knot-devel-3.1.2-bp153.2.3.2 4>$  ApaV̜!M@eee<"~P'C1argtX7!W*m(\nBZQ T{NF@氒Cj! Wҏb=<_?X&=dTSj@-;cp)_xda;*8gk#t̽8Km-;vNkA=Ez boW#`:YNsF$~IB::KZz򊨓[gpc8hF@5143fd1aa2c0f84fe46f11375b27fd4cfd666c934f8daaea5e7a111a4c86f66d300ee11935f3d2e15c50cf826e1b32aef15cca6aB<aV̜!M@eeeMAՉ:n1/25F=HdC g1t ,C~Բ|q>;@1%:lu*XtL8-Tkh Y%Vq'(VgI⑗dxD䮉S1]A½)pMQ4 |Ų;m_$G,_^S,Q's.=u5l 0/v\(*!2~.k T &'Fr=q*TSuJ=l&OiGYG.T>p>?d   H<@PTmv U<U U U U U UUU.PU4( 8 69 6:'6F~,G~HUHUIUXHY`\U]U^b]cdefluUvwdUxUy z4DHNCknot-devel3.1.2bp153.2.3.2Development files for the knot librariesKnot DNS is a DNS server. It implements only the authoritative domain name service. It uses a multi-threaded and mostly lock-free implementation and can operate non-stop during zone addition or removal. This package contains headers for knot.aV̘obs-power8-03PSUSE Linux Enterprise 15openSUSEGPL-3.0-or-laterhttp://bugs.opensuse.orgDevelopment/Libraries/C and C++https://www.knot-dns.cz/linuxppc64leH %~ B QzR N ^ J 0''Kv , tgj U  GK}& r  >"" (,)AA큤A큤A큤A큤A큤A큤A큤A큤A큤A큤aV̓aV̓aV̓aV̓aV̓aV̓aV̓aV̓aV̓aV̓aV̓aV̓aV̓aV̓aV̓aV̓aV̓aV̓aV̓aV̓aV̓aV̓aV̓aV̓aV̓aV̓aV̓aV̓aV̓aV̓aV̓aV̓aV̓aV̓aV̓aV̓aV̓aV̓aV̓aV̓aV̓aV̓aV̓aV̓aV̓aV̓aV̓aV̓aV̓aV̓aV̓aV̓aV̓aV̓aV̓aV̓aV̓aV̓aV̓aV̓aV̓aV̓aV̓aV̓aV̓aV̓aV̓aV̓aV̓aV̓aV̓aV̓aV̓aV̓aV̓aV̓aV̓aV̓aV̐aV̐aV̐aV̓aV̓aV̓aV̓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.so.8.0.0libknot.so.12.0.0libzscanner.so.4.0.0rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootknot-3.1.2-bp153.2.3.2.src.rpmknot-develknot-devel(ppc-64)pkgconfig(knotd)pkgconfig(libdnssec)pkgconfig(libknot)pkgconfig(libzscanner)@@ @    /usr/bin/pkg-configknotpkgconfig(gnutls)pkgconfig(libdnssec)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.1.23.33.1.23.0.4-14.6.0-14.0-15.2-14.14.1aD@a @a @`ݮ@`f@`@`q`_@`\{@`@`_@____^@@^@@^@@^@]\HW@\3?@\*[@[@[ݍ[IZ@Z@ZWQYYYXWDB@W1@VwV@V@V@V@VTQ@VCU6@U6@U@U&iU&iTTq@T@T@Tk4Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky Jan Engelhardt Michal Hrusecky Jan Engelhardt Michal Hrusecky Michal Hrusecky pgajdos@suse.comMichal Hrusecky Marcus Rueckert Marcus Rueckert Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky pgajdos@suse.comMarcus Rueckert Marcus Rueckert Petr Gajdos Marcus Rueckert Marcus Rueckert Marcus Rueckert mrueckert@suse.dekbabioch@suse.commrueckert@suse.dei@marguerite.sumrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.detchvatal@suse.comondrej@sury.orgondrej@sury.orgpgajdos@suse.com- migrate to user creation via sysuser-tools - run spec-cleaner on spec file - update to version 3.1.2, see: https://www.knot-dns.cz/2021-09-08-version-312.html- update to version 3.1.1, see: https://www.knot-dns.cz/2021-08-10-version-311.html- update to version 3.1.0, see: https://www.knot-dns.cz/2021-08-02-version-310.html- update to version 3.0.7, see: https://www.knot-dns.cz/2021-06-16-version-307.html- make sure we have getent and groupadd/useradd in pre * added dependency on shadow and glibc * might be related to bnc#1186023- update to version 3.0.6, see: https://www.knot-dns.cz/2021-05-12-version-306.html- Make /etc/knot directory owned by knot - fix reload action- Update descriptions, remove unsubstantiated claims.- update to version 3.0.5, see: https://www.knot-dns.cz/2021-03-25-version-305.html - Update description based on homepage- Trim marketing wording from description. - Drop old rpm constructs.- version update to 3.0.4, see: https://www.knot-dns.cz/2021-01-20-version-304.html- add incompatibility warning about 1.6.X version when updateing - rename back to knot- version update to 3.0.3- version update to 2.9.7, see: https://www.knot-dns.cz/2020-08-31-version-296.html https://www.knot-dns.cz/2020-10-09-version-297.html - obsolete only pre-2.0 version- remove rosedb conditional as lmdb is required in general now- replace conflicts with Provides/Obsoletes- fix dependency: python-Sphinx -> python3-Sphinx- use upstream example config file with correct syntax- version update to 2.9.5 - Bugfixes - Old ZSK can be withdrawn too early during a ZSK rollover if maximum zone TTL is computed automatically - Server responds SERVFAIL to ANY queries on empty non-terminal nodes - Improvements - Also module onlinesign returns minimized responses to ANY queries - Linking against libcap-ng can be disabled via a configure option- version update to 2.9.4 see NEWS- version update to 2.9.2 see NEWS- update to 2.7.6 - Improvements - Zone status also shows when the zone load is scheduled - Server workers status also shows background workers utilization - Default control timeout for knotc was increased to 10 seconds - Pkg-config files contain auxiliary variable with library filename - Bugfixes - Configuration commit or server reload can drop some pending zone events - Nonempty zone journal is created even though it's disabled [#635] - Zone is completely re-signed during empty dynamic update processing - Server can crash when storing a big zone difference to the journal - Failed to link on FreeBSD 12 with Clang- update to 2.7.5 - Features: - Keymgr supports NSEC3 salt handling - Improvements: - Zone history in journal is dropped apon AXFR-like zone update - Libdnssec is no longer linked against libm #628 - Libdnssec is explicitly linked against libpthread if PKCS #11 enabled #629 - Better support for libknot packaging in Python - Manually generated KSK is 'ready' by default - Kdig supports '+timeout' as an alias for '+time' - Kdig supports '+nocomments' option - Kdig no longer prints empty lines between retries - Kdig returns failure if operations not successfully resolved [#632] - Fixed repeating of the 'KSK submission, waiting for confirmation' log - Various improvements in documentation, Dockerfile, and tests - Bugfixes: - Knotc fails to unset huge configuration section - Kjournalprint sometimes fails to display zone journal content - Improper timing of ZSK removal during ZSK rollover - Missing UTC time zone indication in the 'iso' keymgr list output - A race condition in the online signing module- update to 2.7.4 Features: - -------- - Added SNI configuration for TLS in kdig (Thanks to Alexander Schultz) Improvements: - ------------ - Added warning log when DNSSEC events not successfully scheduled - New semantic check on timer values in keymgr - DS query no longer asks other addresses if got a negative answer - Reintroduced 'rollover' configuration option for CDS/CDNSKEY publication - Extended logging for zone loading - Various documentation improvements Bugfixes: - -------- - Failed to import module configuration #613 - Improper Cflags value in libknot.pc if built with embedded LMDB #615 - IXFR doesn't fall back to AXFR if malformed reply - DNSSEC events not correctly scheduled for empty zone updates - During algorithm rollover old keys get removed before DS TTL expires #617 - Maximum zone's RRSIG TTL not considered during algorithm rollover #620- seems we no longer need jansson- limit geoip support to opensuse- update to 2.7.3 - Features: - New queryacl module for query access control - Configurable answer rrset rotation #612 - Configurable NSEC bitmap in online signing - Improvements: - Better error logging for KASP DB operations #601 - Some documentation improvements - Bugfixes: - Keymgr "list" output doesn't show key size for ECDSA algorithms #602 - Failed to link statically with embedded LMDB - Configuration commit causes zone reload for all zones - The statistics module overlooks TSIG record in a request - Improper processing of an AXFR-style-IXFR response consisting of one-record messages - Race condition in online signing during key rollover #600 - Server can crash if geoip module is enabled in the geo mode - changes from 2.7.2 - Improvements: - Keymgr list command displays also key size - Kjournalprint displays total occupied size in the debug mode - Server doesn't stop if failed to load a shared module from the module directory - Libraries libcap-ng, pthread, and dl are linked selectively if needed - Bugfixes: - Sometimes incorrect result from dnssec_nsec_bitmap_contains (libdnssec) - Server can crash when loading zone file difference and zone-in-journal is set - Incorrect treatment of specific queries in the module RRL - Failed to link module Cookies as a shared library - changes from 2.7.1 - Improvements: - Added zone wire size information to zone loading log message - Added debug log message for each unsuccessful remote address operation - Various improvements for packaging - Bugfixes: - Incompatible handling of RRSIG TTL value when creating a DNS message - Incorrect RRSIG TTL value in zone differences and knotc zone operation outputs - Default configure prefix is ignored - changes from 2.7.0 - Features: - New DNS Cookies module and related '+cookie' kdig option - New module for response tailoring according to client's subnet or geographic location - General EDNS Client Subnet support in the server - OSS-Fuzz integration (Thanks to Jonathan Foote) - New '+ednsopt' kdig option (Thanks to Jan Včelák) - Online Signing support for automatic key rollover - Non-normal file (e.g. pipe) loading support in zscanner #542 - Automatic SOA serial incrementation if non-empty zone difference - New zone file load option for ignoring zone file's SOA serial - New build-time option for alternative malloc specification - Structured logging for DNSSEC key submission event - Empty QNAME support in kdig - Improvements: - Various library and server optimizations - Reduced memory consumption of outgoing IXFR processing - Linux capabilities use overhaul #546 (Thanks to Robert Edmonds) - Online Signing properly signs delegations and CNAME records - CDS/CDNSKEY rrset is signed with KSK instead of ZSK - DNSSEC-related records are ignored when loading zone difference with signing enabled - Minimum allowed RSA key length was increased to 1024 - Bugfixes: - Possible uninitialized address buffer use in zscanner - Possible index overflow during multiline record parsing in zscanner - kdig +tls sometimes consumes 100 % CPU #561 - Single-Type Signing doesn't work with single ZSK key #566 - Zone not flushed after re-signing during zone load #594 - Server crashes when committing empty zone transaction - Incoming IXFR with on-slave signing sometimes leads to memory corruption #595 - Compatibility: - Removed obsolete RRL configuration - Removed obsolete module names 'mod-online-sign' and 'mod-synth-record' - Removed obsolete 'ixfr-from-differences' configuration option - Removed old journal migration - Removed module rosedb - changes from 2.6.9 - Improvements: - Added zone wire size to zone loading log message - Added debug log message for each unsuccessful remote address operation - Bugfixes: - Zone not flushed after re-signing during zone load #594 - Server crashes when committing empty zone transaction - Incoming IXFR with on-slave signing sometimes leads to memory corruption #595 - packaging changes: - enabled geoip module: new BR: pkgconfig(libmaxminddb) - enabled cookies module - enabled queryacl module- update to 2.6.8 - Features: - New 'import-pkcs11' command in keymgr - Improvements: - Unixtime serial policy mimics Bind – increment if lower #593 - Bugfixes: - Creeping memory consuption upon server reload #584 - Kdig incorrectly detects QNAME if 'notify' is a prefix - Server crashes when zone sign fails #587 - CSK->KZSK rollover retires CSK early #588 - Server crashes when zone expires during outgoing multi-message transfer - Kjournalprint doesn't convert zone name argument to lower-case - Cannot switch to a previously used ksk-shared dnssec policy [#589] - update to 2.6.7 - Features: - Added 'dateserial' (YYYYMMDDnn) serial policy configuration (Thanks to Wolfgang Jung) - Improvements: - Trailing data indication from the packet parser (libknot) - Better configuration check for a problematical option combination - Bugfixes: - Incomplete configuration option item name check - Possible buffer overflow in 'knot_dname_to_str' (libknot) - Module dnsproxy doesn't preserve letter case of QNAME - Module dnsproxy duplicates OPT and TSIG in the non-fallback mode- Update to 2.6.6 - Features: - New EDNS option counters in the statistics module - New '+orphan' filter for the 'zone-purge' operation - Improvements: - Reduced memory consuption of disabled statistics metrics - Some spelling fixes (Thanks to Daniel Kahn Gillmor) - Server no longer fails to start if MODULE_DIR doesn't exist - Configuration include doesn't fail if empty wildcard match - Added a configuration check for a problematical option combination - Bugfixes: - NSEC3 chain not re-created when SOA minimum TTL changed - Failed to start server if no template is configured - Possibly incorrect SOA serial upon changed zone reload with DNSSEC signing - Inaccurate outgoing zone transfer size in the log message - Invalid dname compression if empty question section - Missing EDNS in EMALF responses- update to 2.6.5 - Features: - New 'zone-notify' command in knotc - Kdig uses '@server' as a hostname for TLS authenticaion if '+tls-ca' is set - Improvements: - Better heap memory trimming for zone operations - Added proper polling for TLS operations in kdig - Configuration export uses stdout as a default output - Simplified detection of atomic operations - Added '--disable-modules' configure option - Small documentation updates - Bugfixes: - Zone retransfer doesn't work well if more masters configured - Kdig can leak or double free memory in corner cases - Inconsistent error outputs from dynamic configuration operations- update to 2.6.4 see /usr/share/doc/packages/knot2/NEWS- fix tmpfiles scriptlet- package /var/lib/knot - run tmpfiles scriptlet during install- update to 2.5.3 see /usr/share/doc/packages/knot2/NEWS - use libidn2 on TW and 42.3 - following modules stay static: - dnsproxy - onlinesign - moved modules to shared building: - dnstap - noudp - rosedb - rrl - stats - synthrecord - whoami- update to 2.4.1 see /usr/share/doc/packages/knot2/NEWS- update to 2.2.1 - Bugfixes: - Fix separate logging of server and zone events - Fix concurrent zone file flushing with many zones - Fix possible server crash with empty hostname on OpenWRT - Fix control timeout parsing in knotc - Fix "Environment maxreaders limit reached" error in knotc - Don't apply journal changes on modified zone file - Remove broken LTO option from configure script - Enable multiple zone names completion in interactive knotc - Set the TC flag in a response if a glue doesn't fit the response - Disallow server reload when there is an active configuration transaction - Improvements: - Distinguish unavailable zones from zones with zero serial in log messages - Log warning and error messages to standard error output in all utilities - Document tested PKCS #11 devices - Extended Python configuration interface- update to 2.2.0 - Bugfixes: - Fix build dependencies on FreeBSD - Fix query/response message type setting in dnstap module - Fix remote address retrieval from dnstap capture in kdig - Fix global modules execution for queries hitting existing zones - Fix execution of semantic checks after an IXFR transfer - Fix PKCS#11 support detection at build time - Fix kdig failure when the first AXFR message contains just the SOA record - Exclude non-authoritative types from NSEC/NSEC3 bitmap at a delegation - Mark PKCS#11 generated keys as sensitive (required by Luna SA) - Fix error when removing the only zone from the server - Don't abort knotc transaction when some check fails - Features: - URI and CAA resource record types support - RRL client address based white list - knotc interactive mode - Improvements: - Consistent IXFR error messages - Various fixes for better compatibility with PKCS#11 devices - Various keymgr user interface improvements - Better zone event scheduler performance with many zones - New server control interface - kdig uses local resolver if resolv.conf is empty - new BR libedit-devel for the interactive mode- update to 2.1.1 - Bugfixes: - DNSSEC: Allow import of duplicate private key into the KASP - DNSSEC: Avoid duplicate NSEC for Wildcard No Data answer - Fix server crash when an incomming transfer is in progress and reload is issued - Fix socket polling when configured with many interfaces and threads - Fix compilation against Nettle 3.2 - Improvements: - Select correct source address for UDP messages recieved on ANY address - Extend documentation of knotc commands - drop knot-2.1.0_pkcs11_check.patch- enable libcap-ng- fix configure check for pkcs11 support: adds knot-2.1.0_pkcs11_check.patch- fix soversions- update to 2.1.0 - Features: - Per-thread UDP socket binding using SO_REUSEPORT on Linux - Support for dynamic configuration database - DNSSEC: Support for cryptographic tokens via PKCS #11 interface - DNSSEC: Experimental support for online signing - Improvements: - Support for zone file name patterns - Configurable location of zone timer database - Non-blocking network operations and better timeout handling - Caching of Critical configuration values for better performance - Logging of ACL failures - RRL: Add rate-limit-slip zero support to drop all responses - RRL: Document behavior for different rate-limit-slip options - kdig: Warning instead of error on TSIG validation failure - Cleanup of support libraries interfaces (libknot, libzscanner, libdnssec) - Remove possibly insecure server control over a network socket - Remove implementation limit for the number of network interfaces - Bugfixes: - synth-record module: Fix application of default configuration options - TSIG: Allow compressed TSIG name when forwarding DDNS updates - Schedule zone bootstrap after slave zone fails to load from disk - avoid activating the intree copy of lmdb- update to 2.0.2 - Out-of-bound read in packet parser for malformed NAPTR records (LibFuzzer)- split out shared libraries, knot-resolver uses some of them and atm we are forced to install the whole knot2 package.- lmdb seems no longer optional- create a new branch for knot 2.x starting with 2.0.1 - Bugfixes: - Do not reload expired zones on 'knotc reload' and server startup - Fix rare race-condition in event scheduling causing delayed event execution - Fix skipping of non-authoritative nodes in NSEC proofs - Fix TC flag setting in RRL slipped answers - Disable domain name compression for root label - Log via journald only when running under systemd - Fix CNAME following when quering for NSEC RR type - Fix refreshing of DNSSEC signatures for zone keys - Fix binding an unavailable IPv6 address on Linux (IP_FREEBIND) - Fix infinite loop in knotc zonestatus and memstats - Fix memory leak in configuration on server shutdown - Fix broken dnsproxy module - Fix DNSSEC KASP timestamps parsing in strict POSIX environment - fix multi value parsing on big-endian - Adapt to Nettle 3 API break causing base64 decoding failures on big-endian - Features: - Add 'keymgr zone key ds' to show key's DS record - Add 'keymgr tsig generate' to generate TSIG keys - Add query module scoping to process either all queries or zone queries only - Add support for file name globbing in config file includes - Add 'request-edns-option' config option to add custom EDNS0 option into server initiated queries - Improvements: - Send minimal responses (remove NS from Authority section for NOERROR) - Update persistent timers only on shutdown for better performance - Allow change of RR TTL over DDNS - Documentation fixes, updates, and improvements in formatting - Install yparser and zscanner header files - Improve lookup of libsystemd build dependencies - Fix compilation warnings in endian conversion functions on OpenBSD - changes in knot 2.0.0 - Bugfixes: - Fix lost NOTIFY message if received during zone transfer - Disable fast zone parser when compiled in Clang (workaround for Clang bug) - kdig: Record correct dnstap SocketProtocol when retrying over TCP - kdig: Hide TSIG section with +noall - Do not set AA flag for AXFR/IXFR queries - Features: - DNSSEC: separate library, switch to GnuTLS, new utilities - DNSSEC: basic KASP support (generate initial keys, ZSK rollover) - Configuration: New text format in YAML, binary store in LMDB - Zone parser: Split long TXT/SPF strings into multiple strings - kdig: Add generic dump style option (+generic) - Try all master servers in multi-master environment - Improved remotes and ACLs (multiple addresses, multiple keys) - Basic support for zone file patterns (%s to substitute zone name) - Disable zone file synchronization by setting 'zonefile_sync' to '-1' - knsupdate: Add input prompt in interactive mode and 'quit' command - knsupdate: Allow TSIG algorithm specification in interactive prompt - Improvements: - Zone dump: Do not write class for SOA record (unified with other RR types) - Zone dump: Do not write master server address into the zone file - Documentation: Manual pages are included in HTML and PDF - drop patches which are included upstream: 0001-loosen-openssl-dependency.patch 0002-make-configure.ac-compatible-with-old-tools.patch - also drop all buildrequires just needed for autoreconf - new buildrequires: pkgconfig(gnutls) >= 3 pkgconfig(nettle) pkgconfig(jansson) - create devel subpackage - enable rosedb and bash completion- local state dir should be just /var- enable dnstap support for factory and newer: - new BR: protobuf-c and libfstrm-devel - prepared lto support but not enabled yet, still need to find out which distros support it- update to 1.6.3 - Performance drop for NSEC-signed zones - Proper handling of TCP short-writes - Out-of-bound read in zone parser for long domain names in origin (AFL fuzzer) - Out-of-bound read in packet parser for TSIG RR without RDATA (AFL fuzzer) - Out-of-bound read in packet parser for malformed NAPTR RR (AFL fuzzer) - CDS and CDNSKEY support in zone parser - Add defaults for TCP config options into documentation - Detailed error message if zone reload fails - refreshed patches to apply cleanly again: 0002-make-configure.ac-compatible-with-old-tools.patch- update to 1.6.2 - Limiting number of parallel TCP clients (max-tcp-clients config option) - Ignore refresh and transfer events on non-slave zones - Compilation with Dnstap support on FreeBSD - Possible file descriptor leak when terminating inactive TCP clients - refreshed patches to apply cleanly again: 0002-make-configure.ac-compatible-with-old-tools.patch - moved autoreconf -fi to %build so it wont be tried in quilt setup or similar tools - move up the %if case for systemd in for the preun scriptlet to avoid warning about empty scripts on non systemd distributions. - used xz tarball: new buildrequires xz- Add deps on the docu packages to regen documentation - Enable systemd integration fully - Add dep on libidn - Cleanup with spec-cleaner- Only require lmdb-devel on (Open)SUSE 13.2 and higher- Updated to 1.6.1 Bugfixes: - Journal file would sometimes outgrow its set limit - Fixed incompatibility with OpenSSL 0.9.8 - Proper handling when machine hostname cannot be retreived Features: - Support for DNSSEC Single Type Signing Scheme - Compile with lmdb-devel to add support for persistent timers- Updated to 1.6.0 Bugfixes: - Fix zone expiration when AXFR/IXFR is being refused by master - Fix forced zone refresh on slave (knotc refresh -f) - Persistent timers database opening after privileges has been dropped - DNSSEC: RFC compliant processing of letter case in RDATA domain names - EDNS: Return minimal error response for queries with unsupported version - EDNS: Fix interpretation of Extended RCODE Improvements: - Maximal size of persistent timers database increased from 10 MB to 100 MB - Added logging of persistent timers database errors Features: - Persistent timers for slave zones (expire, refresh, and flush)obs-power8-03 1633078424  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTU3.1.2-bp153.2.3.23.1.2-bp153.2.3.23.1.23.1.23.1.23.1.2   knotknotmodule.hlibdnssecbinary.hcrypto.hdigest.hdnssec.herror.hkey.hkeyid.hkeystore.hkeytag.hnsec.hpem.hrandom.hsign.htsig.hversion.hlibknotattribute.hcodes.hconsts.hcontrolcontrol.hcookies.hdbdb.hdb_lmdb.hdb_trie.hdescriptor.hdname.hdynarray.hendian.herrcode.herror.hlibknot.hlookup.hmm_ctx.hpacketcompr.hpkt.hrrset-wire.hwire.hprobedata.hprobe.hrdata.hrdataset.hrrset-dump.hrrset.hrrtypednskey.hds.hnaptr.hnsec.hnsec3.hnsec3param.hopt.hrdname.hrrsig.hsoa.htsig.hzonemd.htsig-op.htsig.hversion.hwire.hxdp.hyparseryparser.hypformat.hypschema.hyptrafo.hlibzscannererror.hscanner.hversion.hlibdnssec.solibknot.solibzscanner.soknotd.pclibdnssec.pclibknot.pclibzscanner.pc/usr/include//usr/include/knot//usr/include/knot/knot//usr/include/knot/libdnssec//usr/include/knot/libknot//usr/include/knot/libknot/control//usr/include/knot/libknot/db//usr/include/knot/libknot/packet//usr/include/knot/libknot/probe//usr/include/knot/libknot/rrtype//usr/include/knot/libknot/yparser//usr/include/knot/libzscanner//usr/lib64//usr/lib64/pkgconfig/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protectionobs://build.opensuse.org/openSUSE:Maintenance:17006/openSUSE_Backports_SLE-15-SP3_Update/a08d5cf2d25af1f2ab7fa81a995d2fc0-knot.openSUSE_Backports_SLE-15-SP3_Updatecpioxz5ppc64le-suse-linuxdirectoryC source, ASCII textAlgol 68 source, ASCII textpkgconfig filePRPRRPRRPRQF0 eN,utf-80dc30354ea5b5c47182cd99ea08b6e30225fbb05541fececded353343c6cf41c? 7zXZ !t/SP] crt:bLL vٻY)HGS8KI T`i ϻᨚjX&?Z#5#aMʈ3=i*3Jix]uФVH>,}IUT]"+1(ou8)xQX`os[?dA:عn,ܷi cvd"g5ī!r /zbg_H# u(,gRĞ0eBڊ o"6OA~Χ k1jׯؼ5VMc \UK8h)<( e,[`V{yLfrLj# ^ U+>20$20֕>,`o] ҿ<@G9MsR[wt)#X{w-刖@dO߆rF <[Jx$R+-KHWR]T*g:-zjo̻  $rbi)+LU{X;j0(c`f,5V雬 :w(O5KyRtЬ5 ,mWB+65&`si 䐺d= ({U68UdІuU,T0/^H229"v#g s7[Π4&^"/Gˌfi'mRHAx,1ef5lԔՂgk;'׃ș3aIn$`̚Sk7g2Nj"F%?(Y]\umc;pšHop#MJoGMfǩ 3 ɁHOR4ǿ -|3 wv/ѷېgz;D9¬y˱|yftmZ^xgyaR#dA'!pψ$0NKlRKSŁ1@LsOV隖]OJn+V192%>Iy*jncxT45B~6n'- ;ii4{ \gH1[iIL"Hr0xCзPeM k!Zÿv5\O\MZxjԻe)GO'='Hj'!ۙWҟ& we 30!E]I{ hӠ+Hg ?l)7Q?Iݺ,oɪ:_NYe|Gm?z\V 筯!}W纫-51"o]e'fB;GVtƜ4'W{O"'˖d^n.a#xTSßHk&[?S ƾ$U4" 4<W5\7.ߩCn^QD}Њ[N??"b+vt<;YЬR!@C>l3xӛ?9??+ AI9&A,oU՛$qx6,Nh]A R$%kv@O3UNvrڳknᔯ_Z :5 j z#.4 VhBſ@jqHSoi7?۬YL 1Z2&#lyz=v5#AߙJ&k#EQоLU\dx4oL86! 6ˑAr=wQ/ E4p{b-}o4\NaQC_:DbUߵ7r_a6)7vR,1)93%r0N`|Yj6TUxhG_(7$[wIܝ-ĦfJ"c^֠ "QNmܩw%Pۉ+y/*F8*)vjO`ʤscrqe_;YPx&g -jػr^w!Zvr-Q-]_sOICKִ;ȓ\^aL=*!˧*\iȻOE5_~wFG, $MC~bدHou+EKƓ2[aY('@5k, _h8P[VK>˧)& _ "YVT&b%vj) :>K73MO`B:}&?~CC&0Ax?4z N; qHCA;Sb3"J%ԇky?W,ծ/Lgt(U/@rwoAh5eQL/]"7h`:Z>7J<e9U嗜5֖'7ONmz\=+d]/%ZaD"| )wd(穪- ݞH /mY.S b9g7O4϶ J"BU/ bs(ɭB"3HF'(>7S> Z%`εVJ9TK˻uٰ_NFU.np-L5Q I28|wg ɢwohJ&.mn] ϭ)u {a0 2z_"Wvsf^f3Z8 n圲'm/57 @t8HI7|{lB ౰)qkn!W$gE1Q-M" SP'Ը>ٓ/x9 Dط~?^<\ B ew4ף,S4Jj3Gnw~gk#7LT^iNG'9a rȦaD>(_DC QK@1:}(lMS~ QaT&AQl{sxTn:CFuLX RrShxwp`uҝ wRGa+RBef& эa~[f̧9jx2z̨ce]@F x%MG35,,o) HJo?ZLJ,ǧbq ) axdE hy :\ Q=y ֔J-01mj {LC 58''~m@0t$)Zүqc2rdŅ9oI lCX3*d*IHɶ릑2Ld>xw5 s (3w_ A#p;1MXBrX4'Y~{lUVv@OI,7Y:COMDK0-YhԢBΔu;"#eTC@rAeL <:tL}E#;^`EΕXG!/ˬK8USힿQ^`uA}tlKe'h =ڸ./QZ!#&ԟXQYA߀uUD%,vOl1o2 U&{:ZVӑy,ϭ\@By&.<%_H[ NaͦxP lOd)on먽ɪ!<,r:u!J4Ȃ *ؔVqqEY]wْ-zl 7~U7R9N~]^2YuU_pCflkb8wPRKqSȷ/;>ڬ85Pir^)Qzo6T[ Jg@>i$?qɏik|0Q3P~Y~9)7*Zj쬧>fK1|Z,VU2xnQjWH KTVB udz@=T4UYÍP%yZFܗZvJ[60v+5jVs!폚l缮kiMS&|.{BxhEB?ImhZOkmf/Z9|GZƫzWWg̀ ýUE^ = ;j6b )#ϕ\s*ӌD-C9{ ~2d\(iI|r3xQ D1ފ &ʼnn!iopF3\ci7.ضV;L\{pd'#iTَ^?Gqդ]uWcSgOhrhfBW/+mẢ @`θK 򯸲aԼwqhmR6&;?"hY Ek{ۋOqYcU&0.y{Fn].(^Kadf΅Dǩ:2rl4T?\ 뎤>(S]t6 >ME.bh`Le G.2_ݩ@=N0AJ:C]m ?M-)IYy9V (4&PLR|sS*25Farw-ʔt^V=~[pzGVAUۃ#R}dknXt Q8I*hFXA۫%S6 $WE/D= DC="VP#"6Tdk4qY2#0)o Ecǹ⨿ŝ{bٿ `P kLJ} -j'b/Лȟ`DCB'.)s sH6PSy`6C;MCK[T:!k3c q(ҹhgZhSMOO|Tp^W΄>;݊uB9[ 4{nxbA?`MjTF?N{vOPL_Xڎ ~=bo`RDcz,[O F'w`/ WqL?, ~e i\&mcTQWN B.Dj$ vcI~b!۱s.*ӀZ,̽(UШڬ}.O2psBK~-xX5 lCs7Ğ[S\^$#O6 sm,T qDopUP&9n>P,^Bwqx%RJVt.ؽNߓ-o5j[`7BA:DH#FYP!~;Šޝ1Pp ,݅ˑeQ t*/^|z 3 λX# ZNHNShj'u\aV f l@m$7yc['H^JՍq'mJyA tGbF4]--ᑯmb-j=]@3rdc(( L/j*3s%Xӄװ$l@H!MWO[W.EPGMIӾ9_X9ohrsz-UpjRYkg9XN!S+2=KsFFV`՜x;[[ԪJS'=" |'aWJΝk)M 0hP3JҌԣX &jb^Л׬}<.<9 9VI!x3zw8 'N]*83`WzD=`٨*O#?%@we fڣ{x.Ձ_Vf+wsp d8I\xSC'Pө"A~k'hJ5۸$7zI4Ғ$ $LEzf:T"rzFpUbs_rsHStq}\yU Tj]1iA$HjTfa+\qpFK e-dn}ۢ㛊|4g€h|MCܯZ[3:'Ñ ˦7OhiMZLnߔ;W&T~x&MIkơ ;$)?7 j,ͷϝVW1:[, Il{ѦaYhU矼yqtg77bt9'O RzXHV2p ]F[bXBsR(08Vة C,'E^'[(t 偝z6$& z7iE7'jD@Jxm'ϱ;t7UUQlh ʂya_fϋq.*zLqIBKXv^)ȳxXMRFWb=d9W̐ faTGuPN X,vW [`+ݘ .;2sݭ!Z (W0Rt#[z`uKx5SPq .ɯ< ֘5/Ӑ|7 IwzzDou(n bc}гA-<#z"39!T#\R[k;'W.fp $4+)G=vJ s[$7$>qpM`G 6ӛ@D 1nVWi@d7LD?I gDt9ߖAbx"# Q,zZ62d)0O.1T}e-fퟫJ|("z:8/@ηzk h#[ oI];Ԉ>oR"$xgL!H1|dhoH[R&"_CVf^Nvs-^GYhwwi"^# xgDqTnO<-bE, U_~N~ΎcZ 2Pၿ@8 +4LB誧G>5׮ p\_:ƪ: TnHV);D"2[{H&,1T}5-'N=(f0 1@gRYF"wNFZ +ƾ]=ሑx>_%irPtR|YhݙvQ>b8ex `]"Pa%\3DA\D\>B$Gioc™98ZޥǢELo?Rpa% i9D`vx- ʚФ~=^LJ8.zBKe@.ai׾Z.j751A3`ƾG_)!NzIM\םƶIe<66 Z ԝNjGi#:]7=\6u)(Ĵy#pc"=n Hؒ:9D-B /mSKE)^Jz A7ZbZ`n"ђlI!fX8msiCR)A6:oՆ&&_^D*% q}҆\ őD ȞVXr :iACZ-8Tl7ӀóawL.\19:sgppo{{sNSq%wTrŻرj|af0)(Rk!FZ.pcLL8xd@$,-oQ*,fAu5$U*ajRTeOΰV#*CfBXȟ;-{09d$fLjjֲ0XbjվzؒqT\QFԱF8%t ={FbǸHΘ=ct& pp݀DO5\ Z*nxd>EO$rË+OKDYnkU0XN;rRik,RШ MsW_;]/(t6Q%e‘迻O]~-T-e1yN!c c/v4lS—O%oݟ0\0 [BgXB.XWd,42zU@'d~)6oOKPsJHmOLyt2s# ԻO!J%FwO.x]nR4RV/I$J5fJ\gZ܏p"B>nAL3͊VO:qyA|xth]ܫ)W8"+_FX__c?")ft`:vf*{OPn?ԧј ;E.L}X"!ckk "U^zPƶYf5 qTC{Gb$ȔUX οM[~YGQn^f:!|{{0ʆ\u?Kz0ܽ ,.͘rdH,cAR2#64’ʶ+(w 99"7ՠ|]`cMS/X}^񃧇vx)di-$=H{9]pK G;+IW2s PyWw yxiu?)ZeT/Ll:P;7bqb1C' 7}"5 A G u. .^Ʌ%Ʌdˏl :hSRd_hG{2̌g-p,8-mnxxk:4OCqkv`3٨@-bB#PƁBv8d~л]Sm}[=.8H|)9f޵:{ی= |9\gpѪ2:@Te^ }Nw6MʸfHϴ1f}A "PSzRo2 +_ߜ ]EE|+p97al~ Oԁ% 気4hق/㼳:{ֆ8,?{so=2`PR]H BaH rd Tw}Q(XFOf#z,oDügqtK^Mah'ɷdfѿb#| &p}G?:hEXsϤIJ&Y--y_~~߂p]En_E}1qx+۩&8Eybh$QqaHh7%1_mڥ2*lTY2fA<1;8Z~ Z09lyթbS=UiST]:J#2f9w6vI&;`浴 a@Z]O7 Bo 29 OJb "dr+ x,4~,AʮJ{N҂N8D 50h\ѼaJ0Oq˥9>K;'>D0"⇿#2dlGFթV ʧ)ǖXZ@<PFcsJ9^%?774ݒ!syD`! N $""1-bmBS-JM:4؊$A'w+w9kanM3esG_hdrI AH&',mk(Z(oC"z?;Ot"߬;kdhFhl~:[Wc;Ϻ'/(>:]9؏V,+!">M[ ;N3zLs;iyD^Y$[4ę+R "XM j <ȼ N[>.5~;Ւj޷ hIVS  mjw,qʑX=ki/G[\;9pŎc}b3=CO k<ԓYAN֐Ũ h{e3bb\vAdUΦ)' C QHP鄧MĪ@sqds[?\y@;\~+_{B\kgmzYԊL+7=C.P-`a2ˆΦ 8?_sGPBHysQ/Q㻍&(x6;]B!_$NUKZp|~깏Aos ETo26G^8? Kܖ:m3zǀcՈ#OHӨW̏hm/rnO⣾jT 07F'̳\*>ظg0>sHj?ƻ-Ň/өDc.{ /PVhɜbPoZwEJKWVM쒭8oק~ ,uFQeSo)&[UmJ#v wmkK)%"~3>V2s=)ⷋ|0k{֗Ɵ5>+ !9h<$5|{á g ?=;N\B ĴkjMD-p,Y]0=j}= [#mTWK7C*?$jf#(ZOHu.7=t@qZ:Qfimչ]r֐, 3\hpUpF[=uiw%Bq Eϼ=u=e,~"mV 0Hi/k.!(e`dy]z[7>zY@>2ZF[4g%}jZIܟ(!c1^7%1&ìeI B?A/./7Ht '؀(l| ׸/{* qd7"32x%7@]Rhj3߷Ȥ)K?c}<51X2-(nUEzQ}|# O*vWGӻ rҧ҂ ["v1sol5ˆgjӮwy {"!ZbSx+6S҉5f klzG0{XFܟn\Xaxx$^ZȔHB0> [Z|G{ 37;=3lYO7W(ѝǂ̏^θf.QsdBnw a!ت)]_p=:/`Thc;I]RTFX9b.|=0!igJWִG%L!/+=5vɧEMtbos=~E%1RfFB 2.5̖KblW_lՙl-犠:Vՠ s0eS4o,* p.RIAcY+NO+~8pD*[A$f;D^S%{6_PqY n}lrS#<屌~Y+MJ1 b#6!ZϠuKscA?Gfٳ}4 Χ`cohD:Mv;n.$yH B%W#Zy6M ^'=B8`6#93(yuS (({߰9У*j?تs;Ti C>ӅrcNOV܅ʼnK#ـ_Uc>p|Wߩ8KY3Ej])+OU,lHb4+XUjѸJ-wV=I޷!-zgȜaƴ)vgNb"xJQr%ũ? [yd aN\g!|YaWNȗE4#m';v"۳ G}bFdr՗Ȯ)0ylԮzS/ hL]8,h.ZcYٟ9\215!{\1f@DŽ_mu:8uecN*o}/unvC\GG8o4XM/mڮb,Le659HݤAix:8(ۖ'u%7(-6 xb{;iH'{zLbkiRis(y9X_lcB4g'qջNZˠ0'!j RėE,J}܅KDh2oVU9,XNQYk dp/9bQ p-{(tgiVOK{OشB% Wia`͕3%P$rN<ÄZ6؏D =u?"+41`#u ?w (juB6tԧM  2jEKTt@knv7;$/q8L[h H-?a&R{I~;XtoYٟ4dW|GڨFh4nц?7Ȅԉ P$:Wa]v2D:4Ljt^E@ ÝKI )c⯖YPR~Nmkz Zۥ~͂9F.BYs?K`Ұ;<33ĹϜK6gثӴq)fdQ{hxYiVqѰZ|N7V@s!6Ha@Tw1ꌽ[Ƚ£@i614U F<)UhIfw"LfdbY|( K6*u_hlyL]`H&>`[#hK;y)z"4ö8PJ-u\6LYglȷ+  0;~TOf}*>LsUާkIrAQ1VQ*-ػy8҇RԊ5[*AxvMVӍ"W&yig -.灱aKI4OfL]ͮ5FGC.X򁳺b,L' 0e  ,l2/_+P!uS,TԴ6w+fgS@Foui n2 m|gY"peeOGc 28sO]8n9% r*_qW{@\ !>@[B1vOA%uDƹleSGg Ғ<VV_6xu_!h!%TUM֎ SUd-[@Pn;:.#۳Z\=q>u?V+`0`=rʤn)OH*? jm;J y_mDf<6]e/Yft/+" 9N@n}3W>`<9t ʵܣJ+*4#W.o<'d¯@d[ y.3GJ|r!fc<9BK[O~*H' i:s0^tzUoCu)_jL@ K?썘ns4ز+vn0XWwqݸ.'\`0=:bO S);_M?ƃv! VNRy񟭦JK-ֶ{$\gTG kɧYߗ$MYb, (8>DA>*eu"nS ZXE"jDa践>_lƌFW57&V8Be/ M-021 iMx&BjnnxId/irp 7M4YȗUEhSZsRc+R_|fC1C1[ҽ`+(X$9<ک匔"F%Xʗi u`cBqO Tgi;e;uO.ek7 DАsr4'⸨]`V{J1`l}5x"Y1Q͎~!dDdRoo\mNj@OIN PALD ʦh5K[g#Fmakh<{5Fgfݛ #mxP$Vz^\͗Cp|Ty$^n 'm#b?Wث'O&q0%($ʭziYC+V~dyF.|{JҽDҳffQp]'n'f''_UffN`ڻ@\"ehHȽ-_dk8D}#v3L^z gEhF> /ϟ֋G'[q9,+"{lU!F}F- n:\;Ͽπ uqs莋2~zd_kp?a؟\kKyn:qeoCyAQPOpZT 7& LR|җtQ]E1o]z Y/>oG+NTne-nnWr jsF|l-~iW۲qY?E5tKӆkN8j1)o4('f%K\jYG.z6)7.*FP,%A 'FC{ՇAqC揄\!y̳9Egl&6cnP2 [a&ZSO ݡ{ axaGՔFcCM qG/Sk~݈Zk %2vӣe߭T:4P+"\&Lgw攲,x |!L^5m58 G8az,+ 2Tg fhSvֈ.<`e] Θ DA=N〾$b~*7nwMj8&Qlc.0) rҏbČ5TV@>8C`o"^$EGr~6ƮoK NJ*7RAX:=G`)-UZ w] o(k&h߄o:_76>n~7(%$ߖnKU5d`Gtcnh2ǩyV K_s!F03o?IN;Hnv: 0w'É4)̯ gGm`4 C>$3 (-eq"Öd̃;|G9tq`@ &xnFċ*L%} ly:v]?GhN<7H d)%&8bM:ZD=h3=­/~]s-?DT !X +%\ӡO>?t@G]{rhZ#mPM$V5W-Ү39[ς'~iglG8uh-qEPK\:pۦs,|b)c:Wm)#v /Ug}t,A ͺ翍fEu[!Ɓ5 Gcz%G~r lLjl4nݶ'qpаe!\:za,=s ZC  ]N?sB8R>vft_R~LMbL՛*(lBI;KN[R+V!Q U2vT"z^O!nY4|_ȥy/%"]?RYh}aQǣfMw\&+GAYRe( %yF;"]~D5m`%-ek2ST(($g>4T(ׯ\çI:cG?Ǟzݩ"ON^D Yw˷p1GL-#0k9#:}E8ǘڅ[u)z"&G@kvv=ij:τ1X|%"T94]fϰƍh1 9D ;_H IShlZ[? piT' b1>Uu fJ70߉,(8f)Q=)X:ئҟabtVhOɗS,`\3fUQe) V rB8~ k/? ʰr"lzC r*}O;pU+_DŮ8@ݟ$*Yy[^:8ĝ^J8-_Κ)aVbPh3*S3)} ި_tI]A"x1Ų\zv@#m)-J ɱ _]~&QmKơB/70sB!8-Hma~ +d9,؎d&izVS[Pݝ{`Uog,٬Xv6 :[K! 2U N=kkgf(1Kmk} Z*2?# _-iJ)J!J>E:"}ktVQ>aOYˌllUb B%\WUEڕ)X+*eYiqITvxBpDuq{ޒ}i\9*t#b^=v^˜65Y.5IVM3@>,WYK2~;盍LzVH@.[ ; |񰑒R`~W՟5$*G $edG|/YH2%]ԵvK7"m  zrA#>vQqLAs)wc+d2䭚UjExEtG3DAmTp˵ X=YOYҨ 4.rs*ڮn Jc#=!;q;r[*!XmɩWN NV}*<MHJaoYm>XԒ) TT4J:oKv /pfn (Ø֦Zx~U\{ )ϻ-2:{5jjvE; ?c11\+%Лro*<\-|00}Q>cYAvʾ(}Mt-(P՝Ѯ$'H_rкrSXEV(qhM ,^A۵$lPHb}.?iχiB+krj __5@J7N?7p##$# 8B1⸋E!.^mƀˊhBb-oTf8AX?M1U߉ϊ`XRX}(b:J&T*X;r}B.  c䩫!/7[0W9p YX|6xkJ=5$|裗E-'ps ?XTWXb%/dLmx#KOq$sKnYC' ͐%w}Ϝ;'q٨* "uD}@s#ZĐ^,#|ce;'gze.)P h҂zaIr2*'8Ϝ׳D{6KJ@O|TWd)@GRB7g +I֫DXY0 f:YҚGGWh4bq~*^%23?In6FiYX#N MIXA49GJ 8 X *ј\Jʘ g<׵3H !mwM}C(,\az&A5ߦAsaiV9^l%ʇ*չkO^ՏZdwG:Kek4|9GAPvVmׄܯbdܻapt J땰7DFG/v7;<ߙ+7W<䳂DFz]%)ôlR7.V ͳ? DTIi~#ִ͞l1"Asҁ)E J(e-V]6++=iWmJB03zc.6OALRU!x2^u "7z!@qqSNka~hPjugW 0ۃ֗F@Gs?riiyn]D='GG5+ۿ/!8M`Pf '(_j_~Bw"̒%׭uڗW:+i]h~eK;nCW3b7*NPXl5bE,5 B53RMP$yֶ'm.6꟫ OȄNoIo &8'Z堥P_#1|X-.&Eeua$ڵs=T*֒$HGGjT >]J7g}b. ,VhC#ؑ6N2P`U [!u[ 8D5jnKX0/bSQQ! jg9h 桘i>JJI兀IJ4#҈. ɴ \w7,UK,k禀rڨ $#g\:~׹-~tnB8,2ϐ8xF_:i%X9+']Ru+D%=Qƣ*MPWMX^~JdFPk{ɕuh1rVSy i h #ߢ| GAƬ Ji1.!a;Ξb][O)uc%Mxaurnqb.[k3`v5CT5VIAOn~}&{ohj&ޜ@n7= X13C# iL3g7 Vrr_t [߸jhA卦d+3N\]@H&Z.U&=_oȮ ̠gs2{I3 X#MY#9* ێZDT퓝/bp[{s݃wcD PGwg&q@EEs*߁YL D8?!gp ̣\֔;dd=(~6Rv'=̅%],lЄWDq9 t~PZKw?_Z<qe}`L#@{Q RD:!D%0>7xSccx zM9ӝ_#VԪM@(&](seK &!ѴmXf[tߙ6F_zB\tw,zcn8֑]6\ߺy,܍C#Lg3 *+h,&B8c9yt-OR$vg?򲬲 |X//o$r4`vfdakwzyPZ$B>? Wȡ2Fa٭[j9HurWһ0UYK2b~aKBH>Æh$ l*Nz~^Eޔi \(/}=[1R:_\vl}Djwݸtl9{Yx#d-rĉ!Z& ב RLAuVEgʵ8mܧ6s=T[N Yo^z #r2ogzF&w1 GNg7k4j8&V.2;k?8ϥSxT>SC~h R\', EhW(t@Zhʆm#6ҮgF,V;ϽO1b,rdR@pM3e%?99J8ͫBklgWK0NaqDwlheyUHv r}DYR8 fZ-e,@e[g!)Ooy8|/}QGH!W7024E6'@,%~97pì7yY+`' ezEQv#^&Anfzv:F+7ATFb Xj՘.W!AAJ{P-Y2+:(h.#UUi+9a憠2g5k:)Qa*:Z̹\5.|3}KXc+\a2a (.s]?}FMPJM!8KDk)>wM _[6QhV[PJdfHQ|I=W/W>7 "t(\<.2m1) N}8ZizVX.)AȐvx#S%@Eߥ-@‘QwyA/!䁁>foQz۬vlqw:z)QAz"b7"ئ prڿA%vΤ]`ubkӚAs# `43Fv *C@2 [)jp_8Me<{ /ة T!J,$6NVnR]nAؙ1}>ljUKgg ~G7OGLY_)g k|XLٯ`o(23HiҲesTQ=}Vc|- ƽE$zR`6Эmzڵ5TZi r,Pq"&Rl~hCJ=(֮`pg1Tԧ|pP4 3pR78BϛRbp!u6}itgdi9z*ˢհ b[<)ioV BHN0f4&QVtԍ;+{^ X w0S"ӿcԷzaƗ#+v$"x0$ImsSe3$A@rz$XA4wr[-K[u x$ 9+#C&2&zbUNEP1W >8.y"|,0=n:ۉ}H&#Vq31,x$ _`8IssjK&2p$rZ/BtXJIwM;G_R12N#|c#EFg8hYAҚtC -ge~R6|8;\̡"![UלRRa[ ˘p}ƒV=hoh{ <5sf eŠ3&HPN{z H() '}H!&208{dZf/}8%(\xhtk\zh' (OC!X=:;8]KkmN#_]H15&J5):&V Πp kSJ޾NvZnQDJQ4򮩏x87\wP<^D-J@`^ tv:,\PCV'O#(e-JtZd*Ϧ ˳WO2&z--%%tgtiק̥|; Ԙ\_, *4_vWC% iUՇu3B%HD>88x ۞ *Η`Xtj Bm"9}P}KxR'HOH6epK^a2dN&| H9wn<ʯ'ǘwp+! $kA:n{ pD_/>vm\J.s,M&#8u+-58ENz5rl\Y_ߦVt?T'4.[x4deWm %RIjWW;_W'Dzqv/ / &OkVoW}H:őt[\ 5YN#:{ @#<>i>ô(JDO0Ŋ#KZL8^= oҝ^+IS]~aLfiJ^DR1~@ݯfQd:eNwxNs8ZF`+I-dXdS=(BJwNG ~/puG],~jꗙ‚q "jKzbGF1Ĺ#zxDƛcQA;FV1\bô@5j -粋04sIlKɿf_"o'i2?UZ,F+CZp [j%[8r_,p(a9˨Mt→@u ٣+ CbJ[`?g>{K9M†"VXձ Z%QN~ }B*̬$Ah\ثOV6 d2{k=8ŕä#Xcg=Nkc>3$CowN2ә9lSbEANw;auCJ]z&0G<9Po |F>|^u$,=]o5fMywK5%t݈:x[|Tr݀1vr3KDb ^Y?08nl(n1 = f& UΏZU(Id&#ja?iy`E/"'P7#G5U1Ak_eD^OPYl#t( P]k鹣84B KaU!YNU"G0BT5aS/NaD:[}Ӂuvo _?1rv ƫXU?2tQcƉ'h; |5.@s n| ƈ]'@OW` ˫ǝh:II4{/{xAFloBF.v8H:ݹ+;+wJYںQY*LH}r G]_4ɾ]O#ew>oLs!lD7`X(*f[GAI7t{ϲz)+`'Bi JHӿdV~/'+exJa,TA[(@̈́TC`9f>Gjk֣ ܯd DdfgCMbt'ҷ[ovLKY=LdDέcrE"v:Z*4y+WU2{l]$4A_Gh?C^i7F "pJESkmtߴ41۔ =gGgrԙ`kr (f]\1%Q_ДHlUq\'y)GD#J:w ק:{pVכb 롛!h]" uiĉ~ 9DcQpCVCFE"^$( c/,82>_7$aƹMp\65M7m>޶K :Fk.Ej]ՠOe ]Mxa`y;VkDWfD^Zj{PSã;"x]*)ܙY8dmXB[hS[vA㊸r:ܓn-y*Ak7Vw.(NY9&V?Hb?>"U~ jJ4{sUl#4\ئz/GV熙 /j 8Em[F}zwx?svYfd1 PzTnOݑi٦w_eB_JW:rcxK&5{E# s(ҢqE}G+]ȓ10e%ʋ0Oq]E1<`ZV:-K@+!DKc6fFPBՠ'4%b!bnPTp$xP{xभ P`O'ŷJٛ8LUH 36jƥ uUUkjY9/}W<@ QIa&oqq8%A;wE4=y~H:푑,^_@'T3K_v *J[fn+-6߅rUٸ鸴9/DR( ;7cq` |kn bHHAW8$ blAAzU$z &[heK-vļQ}n+aR> 2iܩPmUɪj PKTeF@-nG<+uzљB~sNZ3 4ܲz>W]~\C1{L5+* gY) 4`yV-Ot׷J̿ sN}NR*ٟF7"Z,'6&BKJ 汰izWփ2PB᧽8E$0QΤ1ۇ<Ԇ-+!㥯#cw=FG30Xes ˢR% (Jm`%HxnhS9$w9RTÑFyLkdn.DǂZP/{쐶!n]گBz`t\:S+-!RAXx& FZ<ĺwpgzuhΝelɥ2't5A2uCnVJ&6&:E8LN]#GfO`E1y!9M;:˙>K0u1U,Ao P` Թ\4|~apeE2G|`ĉk)~mU7?ܲEܪU ޽\ks 0TN8zH.ښOHL4옵M :SZE +yc*ɤSapmAV.36l6ɻЉ}^&lr? ʨ: =]~M=Tq }2fI:Yeڻ"+`gWQ:# vZk\0-r4 ِpy{ҘvZ?_< цoF͠r.׏RʅiXoWyhn 8RvOijQфtk9G;HYiv6jbMX#ćr~v_ ~\@w̑,}.nsqlSQJQ³iya2N@Yn.Aj6joa-5o㔸/P\O/ 0N$U@?YΛЦ xPBۿhb3ݎ:U*.ڗKcy'\FPX#Rbv# ۧHeǽI_g a<+EəwN 0!C 21|Y4ewS7b㜇% >QGg="Bvc ;J:9XV}2-09"1, ~h ϊe2&#][HGb'+ _˩ mmwv ~x0qhL ,Ȧ%\\@o֗vL'حa6k Hۜw\LgTgS "a;΃aؚ)Kd$iz;฿ODulČEAZ+r N߮rK\j왜>&R'l'Չpx7! S!"SdQʅy@1Pzock8<|raβ^'"P+l q} 2I{ @7_+"/u+_J @3mr7R4`i|f f_GNJw讹;|;y6>bJ %L<8s>1f'ĒЈ̨V #LAW % >)7BR9t y*0>Z3Wh_·$z:|CU⾾ ۊUQBR5N) *-,W.e*H {54V+hq&&J[,=V<<*N:8 D8qil Nim(F/xvWKt&;ӒOTKsHB@%@a}B ^?9 ^㮪ڰQm-XkF&>7)bx7etUSv6ttU4Tֆ$>f2I񴻟\-E5[^{ Ω}0EVŠ ։SB(/Y_: J8Qہp׿s=ţGG3bQ>\waMœeYfxz\Z uQ+~\؄6*i+fR )@ES)>\)ʵd FNAۉ~I-[ϡOϴJ,Q7-a@d.2xGc;fJe_" H},'~~r{[]mBo̧Pu1lxc,Uic,󀊊ִUd]{Vn#DS2'8( \ežAz'i%?D~TT(AJwI],@j#7*ۻ`yd;%!MXR6T?Y :'L-rz`McrJJMe[4jEٕQ5J1d cR=- wٽu!O !ɊܢK3.{sޜW,oqfWrJp_m򪣎%'|LŒ]z1-t[q~ ܤ[`INn]^7ޙ5r<$`0 c1q^ :Z{ugpNK vi:j{14RMU2$*K8.}.",K[ÊX(b/NKо#lVA/9@3 BM ř&t"qЭ@M(6FJ(c( [GmB|z<cS+jSGW|%~@0<3QpH}sp~Ϡ8Hxax]"ξIsWHEV5:۵a9:FeTY!&+yo80lYiR-e>ftI{-97my_c iŘ^zݕU=IB<-1iY|Ov.@[F'^鰦xw v=ϯ.W2}>a'1汫{ o[fdM׉gdV  F2,MK WZ: ÞMNtڣA b4Z^ jwhf,yM[/Y,Be-t9dkI1[?-xs0Gntʄ3d^r~+֙,+8[8|6"5[q+FϨjhhȖnR3b iYtgnS,[-{!q.}AI+>J*-޲@oV`KDJ &aXxY\$'4iLM:$X̚ bͧ#eU4!⇡~(8N4UwSI@jgI)CZÌUU6"&4~3DK5\Zҕ澷@9^÷`Uwc<5 XEKÎt0 NsHZ+@W#bd)R|i8"<[izD?L8V** C҃Sg߅AMRM % %wOG+ OCRyp̓113_Ba/.yTv.g4T3KC@IBk#2ؔ:8Q+kf5h>5ni۹P i©/}[1]>g7Yȏe&Hȕ-z*xLPOD }6v"٠1V^{#wyDeosې 3wf6B>ڶSyQ@4+m hFzfa]|Gz;qa{[9X:n O1"RwdP|5h :eM޲wNG 5;gg%$&6éFr ʬ-M5'CLwՇ []Dnil#¨/P+p85΀hǓL2}!ޡzJX !b Z7 z򤵭p%8lVO44G6:hXAꉼZl& yG;F\,T|nFoe q8!rJ5qYO[P7%Q8CEntk#?~ 9g/D-Pe1C#CA|8x$.㳢mZ2Ck|QQ,}KeN(ě\iJIu29rZ bZ {qE ߴݯ2 G~P$ ,MBKD;F?gԶ~ [`kIJGUi^+̊[MT mCR `hW3*?[uVi{IJ mA}i ]ΰBx>!':$$DZ X] GDf@Շhc!fSW톦qz7wdy$ ", '/PMe9Hjd$,)(տєc%ОgddcCktUNW 2Ŷ~χlPb}n#}Ϡu {Ф8Ifz7jt=RnK/±j2l(SޒM}!%iM"!|#d͔`>%]};do6lVKZd7auW1ֿ IdOApni8'Ǡx 7@}Zl[fCk%ą*w vHۆl8`LwO7_ dgKخ!-Q,ٍ?tDedF0~%Ό37 E#Rb)}*P͉Nn άlW $iLZޮe*y) %m<<;rN8=۟9aYmܔn6hC{zM-fzb$".1 Z]8A8`Bmh!Ʉxn H._vYgSP| Qi﫜}WZN֜2pPzeH7^D\=/Fi`X^Eߐ,1F3z Oh#U.:(b;@/ Rj{ ^bSn㤅B.}="^Z5BoKq"bB$69^܋'TfZ"Wjh1N5vө~(_(%D oV+f\PW=HO|˘TYc_G+qnrgdF[S0>=F4( P\= "HU38sYz8 Mc<4.`7C;ۉ;&kFӦKx1æ'i4a{*E3I%Vx#7A ǫ7IM~2t;)ϛvݝ[2a{s\p~iz& 4Sz( :./7ʙ23, ,4z|hYk, :!n_FHwҁvbň@w u5ad=<cEv*~1++%L;!:_̃J6#+Uv"\ QA`t>/ñq%`^J\ݪOńY!&a8$z)-tՇ3KEsq)!20PFMCKN\hm0{ͅ Px8 ⒥ ߝVnc ;brnr<& CӠ@fcӇ*,Vs,jG <- %ޜ)}}.LO5_ׇrvAYczc 6m`'O:P  b 1p}Xf5 nPz9(QUc텔D8u}I%Ӡ_{D* G).\L,FF<475E"Qp_=9 k̒/pՍ<SRHos.qA9<.{HE)2YwvL5uOD(I OWEy]X~ O+\mSĹ9E˦dGүbD'(fB虿;@=#l/;4Fhj ī40ϧ6EGku7>fy$[K_ECO<"plœ|鈌y0S>^tS#(*R ou,]Gg9mbEnR<vcWvd@[/-bp]ͭsmU?QTG{M`,x ľ:!EaL{J9V PQ*U?~"!`&׃ 9M]ؾtis9{:e^L9},%}~fyܚ 5$VmN3a.dp?Ǒ͂̓lp^,P{Nܜ9ī|6SpA=Qa^Þ܂"#h%]M;EF>b51 -/ |uBR+"F C["4BÌ=I9/~ 5Z |+>tzEowE>鿃!U*OC-$W} fQ2+92z@&зUghxx}<*F\@]Kt:ّO=J&aZP?c8V|3^7+t *|)$'kv<\-.\2aH+ d-#8\}5xQSn wҽ#Dg&rYiE٤I~Ǽ>57rK8H@?|!d3n&2g3,h.*/.78b<!%w%_텱,v'gg{9>#ehrEP)9oUgdĪ\_VnL=>V7~jW`cxkEC`=~4>ҡ/X p7.*|7r7D< V|Wk0Ju({@C:n`dӕAel=]+e-w7f/삔/r(hiܺDu5E7ֺ; Q (N;*m+DO *Vo ̎ ӕ\XnF"s0zbzFRPd˜btطYُ$g)c+*r+AsRO`: o#\6ooS5dʾu(`6ELgYs,QM퇇$38u'-H%ib N=OaƏ3YIxrnngm^Ndy r<V?ZA[Hf Z K9|,vz`,:+yg-)麗ڵ4J]oK*JO)lv ym &fx$hQ!PѽIuSߑh/x⫪VsȘYuD(J9 m/9[+=mɷ0lߵphz4q Mఙ̈[Ӌ^nVKיٳ2pWl߶̴;8hA~#*Qxk 9KjNI7:cjA$/cr+T9&ʆS:`.6V{"|7[ዎ '$nqMB QOt|S~ WcAVS"v4{}+fk -yY$'PgTzW3k+yOCh'[%jCזlX>6u~j5H ,8Ej!]Up W˻coװXJե ͓U8hQgcWĵk|cF#2@;|ca2md6 E@ 䵾z%-Ru "o+iRZVzJ^sS.rdI/w f2xgOB_ku50Zш%~VNB'l\s'j nL;%9՟xVAw55bK*n^kmVGԆ"oU;(jŅ+5^S%.Bn: _nj3wVM$rs:>vz5/UeId]R,OhWC˗jPnq?^c,'H xNݗGs'c5p;ijByxýK, 5u{R'덁3)HAFFrWf`\&'ІWsŒxJKt˪VkΑatûFDÌ-=Vus\] JE3ұwQX-DO4!+Q-wpbN,~+ 6  J'Ğ%vh)rԃS4bX;nR#C_»v~}Ć:nt91]\ RSקFI ZyL~\>m :_gn /AxCՈ&0@z(ƞ2om3!TThh5V > ʂ?LB MfK|akpq8:8u7\lWž϶\2wE1:P8Eo\=$nR<*֎ :j=yƻLPb^) xoba/-«-Ox"]LjP&:(ogG@;3QHLnM$SpJ{KElu`5 mfEsesB3Pɀ UۧRdz'IK͔Վ'k<x5,ؔ~_68j_{RаV9#F8|0GsFq̤5Lvw+뾤Fm!ᕈAGh d+<'MZ+SOql/:H4PyL]]ٓnw8$*2Rtp:PK+JKw*{knDR,+,~9lSMSb|i'׌ޔrr%nsQV.x:׎@S!/ݤx;gkI:`vԆw) YZ