E#%Mf5E#PI 7G;G#lAO6ri~ d@iU7P%f@{Q'&(Q' w7z {p`vϳﲟ-!f k{1,]ZGl $ۥͱ｠V2xTi| Dd;AƠ]EUXhq-[F|/DuY*iO[Rd5[3St1fM;;t>> ae!dp$ͬ0 L}!)npsud7)ZՖ}.j"EJ =IEuZrU[Gvg++@w R?)A\ޟ0o L~lagk2 Hf'Nt!&O9z4ZAura Vs-hK|1CpK( \D |%W,oTv_O(Rۥ ՗\͒ USGpagaK(㒺HebGe&m=|__7m,+_qK]鲇Ǣ+Jrj9k+j1Hr?H#]Ap+xA7ɩ(zAp=5b_4E: U ZR$VW:eW$2>FcVX[b*?gZQzFaTrR@賉jl2ܝQ-gmLoUڽ̖A k>^Q4~lNbӊ#3e&@Dd8i_֗ {Bߌ5hMFhcX$Y5BRʤW}UU;֚+Dx#mLi LvY'\Ҩ'ty>IZ"YA tIΧ8amh`D^(hy0@M*&.fĎh͉= f<\l)Rvb2ώIrY-n>)B3{+cW3ISCu=g⑞: 6M H)}e%oB72+96VmՐMe =8Fdk fSXG PTI { l+nO(;R'55a]@E(lyͮńUuzb7{;4`Q{܅MUɗH CqLȠXyZU$,ͻ¼߀%o-NQdx*:J=69+|i$,9Ɖ]e62-t '߭XӰd5*g˝57Z?E? q+lȈ&dGlmYGNU7xÓ:_ps ~`C^%!skU7ALxVM~] 71j  P;=T19j@9/^`eW׵c'%&\n5rh^i Ҁ`V.[P2Fs>6՗b NC;ec;ʝθǡg KwzZq3EqB~{#h "$Q:> q'kpu!a aG  vFR$eko3\gofu_4 f6 GSBYΌ"tVm%kԫ2sBgé)R¹a2c?lh[f]N&lɧa;FQ5q@9S6ucF(!Cp=V!i#!?HŌr_#4|"on2q0>zL"v~0Ħ&yΌ]_6IB|*,E`kVYk|\HOHPsG}0-|SmƏj~J4{Sh!*n I1O#>)lNBإv3LKp~  "~({*bzE;\~3 30Z;/,+C<X.oJӕ-Ej=g޶W~jp-G _xiO[sLD+{v}=0R#.(Ċ }TĦWyXpTs,$HN9aHQ!TnN#ќcn9؉A֚ꭙix"c{ie3+X|QǏ="GdRPpԚZ|\P,R%~ oZe6k$κl_b* /3DJ u-qOhfNY)j˥^*lWXz'Q}7BpЇan݈]Bhy>>&W  r&7LJQS1x$4_Ǫ5ĊodκZ)Մ>5/²,ײ#zXR&2!4oLTH "L|T`*Hm ι&)-RDI}W1QɄ&z᜙C/F(dhis5Г} {lTż-^?J#7=p\u|++w\ޕVF9 Lx@P_Gm#6EoP?Mɣݮ)hY ,ףvw]FҰm.-AԾmk|k33.q.mGgj,7HhxPy7\-%a2x!AT=A= au!9{*xHcoe~&*Q<0o>J49sPϼhhNh Ҷx=LrOkI/ lJmϏUpu\2( ݿ8>v_ bUvn9|' Ȇ; JĹX, _WPKg06"GNY H̬@"k;>O%YP]2/C" ⺅O]eX:V+>+2)Pk^1Gt<-TE1cAU&VUˬiI$u۱v]#QF 0:`P{}D#x^ҡ>gZ9߯i,crPJ6N %3q>(w ݇Mr8kЈ%#*Q]6<^v$;+}0wŶJ!X(] }|-Uf!,AV,I7h*62l!Qh(|Bj^iUGu&`*0DyXU+[fa˟ l s4>*`@b \V *v5`}\ IIie\"-}(5mPS$P}L؀|/WƁd'|p.#a⩶!~- ZVc@\;`:K~:VpLaيRHx?1XhZQ$RBkTY` @Sj*Úef9(OL&Xxtj2l/FGJ]N  )̾LQ+|ϔ'^Ms;7i"zd!7Azo+M&.7O58zg@LSd/JlDc}I'C-OomE+3Θ%a)\CQ즪ٜ}-җ4c~(%~mYu80_8}sEQF2ci0hAذ} 8eNI姻t~ y=r^2\D+;Sax~RX(0@ zYCjsc#s~i._9 ؃mT}|+&msk.5 :)^<LOPGkSWyE+Xk4;i!É7` 贵@Ot/ ~KS1H'WLE;S;UCn-7Rp\ ym0\$0}znP'-^,1+Pݖdzw˫ <ab~  8ץbrffvgGFN*N;F6={/ ]"&쟀(ߙr ;7X݁MpE(MI&b怸B{p,Ok>e3*xj~c9㉲s_OCS)JSܠBrJD8}_b1fV90jRub٬Z/qsZ>DI?">X}g9"( ]tzƸ?QS3D 4*5g;Z (W0DP:m4Ax6SwLt7}=L6Ij3np/4PAjY7] Hsp .nrwy$&%syՂ3gxyv"s% *σIJ%d_X[u",FHaL Wb}S!ضrGz7-RNJ *)4,Eq',o 95MUVdͅ|iO}0LMV,`Ӷ";#7IK2f;f_t/X30WkRMIS4@wqQn^:A1pOÿCAAjU8 l (XȊ3 ˦J^$dȜvss7c- P!y&))詪ڢzJPXH"1%3cʶwe\)zdo+z!ju]bB&^WtI&(.þePf0lMzƇعRϸv7AΣ@2E~=ʗ#=Î/|6ҩ&yizϯǽGk'pQ:,3Y_G6ToųYOtT4zރd+"= ┳6J+Z'*18ҽ.;,v y x?[[~dV$5KR]@rA zQ~gnS2Rj!>"Y5tvݾo f%%Pf==(&< @D *sSb/`߳3:XOHQ=3|#++]2Kqhn"&TTaG`Bn,Tci';ܕGay-:oqQ>Vܮ;"#?a$R#^mEV;5qÐŘ qj|:D@ԜCٺMŊHl+iأ6TrwuﮆpO]Q~ :{>A2@SJ0> EQJeU֐an@<y*ii=|E0Xm%e%MRMThďL=(#97\{M#vVƻ[lDIB2Bzzn5qxgUDJg`$d;Q%![U)$xW\0p*`#r ׼6ߨZ64= VVJW.e@SDrPD.hrӀA㢊)CRəsӌcHOg%,&Ҙ~5-Wb>9IxhYKq%0`57;ǃ"NAw5c4D - >&T-'SCGq0ĵqMf\~ąPp`︅ଷٸ;5c5yJ\Ɨ]7~U\x#[D wF8 FXMd.gX^憵P)-LDƻujWuna`rE'g`u"c(|=ٕw!^篁P%or&YQ҅YCCE ,O55X1<®Q$yuTw{Oл C^ hֶjvb9kYD($Y'8<_n^R>7}n3\Y |"K YVmAÓB>o5M aWφ*OG_Dr"#K8LRFxz9.}LuۗH?9%w/E|UI삔5;dEn늹h{DƹI HiQk_-T+}q (뀟UOifKKR7>U9p!$ p~{s{~yY@3zr]Ȕmx|vUj-%$ 9 4.7 +:c6J._Svor1;^H:r.:A8ui48 ,.00K,unSL=*5&P<'nX $T{cׯɮ ~1iL1;4iiF!ǯRbZ2E0\aF$- uVL ¤ނ~f:L58>iw“F \\i H(YàTuXV>ݳT!">tj ZWfmI`4'i ,13.tl^}8yw;vD:f-q8MjSM`B۷~ɌW-V2|HV2__ sjgdtquU )ٗ۲dT>{ox9=ddΣSϺ_-{"P aӓ _*g:l|H-˙__wiHMCd 6g㋹s3d}3\\YK ~,0 ndP5Pݜ/X"\L{,">Q:: ŁͯE#Zs.`)w2vv0)*lAW?hg~Ba&9%F"AukOiOpL{YU|ޯtbQvGTtԂNx0mBݪC<cvJt|7w._pQ5롟`8}9#N!_M5cL;ȥ"hSnQ_@[B[K%:ރp1&dn;A gؕraA0`cX0j:!Y8}#2VvqѸv >r sH4*N[w3'ޤl BL2e I^|b<&N'J3w! 4h1ӟùb9֏tP/"\bVy 2']~ "xtˌy>]i,0*m]J3(ZEOk H .a˿Qۡ﭂g^ͬ \Jvi:$읹[ Jü[s:`%F׹H. `Tʽ`hVER`oS| tIc1#l*eT7MIDwr`ٌI;>JԲ'/*. xƂO'<3Gcw+EB7d}O[ϯGڂ@Ho6giY`cz"0f-S z;q'`K]V]G24K1} ,Y6^e4eR} +9R?8.Ltp#RMdcE>{FvN^ }=Y>r.ӛ1E0A Q#G NLD MeW C˔7XČgih'rPEy 04Q|ђZ(ڐx32y2y⡿QBEPDwvp:shcYɈiyp~2^&-V?I"W"sk%GVH%is.zNjgZ}OBe*8LٜzlS*j'@#?9TF(Ȁ ڍ$ QL+G ]VRvO8.A%a+aZ۔XJrK-(pʝh2E4F&E3ᐎ=%Kٞ*)/=2 jǷ4}gSS֤tyIIżt?pÈW]#H[{ @_> %~bjeaɈGO*yً]بD;Uy[YyrCn>C$ZU/U^ th]GsF.̈́\8vY%: Wt1~w#|,=v#*PX w +`xnWnjO= 2BX8#zu|=zFV$T5PkGt0B Tq+-_rjo)II!hz am亇jw@&_4]Ya>{xrltv T!g"Ϙhd!R w*脮eJ#⋌6d}Zkr̾ t0K!Љ`F?1Zi8Xm &DRDѿ0Z˄U mp%VrBoIp/*OnE=O9X* Y>(9@D&zWT| ^hDic0@ u>ғb,9AL l?bpKnOd a @Q 4c_8X3o?Kx2,. P6"m2<ɝE I&ԗJC,pO!1ĖsC%-( ܫX ;g7üzû+5ˆcM/*ȴ$dO|~~g7*7$̨1\Pь; >^Yccf_>v3/ETD  Q:\̇iE2УO.dl=0wأe3EV4ѽ;ʦg\d6Dq$g2{6\fLWo'b{3B'a݃Hx5B@(K>Otp;jOL=ءvae׭.x0бRAlkWm`57C|DEO닆^ ¯ ̳Hh^16ՌwiX7Wd7=Yenğ\fTk@9n*Z,F" (tO3:N|)/վ)>+Tlg3i.>` Fs_lX0ޥzc΀oȏʔ̣+^" lE SAF84h- 9L+,8ePQ\ C[* nHpF#,zeByߟPݫ.Z,H{HᏇj:zGG gXx+ۭEBGNSԥ~CjdeIhfcPGiJ `kfĊx,zDE 9i0 TyP$M@51b5DCPR8xɶ:y;qiSOV$8r YZ