knot-devel-3.1.4-bp153.2.6.1 4>$  ApaÜ!M@eee qI߁2TG]3F"yL{*4?L!jWpg`#@pT@*ֶgN =~W:iO) 6w\l׊byۚ!6ޞ4ݍ|)~/>3̍₋ƊQ xI Y[PJr ԫe8?A7i#x@kgӞ Z=JQةtd}>f8c9}QNve18269dc4314066a01b342f73d0da929a07eb569876b06776924289030afe9ae8bec69436d669e0460ec4513c45c8323a99ee730ClaÜ!M@eeerambpgt /l02.<<]yQ)SLyp>?d   H<@LPir U8U U U U U UUU*LU0( 8 89 8:'e8F:GPUHUIUXPYh\U]U^bec defluUv wlUxUy z<LPVCknot-devel3.1.4bp153.2.6.1Development files for the knot librariesKnot DNS is a DNS server. It implements only the authoritative domain name service. It uses a multi-threaded and mostly lock-free implementation and can operate non-stop during zone addition or removal. This package contains headers for knot.aߧcloud120QSUSE Linux Enterprise 15openSUSEGPL-3.0-or-laterhttp://bugs.opensuse.orgDevelopment/Libraries/C and C++https://www.knot-dns.cz/linuxx86_64H %~ B QzR N ^ J 0''Kv , tgj U  GK}& r  >"" (,)AA큤A큤A큤A큤A큤A큤A큤A큤A큤A큤aߥaߥaߥaߥaߥaߥaߥaߥaߥaߥaߥaߥaߥaߥaߥaߥaߥaߥaߥaߥaߥaߥaߥaߥaߥaߥaߥaߥaߥaߥaߥaߥaߥaߥaߥaߥaߥaߥaߥaߥaߥaߥaߥaߥaߥaߥaߥaߥaߥaߥaߥaߥaߥaߥaߥaߥaߥaߥaߥaߥaߥaߥaߥaߥaߥaߥaߥaߥaߥaߥaߥaߥaߥaߥaߥaߥaߥaߥaߣaߤaߤaߥaߥaߥaߥ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.so.8.0.0libknot.so.12.0.0libzscanner.so.4.0.0rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootknot-3.1.4-bp153.2.6.1.src.rpmknot-develknot-devel(x86-64)pkgconfig(knotd)pkgconfig(libdnssec)pkgconfig(libknot)pkgconfig(libzscanner)@@ @    /usr/bin/pkg-configknotpkgconfig(gnutls)pkgconfig(libdnssec)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.1.43.33.1.43.0.4-14.6.0-14.0-15.2-14.14.3a@an@aD@a @a @`ݮ@`f@`@`q`_@`\{@`@`_@____^@@^@@^@@^@]\HW@\3?@\*[@[@[ݍ[IZ@Z@ZWQYYYXWDB@W1@VwV@V@V@V@VTQ@VCU6@U6@U@U&iU&iTTq@T@T@Tk4Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky Jan Engelhardt Michal Hrusecky Jan Engelhardt Michal Hrusecky Michal Hrusecky pgajdos@suse.comMichal Hrusecky Marcus Rueckert Marcus Rueckert Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky pgajdos@suse.comMarcus Rueckert Marcus Rueckert Petr Gajdos Marcus Rueckert Marcus Rueckert Marcus Rueckert mrueckert@suse.dekbabioch@suse.commrueckert@suse.dei@marguerite.sumrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.detchvatal@suse.comondrej@sury.orgondrej@sury.orgpgajdos@suse.com- update to version 3.1.4, see: https://www.knot-dns.cz/2021-11-04-version-314.html- update to version 3.1.3, see: https://www.knot-dns.cz/2021-10-18-version-313.html- migrate to user creation via sysuser-tools - run spec-cleaner on spec file - update to version 3.1.2, see: https://www.knot-dns.cz/2021-09-08-version-312.html- update to version 3.1.1, see: https://www.knot-dns.cz/2021-08-10-version-311.html- update to version 3.1.0, see: https://www.knot-dns.cz/2021-08-02-version-310.html- update to version 3.0.7, see: https://www.knot-dns.cz/2021-06-16-version-307.html- make sure we have getent and groupadd/useradd in pre * added dependency on shadow and glibc * might be related to bnc#1186023- update to version 3.0.6, see: https://www.knot-dns.cz/2021-05-12-version-306.html- Make /etc/knot directory owned by knot - fix reload action- Update descriptions, remove unsubstantiated claims.- update to version 3.0.5, see: https://www.knot-dns.cz/2021-03-25-version-305.html - Update description based on homepage- Trim marketing wording from description. - Drop old rpm constructs.- version update to 3.0.4, see: https://www.knot-dns.cz/2021-01-20-version-304.html- add incompatibility warning about 1.6.X version when updateing - rename back to knot- version update to 3.0.3- version update to 2.9.7, see: https://www.knot-dns.cz/2020-08-31-version-296.html https://www.knot-dns.cz/2020-10-09-version-297.html - obsolete only pre-2.0 version- remove rosedb conditional as lmdb is required in general now- replace conflicts with Provides/Obsoletes- fix dependency: python-Sphinx -> python3-Sphinx- use upstream example config file with correct syntax- version update to 2.9.5 - Bugfixes - Old ZSK can be withdrawn too early during a ZSK rollover if maximum zone TTL is computed automatically - Server responds SERVFAIL to ANY queries on empty non-terminal nodes - Improvements - Also module onlinesign returns minimized responses to ANY queries - Linking against libcap-ng can be disabled via a configure option- version update to 2.9.4 see NEWS- version update to 2.9.2 see NEWS- update to 2.7.6 - Improvements - Zone status also shows when the zone load is scheduled - Server workers status also shows background workers utilization - Default control timeout for knotc was increased to 10 seconds - Pkg-config files contain auxiliary variable with library filename - Bugfixes - Configuration commit or server reload can drop some pending zone events - Nonempty zone journal is created even though it's disabled [#635] - Zone is completely re-signed during empty dynamic update processing - Server can crash when storing a big zone difference to the journal - Failed to link on FreeBSD 12 with Clang- update to 2.7.5 - Features: - Keymgr supports NSEC3 salt handling - Improvements: - Zone history in journal is dropped apon AXFR-like zone update - Libdnssec is no longer linked against libm #628 - Libdnssec is explicitly linked against libpthread if PKCS #11 enabled #629 - Better support for libknot packaging in Python - Manually generated KSK is 'ready' by default - Kdig supports '+timeout' as an alias for '+time' - Kdig supports '+nocomments' option - Kdig no longer prints empty lines between retries - Kdig returns failure if operations not successfully resolved [#632] - Fixed repeating of the 'KSK submission, waiting for confirmation' log - Various improvements in documentation, Dockerfile, and tests - Bugfixes: - Knotc fails to unset huge configuration section - Kjournalprint sometimes fails to display zone journal content - Improper timing of ZSK removal during ZSK rollover - Missing UTC time zone indication in the 'iso' keymgr list output - A race condition in the online signing module- update to 2.7.4 Features: - -------- - Added SNI configuration for TLS in kdig (Thanks to Alexander Schultz) Improvements: - ------------ - Added warning log when DNSSEC events not successfully scheduled - New semantic check on timer values in keymgr - DS query no longer asks other addresses if got a negative answer - Reintroduced 'rollover' configuration option for CDS/CDNSKEY publication - Extended logging for zone loading - Various documentation improvements Bugfixes: - -------- - Failed to import module configuration #613 - Improper Cflags value in libknot.pc if built with embedded LMDB #615 - IXFR doesn't fall back to AXFR if malformed reply - DNSSEC events not correctly scheduled for empty zone updates - During algorithm rollover old keys get removed before DS TTL expires #617 - Maximum zone's RRSIG TTL not considered during algorithm rollover #620- seems we no longer need jansson- limit geoip support to opensuse- update to 2.7.3 - Features: - New queryacl module for query access control - Configurable answer rrset rotation #612 - Configurable NSEC bitmap in online signing - Improvements: - Better error logging for KASP DB operations #601 - Some documentation improvements - Bugfixes: - Keymgr "list" output doesn't show key size for ECDSA algorithms #602 - Failed to link statically with embedded LMDB - Configuration commit causes zone reload for all zones - The statistics module overlooks TSIG record in a request - Improper processing of an AXFR-style-IXFR response consisting of one-record messages - Race condition in online signing during key rollover #600 - Server can crash if geoip module is enabled in the geo mode - changes from 2.7.2 - Improvements: - Keymgr list command displays also key size - Kjournalprint displays total occupied size in the debug mode - Server doesn't stop if failed to load a shared module from the module directory - Libraries libcap-ng, pthread, and dl are linked selectively if needed - Bugfixes: - Sometimes incorrect result from dnssec_nsec_bitmap_contains (libdnssec) - Server can crash when loading zone file difference and zone-in-journal is set - Incorrect treatment of specific queries in the module RRL - Failed to link module Cookies as a shared library - changes from 2.7.1 - Improvements: - Added zone wire size information to zone loading log message - Added debug log message for each unsuccessful remote address operation - Various improvements for packaging - Bugfixes: - Incompatible handling of RRSIG TTL value when creating a DNS message - Incorrect RRSIG TTL value in zone differences and knotc zone operation outputs - Default configure prefix is ignored - changes from 2.7.0 - Features: - New DNS Cookies module and related '+cookie' kdig option - New module for response tailoring according to client's subnet or geographic location - General EDNS Client Subnet support in the server - OSS-Fuzz integration (Thanks to Jonathan Foote) - New '+ednsopt' kdig option (Thanks to Jan Včelák) - Online Signing support for automatic key rollover - Non-normal file (e.g. pipe) loading support in zscanner #542 - Automatic SOA serial incrementation if non-empty zone difference - New zone file load option for ignoring zone file's SOA serial - New build-time option for alternative malloc specification - Structured logging for DNSSEC key submission event - Empty QNAME support in kdig - Improvements: - Various library and server optimizations - Reduced memory consumption of outgoing IXFR processing - Linux capabilities use overhaul #546 (Thanks to Robert Edmonds) - Online Signing properly signs delegations and CNAME records - CDS/CDNSKEY rrset is signed with KSK instead of ZSK - DNSSEC-related records are ignored when loading zone difference with signing enabled - Minimum allowed RSA key length was increased to 1024 - Bugfixes: - Possible uninitialized address buffer use in zscanner - Possible index overflow during multiline record parsing in zscanner - kdig +tls sometimes consumes 100 % CPU #561 - Single-Type Signing doesn't work with single ZSK key #566 - Zone not flushed after re-signing during zone load #594 - Server crashes when committing empty zone transaction - Incoming IXFR with on-slave signing sometimes leads to memory corruption #595 - Compatibility: - Removed obsolete RRL configuration - Removed obsolete module names 'mod-online-sign' and 'mod-synth-record' - Removed obsolete 'ixfr-from-differences' configuration option - Removed old journal migration - Removed module rosedb - changes from 2.6.9 - Improvements: - Added zone wire size to zone loading log message - Added debug log message for each unsuccessful remote address operation - Bugfixes: - Zone not flushed after re-signing during zone load #594 - Server crashes when committing empty zone transaction - Incoming IXFR with on-slave signing sometimes leads to memory corruption #595 - packaging changes: - enabled geoip module: new BR: pkgconfig(libmaxminddb) - enabled cookies module - enabled queryacl module- update to 2.6.8 - Features: - New 'import-pkcs11' command in keymgr - Improvements: - Unixtime serial policy mimics Bind – increment if lower #593 - Bugfixes: - Creeping memory consuption upon server reload #584 - Kdig incorrectly detects QNAME if 'notify' is a prefix - Server crashes when zone sign fails #587 - CSK->KZSK rollover retires CSK early #588 - Server crashes when zone expires during outgoing multi-message transfer - Kjournalprint doesn't convert zone name argument to lower-case - Cannot switch to a previously used ksk-shared dnssec policy [#589] - update to 2.6.7 - Features: - Added 'dateserial' (YYYYMMDDnn) serial policy configuration (Thanks to Wolfgang Jung) - Improvements: - Trailing data indication from the packet parser (libknot) - Better configuration check for a problematical option combination - Bugfixes: - Incomplete configuration option item name check - Possible buffer overflow in 'knot_dname_to_str' (libknot) - Module dnsproxy doesn't preserve letter case of QNAME - Module dnsproxy duplicates OPT and TSIG in the non-fallback mode- Update to 2.6.6 - Features: - New EDNS option counters in the statistics module - New '+orphan' filter for the 'zone-purge' operation - Improvements: - Reduced memory consuption of disabled statistics metrics - Some spelling fixes (Thanks to Daniel Kahn Gillmor) - Server no longer fails to start if MODULE_DIR doesn't exist - Configuration include doesn't fail if empty wildcard match - Added a configuration check for a problematical option combination - Bugfixes: - NSEC3 chain not re-created when SOA minimum TTL changed - Failed to start server if no template is configured - Possibly incorrect SOA serial upon changed zone reload with DNSSEC signing - Inaccurate outgoing zone transfer size in the log message - Invalid dname compression if empty question section - Missing EDNS in EMALF responses- update to 2.6.5 - Features: - New 'zone-notify' command in knotc - Kdig uses '@server' as a hostname for TLS authenticaion if '+tls-ca' is set - Improvements: - Better heap memory trimming for zone operations - Added proper polling for TLS operations in kdig - Configuration export uses stdout as a default output - Simplified detection of atomic operations - Added '--disable-modules' configure option - Small documentation updates - Bugfixes: - Zone retransfer doesn't work well if more masters configured - Kdig can leak or double free memory in corner cases - Inconsistent error outputs from dynamic configuration operations- update to 2.6.4 see /usr/share/doc/packages/knot2/NEWS- fix tmpfiles scriptlet- package /var/lib/knot - run tmpfiles scriptlet during install- update to 2.5.3 see /usr/share/doc/packages/knot2/NEWS - use libidn2 on TW and 42.3 - following modules stay static: - dnsproxy - onlinesign - moved modules to shared building: - dnstap - noudp - rosedb - rrl - stats - synthrecord - whoami- update to 2.4.1 see /usr/share/doc/packages/knot2/NEWS- update to 2.2.1 - Bugfixes: - Fix separate logging of server and zone events - Fix concurrent zone file flushing with many zones - Fix possible server crash with empty hostname on OpenWRT - Fix control timeout parsing in knotc - Fix "Environment maxreaders limit reached" error in knotc - Don't apply journal changes on modified zone file - Remove broken LTO option from configure script - Enable multiple zone names completion in interactive knotc - Set the TC flag in a response if a glue doesn't fit the response - Disallow server reload when there is an active configuration transaction - Improvements: - Distinguish unavailable zones from zones with zero serial in log messages - Log warning and error messages to standard error output in all utilities - Document tested PKCS #11 devices - Extended Python configuration interface- update to 2.2.0 - Bugfixes: - Fix build dependencies on FreeBSD - Fix query/response message type setting in dnstap module - Fix remote address retrieval from dnstap capture in kdig - Fix global modules execution for queries hitting existing zones - Fix execution of semantic checks after an IXFR transfer - Fix PKCS#11 support detection at build time - Fix kdig failure when the first AXFR message contains just the SOA record - Exclude non-authoritative types from NSEC/NSEC3 bitmap at a delegation - Mark PKCS#11 generated keys as sensitive (required by Luna SA) - Fix error when removing the only zone from the server - Don't abort knotc transaction when some check fails - Features: - URI and CAA resource record types support - RRL client address based white list - knotc interactive mode - Improvements: - Consistent IXFR error messages - Various fixes for better compatibility with PKCS#11 devices - Various keymgr user interface improvements - Better zone event scheduler performance with many zones - New server control interface - kdig uses local resolver if resolv.conf is empty - new BR libedit-devel for the interactive mode- update to 2.1.1 - Bugfixes: - DNSSEC: Allow import of duplicate private key into the KASP - DNSSEC: Avoid duplicate NSEC for Wildcard No Data answer - Fix server crash when an incomming transfer is in progress and reload is issued - Fix socket polling when configured with many interfaces and threads - Fix compilation against Nettle 3.2 - Improvements: - Select correct source address for UDP messages recieved on ANY address - Extend documentation of knotc commands - drop knot-2.1.0_pkcs11_check.patch- enable libcap-ng- fix configure check for pkcs11 support: adds knot-2.1.0_pkcs11_check.patch- fix soversions- update to 2.1.0 - Features: - Per-thread UDP socket binding using SO_REUSEPORT on Linux - Support for dynamic configuration database - DNSSEC: Support for cryptographic tokens via PKCS #11 interface - DNSSEC: Experimental support for online signing - Improvements: - Support for zone file name patterns - Configurable location of zone timer database - Non-blocking network operations and better timeout handling - Caching of Critical configuration values for better performance - Logging of ACL failures - RRL: Add rate-limit-slip zero support to drop all responses - RRL: Document behavior for different rate-limit-slip options - kdig: Warning instead of error on TSIG validation failure - Cleanup of support libraries interfaces (libknot, libzscanner, libdnssec) - Remove possibly insecure server control over a network socket - Remove implementation limit for the number of network interfaces - Bugfixes: - synth-record module: Fix application of default configuration options - TSIG: Allow compressed TSIG name when forwarding DDNS updates - Schedule zone bootstrap after slave zone fails to load from disk - avoid activating the intree copy of lmdb- update to 2.0.2 - Out-of-bound read in packet parser for malformed NAPTR records (LibFuzzer)- split out shared libraries, knot-resolver uses some of them and atm we are forced to install the whole knot2 package.- lmdb seems no longer optional- create a new branch for knot 2.x starting with 2.0.1 - Bugfixes: - Do not reload expired zones on 'knotc reload' and server startup - Fix rare race-condition in event scheduling causing delayed event execution - Fix skipping of non-authoritative nodes in NSEC proofs - Fix TC flag setting in RRL slipped answers - Disable domain name compression for root label - Log via journald only when running under systemd - Fix CNAME following when quering for NSEC RR type - Fix refreshing of DNSSEC signatures for zone keys - Fix binding an unavailable IPv6 address on Linux (IP_FREEBIND) - Fix infinite loop in knotc zonestatus and memstats - Fix memory leak in configuration on server shutdown - Fix broken dnsproxy module - Fix DNSSEC KASP timestamps parsing in strict POSIX environment - fix multi value parsing on big-endian - Adapt to Nettle 3 API break causing base64 decoding failures on big-endian - Features: - Add 'keymgr zone key ds' to show key's DS record - Add 'keymgr tsig generate' to generate TSIG keys - Add query module scoping to process either all queries or zone queries only - Add support for file name globbing in config file includes - Add 'request-edns-option' config option to add custom EDNS0 option into server initiated queries - Improvements: - Send minimal responses (remove NS from Authority section for NOERROR) - Update persistent timers only on shutdown for better performance - Allow change of RR TTL over DDNS - Documentation fixes, updates, and improvements in formatting - Install yparser and zscanner header files - Improve lookup of libsystemd build dependencies - Fix compilation warnings in endian conversion functions on OpenBSD - changes in knot 2.0.0 - Bugfixes: - Fix lost NOTIFY message if received during zone transfer - Disable fast zone parser when compiled in Clang (workaround for Clang bug) - kdig: Record correct dnstap SocketProtocol when retrying over TCP - kdig: Hide TSIG section with +noall - Do not set AA flag for AXFR/IXFR queries - Features: - DNSSEC: separate library, switch to GnuTLS, new utilities - DNSSEC: basic KASP support (generate initial keys, ZSK rollover) - Configuration: New text format in YAML, binary store in LMDB - Zone parser: Split long TXT/SPF strings into multiple strings - kdig: Add generic dump style option (+generic) - Try all master servers in multi-master environment - Improved remotes and ACLs (multiple addresses, multiple keys) - Basic support for zone file patterns (%s to substitute zone name) - Disable zone file synchronization by setting 'zonefile_sync' to '-1' - knsupdate: Add input prompt in interactive mode and 'quit' command - knsupdate: Allow TSIG algorithm specification in interactive prompt - Improvements: - Zone dump: Do not write class for SOA record (unified with other RR types) - Zone dump: Do not write master server address into the zone file - Documentation: Manual pages are included in HTML and PDF - drop patches which are included upstream: 0001-loosen-openssl-dependency.patch 0002-make-configure.ac-compatible-with-old-tools.patch - also drop all buildrequires just needed for autoreconf - new buildrequires: pkgconfig(gnutls) >= 3 pkgconfig(nettle) pkgconfig(jansson) - create devel subpackage - enable rosedb and bash completion- local state dir should be just /var- enable dnstap support for factory and newer: - new BR: protobuf-c and libfstrm-devel - prepared lto support but not enabled yet, still need to find out which distros support it- update to 1.6.3 - Performance drop for NSEC-signed zones - Proper handling of TCP short-writes - Out-of-bound read in zone parser for long domain names in origin (AFL fuzzer) - Out-of-bound read in packet parser for TSIG RR without RDATA (AFL fuzzer) - Out-of-bound read in packet parser for malformed NAPTR RR (AFL fuzzer) - CDS and CDNSKEY support in zone parser - Add defaults for TCP config options into documentation - Detailed error message if zone reload fails - refreshed patches to apply cleanly again: 0002-make-configure.ac-compatible-with-old-tools.patch- update to 1.6.2 - Limiting number of parallel TCP clients (max-tcp-clients config option) - Ignore refresh and transfer events on non-slave zones - Compilation with Dnstap support on FreeBSD - Possible file descriptor leak when terminating inactive TCP clients - refreshed patches to apply cleanly again: 0002-make-configure.ac-compatible-with-old-tools.patch - moved autoreconf -fi to %build so it wont be tried in quilt setup or similar tools - move up the %if case for systemd in for the preun scriptlet to avoid warning about empty scripts on non systemd distributions. - used xz tarball: new buildrequires xz- Add deps on the docu packages to regen documentation - Enable systemd integration fully - Add dep on libidn - Cleanup with spec-cleaner- Only require lmdb-devel on (Open)SUSE 13.2 and higher- Updated to 1.6.1 Bugfixes: - Journal file would sometimes outgrow its set limit - Fixed incompatibility with OpenSSL 0.9.8 - Proper handling when machine hostname cannot be retreived Features: - Support for DNSSEC Single Type Signing Scheme - Compile with lmdb-devel to add support for persistent timers- Updated to 1.6.0 Bugfixes: - Fix zone expiration when AXFR/IXFR is being refused by master - Fix forced zone refresh on slave (knotc refresh -f) - Persistent timers database opening after privileges has been dropped - DNSSEC: RFC compliant processing of letter case in RDATA domain names - EDNS: Return minimal error response for queries with unsupported version - EDNS: Fix interpretation of Extended RCODE Improvements: - Maximal size of persistent timers database increased from 10 MB to 100 MB - Added logging of persistent timers database errors Features: - Persistent timers for slave zones (expire, refresh, and flush)cloud120 1636360103  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTU3.1.4-bp153.2.6.13.1.4-bp153.2.6.13.1.43.1.43.1.43.1.4   knotknotmodule.hlibdnssecbinary.hcrypto.hdigest.hdnssec.herror.hkey.hkeyid.hkeystore.hkeytag.hnsec.hpem.hrandom.hsign.htsig.hversion.hlibknotattribute.hcodes.hconsts.hcontrolcontrol.hcookies.hdbdb.hdb_lmdb.hdb_trie.hdescriptor.hdname.hdynarray.hendian.herrcode.herror.hlibknot.hlookup.hmm_ctx.hpacketcompr.hpkt.hrrset-wire.hwire.hprobedata.hprobe.hrdata.hrdataset.hrrset-dump.hrrset.hrrtypednskey.hds.hnaptr.hnsec.hnsec3.hnsec3param.hopt.hrdname.hrrsig.hsoa.htsig.hzonemd.htsig-op.htsig.hversion.hwire.hxdp.hyparseryparser.hypformat.hypschema.hyptrafo.hlibzscannererror.hscanner.hversion.hlibdnssec.solibknot.solibzscanner.soknotd.pclibdnssec.pclibknot.pclibzscanner.pc/usr/include//usr/include/knot//usr/include/knot/knot//usr/include/knot/libdnssec//usr/include/knot/libknot//usr/include/knot/libknot/control//usr/include/knot/libknot/db//usr/include/knot/libknot/packet//usr/include/knot/libknot/probe//usr/include/knot/libknot/rrtype//usr/include/knot/libknot/yparser//usr/include/knot/libzscanner//usr/lib64//usr/lib64/pkgconfig/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protectionobs://build.opensuse.org/openSUSE:Maintenance:17150/openSUSE_Backports_SLE-15-SP3_Update/7e783354187725acff3c96b1522f4e9e-knot.openSUSE_Backports_SLE-15-SP3_Updatecpioxz5x86_64-suse-linuxdirectoryC source, ASCII textAlgol 68 source, ASCII textpkgconfig filePRPRRPRRPR=kZ[)"|utf-838e787bc5e4b330dda723bdece4341449a5988c527656383f856535c0a1cb7c5? 7zXZ !t//v] crt:bLL 怃i|t\q>}®bUm>@G%}ً{IL*ϛ (R̾R yPqެj}ː©^MoU.1\:Ey\NA x9:,1:,%+WY;z-@'p;m!_.\7N.O".z׼#C;Qo*UgTgPQUiR/&Yz s'~ `0'n>7&'="BMo~7-arhXӞurr_ik1o'5asy4 3%l7]aJ:bJn} .)bgB{bD~U^|4@P?C7zqL/)Sە35a5EG)ϤDSvdЖ2kQ(BR4*X-æz[H=pY Iw$#f"9Hդ jl(QHvf1mmWS [<$띘l|DS$Q$lOqsS3TmQPjO7`Z8JHMw̼hdPf>rWTYʫ-~2Wשs6p¦;vLtB x̨WW|p4ԱmETV@D V^ߪ> V^.1+ O31ǥghQDO``y,:hjV#ňR Փ\i`sv @i^}n5_3"fH?Bü`TW2 O&>S) ~#Uhwu72.N4?@<ށ0abhgpn^0;$ P,XzXnL__%mGUcYJ|p/G _Y}2=7LzNQ"m+sSiqPVƭqOo'X!{7#jԗN:Ex6ޟ^w\T!]wR\C$5% UZh:G痒PZA'rsw h"Aiq=(iJv7L˓R+ 9}m%?sPbsq*"yC "sϓkAq!(Qy:!i 8gvk= !Lˎ>Y0kVwv0,VO}x).@I)#NLķ3<?mR{ڡpc*t'd}|NTZ q_\5)2 Jn-VSMO69eS&c$DL*G N~Jڥrl 䅨 8~Cl'41ֈ6_Zo nO]vKl^ҠlЧ&$tY*`ֱR~{ ?Y/Ӝ>Rr:&|6u8AZrK맃f_m^~fd8+yRx&)9 s} ‹Q 4s˙fQߣ XDL5LT"*CLоlY **W&&^E n<\mE FEz<5}F*;rr :*~CJs \#m룣GXƫ4Cْ$à}0nl@hvY\dc)Mtl=bb͌3;ϯS9u|16M#ol 53)FbZc bV%WX-9?Rf`H٥MBY;If9!)_/n12d.LQZDpqbmV!}hx7wDԱkA<6U"n-q|-NXsrbs I_GI3P_x.xoa-^qMy}->PMSG5ʌK貒JfODhV+ ߌ/ 8 ώBeO$$iQ%Yz+>~6KmV>OJ/ 2nDgA#D,>u*q=@vz oݶtx`S'RaeVՀH5?*V`9nUJ[iT_ ]A uպ/&6s-[:#U_{{U &@4-cmm*Gĕj-NfߐEWf9O9y0AYt$D.Y)c6//6',Ils4qK;՝`i;JJ*aD*j:Fx7ΐ۰ 1sتMgꐹ)?-ŁObPƯmgZߝ+\kgV~ĶM#ǥ φx 9D*M`_Q/2H[otv\ "\2=1w:~{,_,lۚzQӺ0y;9I*xӂz?<:@?o&dET 62% W:M(ZMOOj,!_4p+S*5S!% c qX Ii/9l% i1nUD/7*<۪]4u)iH΅mS/A')`~vQ su<ؚMxY$ "'N vH -~QcmD 1@;`k`z 8J;x z*1ux=9B4Z֘: nBEwV?$ <T]2~-HܗVRˡU5vh4>s+ MdQʆX:kYy1@U&F՟h ճTx&':Ҭ겢vXU٬d$>: A' ]f‚'},E+0d#%pZh\MQ<,UȤ|(jⓈ妣ro/G%jRD Z?WQLj⩐xkbt:eVJd}U'\.\| x)c&8wm{!v'cjê8# oCi a،*u.澨"[SD#} ,RܘI_?]\n+/V.g2YJ1j(,xyd$ Jl =4R l>-X]1H}/=dX#[ɝg[R^ |E(9\\tgqxˇesI;lr|頁tcr6TޓEǶ!DxGK!??$CO G九d wOF{(?pmƕLjGyt~$ )xd?1W|O$v0>z "bx~ʇ~ LXxn eF݀MCȌڦ̰ǽ~|hfυf 0:*OsB{J3>>$ 7бtw&u¹X6,w8ʠ^VZa# ՇfUdӔD(j)#Yĥ`e>qeT>Lv '3 SvJv+?W[H6%!xVA44\-~ ώJ^m20b ϝt0jwO ԬXAqa8]kMi(`]ﵠ7W_e}+`q+dD??TgAou襰B)ؓ$OŒzlzué} )KY EcQs. *9{JQa\ 6ȶd+C)g]fB/+[;0ƚ%~.ֵ!qZ3&@<DŽ 3 +S p _Mm'n4LvIa ֈG}^ Zǝn1R9a*)Z+Ȩ^nnc}X !~Y09UNB9C8nD|)6aXfIYs(inA+OX Jvv>,pIQ̜,lu(/7Y Ɖ5B Á썂sTƀӫOAi8qGqa+_޻gGgwU͇i40?=?+/O#H|o4%|ƥnV.[>x̢m7KVLE~a}wvZ7;@ŒdU:*\d3ę8$is?].̮v5ly taʕ$~ P˽{Q$jٖ9)h3ԁofRֺ-w}(益$[ԣ/'mOf٘c$;dꕟe_ 2TyN`| G\XRi0Y4Ttgo{-H1˥ 5'@Q"Vv0M|,=uN3;e!* FNO\C3ˁCg9{=gy(W^(# 婲jB\l( L=*XcʃqU B§(vwwW$kU+8a:MU8lav7mpOt:%raf vl#QDˏ&bu,@-bfQ6`} cd}Fj2PeSɒ]f;-1zjY99PU J>b y2~z }ăFh Tg;%BE<dd@wFw3YSƎQ,Ѣt*|<*&Tr'`-#wkMڮ^p>t%-'ńS? Zh"zo@w8= rd}՘%:*;Y5\T&?:eZr) ;vMA6 l|2cJ)`&oz{>׺$ Z0Ï _v9U}f:H) j7x&׏Ղӹ&r2iE;C=l}{m(Piv:ьupΐ3L3l1U(p:Ů$oҐVsI@thZƘv,QZ 7A31C\xŸΌ &V@&ˠ!"XUAnhK] F[oAҏ$ %Xx0$ЃCEΦ"7j^W͝{IlWϔk4޶,r)?@EEiqڀ+=wHw!ͦ{ѣ&/+0PrPA)/M&nm>CP!zgұl"ؤ;Edʩ7.M>v(pR\C$z:ȴ4x(TENq.fqI)"$߱}P3sX@ڗ)**"dOMTsF^#vGBy'V;I|VV q5="'15%L94Zƒĩg^=ի)y!Y{MNvR="ܾ? ˙üggސho5Kc3\LE+u-Ю1U$փl2m&b&9)/Fa= :p|yJz+;Yk`02ԓ`XG:lET0M&PK˸<D{'Ylto 5Ѳ[Z9r Ab90wͼ̱m],[!#&a'_m 91m=t%-ql&1">В[P f .(H?n%'ϧ;vׅM~WP jsUo떷6nɶ&\P:޼L\wX/^flX Jad}UbϑJ E99&-ӊ.{e:(ʼn ktvd=ff>adAo+/D/MoAo͸\ ,e6} sm"\IѲmc.qnq-3"O0M\1ՌL?޿F-c0;(RfэgAUƓvf;E~4ϋL =R 7qtz.H\0dlkSTBTFev%٫c soRs QXRfqGcZJfi!w^}퍽]Ҹ zj3ft\?J4dz=kS;IQ;kck`Tn4:,*Y`M} =$)N0=)dQJ,S,'(edQ&vJiQV[ s۷9CT0|1 ;1ABINm: &j s Q]cDYk5@l&ƨ~YIe%^rޮ$ Qgt:[{qMIrECm h,O/X??42cc8Jw(nO>]4q>IRs5S&v^nå{nz* گY'er+pj9Vvփp?3@qimKߨ$\ny7qS@JFwi(ziF]ffUF:,R~!Lq(Zxo|kM"k8 γ!h@ħs leHc C_M/x.Js.^R }oOۖ}{i˹Q{e44^A>1ZsOwGz…TH(󐎳䙒3Yn%Ѳu492o Q<{||D"!@;޿]0c."GBQa-#B  _LyF14}Xx=%5xǵ1WjV7d]5EZ)wz1 X>3mD ?36Y¹>2Ebv[aVoH!\2&:DŪBzh * ٨&/HyhqbSth ]oXlrx0cq"XD皬/JަtϴHɏYBzaHջN*Up7t֡B- #۔A6f89rx*>,׉,][V1#cӲǴ o m1Md ȩe5@ F:2X;-o})чnC 7&_#g+6̢  9vJi]egnPa8v:_\\y k#^;#:. I0U(bW MXMOuf=^6gIt9:78XpIצԩ蕥^Ot45.5{ΨXR `Eә%^E$2|dEѰ7}R+,@q;CB<5Ƨ젚i<&LJb;!\UiWl|iEnco9R֋DmO[b,!|?# 㵃rQ_nԒ#N7(,Z6IJuRB1wodR: Z;?oȧv4K'bIp(U5.4GppRtuyGj 4Mu(EyIy9Exz͝Y:DkS=2ZnZԪٽ 6dj/lxKΠpj3F`%*Lb*Ĕ;<@;Dti" )2锼oSa4r]$K2+ڃu{xNJV.qVSctD/"[!1J Uw=cF^:^v4)w@iimy~6k~ %m:K3뻒Eৰ$;WML++=ZMt>佦DEźۏuA,Q E[rς]or$`9{(K =Պj'fFxfN[3D>Cͥi2~mv{qrHm]*rv!|/_Ij @bd,϶4j5m|`xЈ=1:!MpP**<1ˮ%߇7[u4ǜMD^߲D]Y>'z8SC,G!sS%o1.l$jP3w)ĀH{`Z?+(K~Nq 9BT.*z-2OV^!v%.?v p.4uiᨇ|UC}[: Poڹw`+ߐ#@)DNf35%u~p!bmlT*8rc9I&^-.[.aLR;&HKcX&Y51bΛ#jӬ Hǝަap ӄ/y/R}!Xkٓ2vEN0)Đ];Boi8M6H~.9ъ[FN%͉vU 845 cfۙr40?QEpP xd"Q+z}xkEZ0M+^~C+/ =t0Ff0\^$ev5(=Ѩ L9K?X.܇POU-L\DFv̬Gut`IA1.l`&>6`UP\*xN!'aqy&AaO%kЁ2"@]2?m:y"!W5w+(l$k?~o>y2<1kG^R@JMwn ^\*Xޝ>L4Erlt=VaE+irU~n&3zef BlNa[2){rjv"+`g8Ϟp̅$x'h[F$R@] gZ,&|kV l^k+&v#}1Tk^!iM udqSmN]I4oixY`Jј :p 53HV #$,=fܷx淗7ԠO)͉qavMLEКWtK5[ :Jb{@ nie쪨Vn?3I)@{[R,3(fU'/ r).p.d+).D+WP_9pf@kCIL; M}iJ-` N@ocuۄAR^yҿHXǟHD[Kpe}O7ֺmf4j8DQVdS&codx=w{L\kś8?^ɘY\غagI1R 8WaDAZ?H&&!Tϊ 5g 5v9M/81 5:VF1fلimoyc9</X+ZCqR ZV6J`=6#kA)nn] (Q^oo`mh\$tA*F8ubdf0}$(-Uf:Kem7;hj}J05ǷCos,ŅLǁA :68Vey`U2F#K3ŷWZ=S0.Ae^rS\'#M>>WX.(j1B?łg0 :iޓd#u%6SsS`E G_2ƻ = x+sqH0ִ/Yzʩ4ba)1ę\zvĠ+`e'˒ZdnnDZ U,*cojfM@ onKq*/z 7dh/E55d\*\n(7y]mct@3`\L.^FT<$ a<ɖ>hA\2A^P$nQ#FwgElnۓ9*z^tyoLc-}`!<ޝHQ/rV?YTEo?3ć`]5pPܯH˚fxGZ-8"m?u!dB/z|.,# S\;豅WN]fxsz7ORWcilJXQst~\&/>L|0eώE@U+gQNWu@WXbFy}e#B1vd&J1-ِiv+ tJEZitPx' ]Y#vV4 [ I6 54:&߼QA eiC&8ɒyjgS+Nye]E%_#Uux'kRqܪ6CtQ!185 DCz_%l,BvNit9P]wXB2qh8othƨ Ɂ'd^ǤQ E)>J|9;o$NfH j_M#AfZ8l_;suy }͚,taTC\m$=qOR1C50$DF_ dHq Ihۚ(v]˖dmNy&ee ! |Pj @Rg#v[dN0 P3F/+7+4ՁD Q=Zqa<9Ho]]149bm馕ӥy.GֹdRf3>Tu;F6Gt^ z= 5*;FvjO&]FI1VEjdJf}iE Xd^<Y™}_qxr86l#ؽ.7 d$5넵h@Q~D ̧(ݶfe!c SNkI8?X;藪 WdX;D0OcPtSɣ:"O7qܘEYg vo>B` tHV3 SFh84+6Ԕz((e8Q$F>"F:~}y*6jQƪ$KK'ߑk*C8ޮ/-{Ȃz})t[Mt{8\KKsMM`Fl!DF bGŲ; X~>0&X]vgh!+(/Xȇ2Fe1a^h gR  e"_:"L]xītY 4⎼N#1J=1l k7`sIA)簊?d7GһWU9:rH1ˌ (8)pqs4D m:Xk_6)ǿt b,?5VF;ЂP^iz0;3Y]K `+ca&! r: 1WAB5_{z2Fpj_Ƀ|='A,ʼlLigL (%ik{neܗ uWN~-3"0_.TĜr<1zptEo& >rb 򦎇"Bâ@ʻL.fb %D>0uM,M479 Z3 eu q< VBX{arDu8f٢yc]7 F}7#O|"3O=:fZ@s{_re|xCD SXӭq@d./|x8 ݬרiHT=L#  Y9b y}HxBh+srn>U0"=0QlyYq!mUK{\˦F`KGtד l2|ELxlc "AO/LRPt#s7k#E9DwNʭ!1&LR^NnY3;CIw-ŻBd\NPxiilld\Úc͘cq{]W%7^ NPz-.I!gԶT^NATQhTzy&uBG@4 :QЀP/̘(o:'%#brk֢RL4 v͏å xSGr`(;sn+{Z3y9c3QIp^hbjrϰeKnɨ_k(, $ &g" V;Jo<I,$VTD^ Y})L2LzqOe }VY9 'tπ>xb\Qɾ eD")>ё [J!r9ևB)3uX9L=Ů$swm bƀďW?rShGaRT5y[l·xx`Ji6D\faD^P46h)5C<>Ci|^YbԧJ9p]{2EMx/娥kUS'+6;ፍJ(\E.Wj=ݵd-w-Q/ \#E!N\@>tGJpȓ-msw={Vsf;`M2E@qgM{TgݧR]#1=v\DUiE"[t^~?uGw㆟T#Vx% !5#Фq o:)'@G`nu 7 ]st7zkAM*c` +TrSM{F76VD@edg{SܹGHZ⧀UYAVǾ4?|g|W?fղlYOBmVڃHH8S,;7t`;7-(AOcbcS@9"H;ǰ ^.IG^c:2 9KYy۸=$ĘyX_-/7/pmsTPp&"Mh7WƁ8X7i@9#DzƭhT_|mZo9x Q\GcOP~ Kr>V@FX#n皆 m+lMDzl][Tw>8tz^{CYUL 3*ǭZSAf}%g HtR_no\c3/uk#C7UCS( g%!aXhK/E6&!ϟU)A@r3 GoE>|f PڒS7 mPs"CS|[d-œ0VE9>"\pMz~w0Q*!' C^C`:4DpicH f֐YJ.`YM?ʶ3DEK6C&)LX n)k=}zVe8"YP%8  !zN{=ey6tFzqp~Қd82@aXFcwaׅ"R8'7*0km!,cƉn-0x}v+͑͵@"x*״c"Vp^I.@Gs_AէO İtĶ K=lX1Z[7_J]< '\߇Z/7UV&\-@?43) PrBg;b_V{bf;~V?O 5AفVzr 3Kx+fyHSXCR2]Tǎ%\MW9DwoӀ&,29u}Ym+bz΢B1?U(0@R\vfDD~1Q,5˹\.l*؟2@ݱIؼhӝ+w@ݣkj?n]%$Le췩H,D6njQpJ0sh=aSn-חYncyK7U͂; tAPl# wNi 13y)5Kġ| FĩDBqП"$ة*NTke_?~vhRt cRB )*GC핾?9̽M^ G$7Ց4jtLx<TP ? >"mUSݦk ;Xۡ+3>sDZMHZ@HhVyA Ybਛ^wBlh%B,I*zsVVKs! ̻XX][߹ZyYW@70 :b^tà!.2ʻwT>F2<~uXk,㤵%E!j !ѢPƧ9Ŀ\f<&?vkXζ-4F1g;Tuv́%EQQ۲:K1wַVO 9$'u$pEEkӻX̻IA 2U(5ٯ5S~$ϐ[%G% ˈ9 %L .knR@݁đcV= . kNA±"7`Cyeԙ ,-2LD@R?!CҪd-T':_Yt }wC/-سw8q,2xKh߶C8{h1s"q]YC/:-o4Joɻ1 2R{uu >F_Ӕ~l?,4JH v{e! ]W}hwߒX U.K/2L_7BVW5vUUa72D.<=^z zz:0/pGw/E Z(3a@e^BFpr1 8(LxTdu?0CU߲puC=:;P[3BVog]OhdlbqIx"XH؋CކG3`>8Yt;!ۚ ȅxK V ǧɡWoj>n~!ȶ-C)o{uqSsb~ $# \F?G® lh]T\*Bf- @Mw-WBgE: &S!?mg1kC8z%rw0u]Hmx_HƪJ &Z)B͙bsH*x~^ۊ[$ Tl[AVU`HOGZO?wٛrA19+JIS uPO%V9KU8Ȃ1W6e$uR}Xu᫼ ]ԶԎD]EF5.Ъv+OtIY/ cdDÁ؁(['Юo3@\N#з0I %.7z"Ƀ9Hv5}M*M%=8^wl؇dޓ7!ꑗ1KO', 6*:XN=mluu H WN&q*f8? mߕc˹Z,9mhn`X|~թuHouuo,GCdnmyBYA_Er\G)W~h-C`'d12Q<#(Hv}rO3loGCgh̀Uۇ$]L^r%OI.Ԥ?d?cG$ 1JSMغ'Kr$tT2 MY.~{vd+a5ro}2ȜUsN"߯y]L$mo%5qfWa a r;]6ћ6M :qNr䇱(j2Q ͂,K|VZ]4ԑ(`~ @Zm]t9B" ͕<R YoV8CG%n89k_6&$hǣyY"=#V5Fwf@ފe:]=Ob,P?xl(,Eo+56&>byG_HV`>JW~dS%6vJ`>sm/%ߐLlΑKT;`[F͓~Y״MA,B[ q߯!?Vui+h: ݷШ'ݞ+8̛^Py6)NCMni(e-$R_A'ΧXx6Lޱ!g)/ΦP΢&V.Ni"zmʎ:ՌBɯmq4`!(ӍHS9ó(*}C~BzJI# àIs̵˫Tp#2J*H?y]$!m^4 1xCK-݄$Dz鴜 Iȟry2uM~/?FbA>?̪H>;{2YeH-"D]'ݚiV;)OD {p>u&""rEL(~fRu.n& M[Grt \_Q$\-CHH۪+;u L&e{cb ; QHoT? IBlЯ)/^LƵ|1qUtqvEJD.A|)ߗJD'P电6Z%jKֽ`{7nI"g6Qkst/]3$Zh^Ξ{vwRI-^7Լ.T˓=qɽ!מϸ:;W wW뱯j; 3A"W7r/@UD&Xl,rI<7JL8Y"Ū*0Z8Y$W*bsHfɹ)_cRaM+-QQ3By9&9WS۸TO;b- Ң9Xݢd7}U! i6BK]&1x)<͏,lP3Ml n3EA~LpC%+aYbQs嶊!.Ѧh1'Z[pCRI~)O Ŭ5 潘"PE%,4"i5*1.U MN^+Mwm/.ӻO'k9p&sɠO:eAE*e }9B(I ;汫"WkU' yKtXoOSYxջVEu/U2#i(^8& 8+BU@Υ`Rc@\}8mgߨjÕ34wd .Aڋî8J@!Wk!/:h <kOa3ocb+0E$w:ϋv )4ϑ~˘H8~p*?8UwG3_OE>w];Eń VHBsk $x>đ|k'Cjufݞ03zHR]ZC\``W.Os&"dž`94֤!:F raOg.nB^T/dVVLRw0],sEY~iK~ը{m[Z!| V!ڬ^R5g5okHoQe$wwz6/9RUp}G *(ԉD+Z"v:/+oYM1X6R8ֳC aK+uvbo#%YD@Z%_vРZE?}+v 1Daۀ8V ( VKtvDAoevu?wv^8:  04¥8?u'\k$UGD!s:(@8iK&%B4X>0 +OKp\W7BX /T (%B*t˧JsUTw,/MZ!HR".#eDmlv-ѷyӘlrSP? )yʎV, 9{+eGF(C/@<>(/,# "7n%]cOPc1ݱZO~:v({"cnwzi{MscGr:}@>߿^U-M~ u91 q\hb`%cAp $gF Z: zabF+lMsߜQlp\3T[[I^5RT"}>=88&;5=$/0M AfS:KR iؠCC\'ؼ*}0pY&=Y {T>$aˑw&"<$|9w~v8 ۨM= kA-9w|d%-+!Ÿ- Mĸ"ہ:W}r@%f?dh$M`bi!/HP bx|7QSi^V5Q/Y?Kh}ז]vx'_,bxYWUG,d=c0[#%ǜ+3+-[r5n*n[4M0 ^^*@J:f4o6Aֺ9^[yggLV}w4ZcHr"yZ]>}v1Feb(ϖcG.\䚔/uWK& Yxm N jnUnKWXsjX! ]y e2Ι-(T kKT1K;eO>7RU eX`w}^G|Y<A]Խ `6R)dq?ӝH7XX\pku7h-䇩M110D\un!xnQ]":e-^]9Br)o eE__U: 8Oj5^XV9~g\ W˰CbE`r1hcbT60; =C@mC a|=(u$ER\}10O[e9BgY <?P}.̳>Ab~F׌qnw8po9XƐ9A/ 3l4]kT&C$>ވ9UAuU 4150xcTϿWXaM{Τ(@'~'1KV/E $U?1W6Hb (LMs#j9-?g"l@('X6LJv92>a[096<T=-:Z8sj.μF:!Ck[:+϶V˴tdMrذG`!"Yԓ?kn: ϥКu0@ 箩D0hDߎq<@KNY3,qdQ8uŏ1NMۣFpIy~[hKQQ^? .f@5E9{!2l;s:uMY>]UD+S/ù$AT-N7ASxalﰉcw[*qʋ@;ֆj5Q~ѿ)0Z$Gc,3整ʪqGi*!68kgS)eDq IƊ3fL'A;e߿fhw\] IMrɮ'9HcAohkE5dYX\2W Qqz;&,+E3OR$H.:ߏՋD"/waT-G A$iT&vh|oF65R'qz3˷U{]o͟iLmTCWlӻBkma|9.O=?``'8tJv)V+Hk3wɪH> FZx6%h!6 |dX7:)h>6ւȫN>Tu})2@Z5 ֺ&0 /f3 (\z gB&b;0.K]0| ®v@{owu74&)#:G]lZz(^^ |,eS75RN\iyjWJa>;C>?k_49=>-J#9ֈ &NBkԻ 7 bVauzx-qOA砮c9 YVaӮL\*X] HcӪxŬsT 7"Q.qS\㦏AUR5p՗Xu4zp #gr!Zl صAcS&"v ph7ɣ:B.0ݪޝmbCu~Omבl3g).ՠ+wlE9}_x;q5%~s{')aT-2Ԃ쁅C|/'I?^#D, m:rE!{h(lqPYZa#wm2~xՆp^F~nL5[4oBoxRe﵈tʂ$_C~\WHRzFAkE^X' %XdqԾM+mI/|6q%$LٰCՙc>tX:=)!.'nTngd5^=5 3%?I *G'^#L8mC*qĈSK;iJ])ؒtb dfƹjvk^Q68/'s ;pUx1NV(!b6[ٛu ŠFn`ns9le3B2s0; [qYB'=lY1fOV'H>HhsVy=5&̍ uw.(laFʼny$ؚs/ˊfM[+@ɦ,s<ҽeÏ`:ؙ_/vXhۇX}([cH&a GGoSb\=ʢuƱ<ձ?zxA(]߱J^H0r[r]0~BE”.u$ڨ&-3iź\fVmEf<{`-ϢPGfҴ2VH~]/.JtW9MpŰ^bQ o,biK-55fBѯ찲*HɃX}d2Vs<ǃAN6-7nBh3Q:8£i 2ʓ(Zʃ"6QO/zɨm@^+x^Ĵ`Ü?UJ"렇FjJj1UO3筡~ԌF{Z6ndžkԏC'Nu_#ET"rwbžA+Rߍ@:irT(|˒ 5=l+T.$Ҡ/r<+(…re=J$ yUc:2.e.B`>q^8s@?JTYЌWc2ewQ7|D\,vdݡuΈv\< JVr9-K=|Ůvq j| S ݽO&12o!H:H3/ g㷼ll{-=2(%Pw]Zn*eiQecG! d^WP!ybN& "ILY%^Ho'KbՇ9o;צlJ4 )& W$Ņ̯M"q3 :_@MiQMy阷43с%#ZkəɆ9E< 5o= \oZnjif i7lbMuM}%脙[E +BE6L[@y4,<"| ]+/y9<\CX'kpLt|vk` A,Q0x+-x9cqѭ.0<{߭HO CY\<\9Uۖx4*=ĤiggW+if"ʩvɅ R$yPԻ@ i}4vh::-(ٛ<:!5lg@2=F2HqV a|se(:9U mU aG[-8I 8nퟺRqvC/[MTr}) &w{=]kz 8JCZ| |aIs# ׌/!{u_\dm-Ëd9!g/)D>(Pw+Rjʱ-U\5b0]D(oΦ%z 6ۡݍ._ lj 0ۊg8/쫬m3*xk_zSu U۷CVqcQ^6R_,]. іf?;rto"␸r':M k*:e.)xMyu0p8殖p,xN90x+PeR#)op"*1xY@oaehD2ZTP{vb =+kd8DpjP Bo]VP.lot S9PV0?So\ {,w.`w#{Pη]΄Ў|i i&~՞f ̃JO]e1Ug\*UZS%,]~H Bˋރuz@%33j( |OGN5w! 0ԋԡ8HxXl</*8i% +h ΟV2ʋDWųH|ߟIU`=m$aΡMƸ_ MΙR]+֞@<ҹ4XM<*N(WC$@CJz$db睠2761cKpj զ CClD~)ꝸ7uF֏!1wP4U1DW䤒lB[ ~ٍQFlr8W섥@7/+m[GbewbKE of;Ft30\+*"T$ו|hkBly7f)K Cf0GP:,ooDАMVMӶ NZ)KOiS8ۑSaH[lJgǺQF[O׶0' xtV1MX8 ;@I sׁy 3Imal2Mk:Ҫg^yDE {ʯ+R8ˮD}}>0O3%vЁ}184/wC"z'KN]PѥN&'"=d`0tYÒES랙B -VʤǪbG3퉍ش$tb5FEQw ̎(ywm=LdQ+2V)Pq_ϖm-/vb*tgbDK$tw""A|#345O钧sjԇiԖ6ڻĕS2+| ɡͿ𢕅tּW6PLA{mˎcкe @-NV]-WYFN;?h<%(+#K/.[ FKv|-W brʜini?xhUyBYK#>IGK!ExjSUA1Tu:!bЁZsG#`e8!/ŕk0U#GP/}HFge0A =Rc\߃[cs]T8S`b~nv3W0t\f1Vk9 M5]Ȩ:[0F[|RPs$ y5Ty"ls6ϜҼی'uS$Vymׯ8t&jRYS:4o!nօ֥kRH(K(7L,J2oý13t/Ii:̙# &=Rql$l`;M|N%5"̸>SE~%N> ,X 'g0d6b-Q0R觵rB\]\Ngd yQyfFӐ֭׍+GT>w $܃`?Xc^oŵWK ؃mDLd TOÊĻ}0.J~cW-̟6'@ #lŸ/J O8,g@`>R\VVtxNzʭzn9Sw~ mxe4;q: N1.?hc2Xx;qoOCksjDAl`x"nI1ȬłNYMzٟ}6:'d:BH@_d~вyP$͆Jx55T3[]&ԕػ YJh\AppHF?(.%h"D%R@ԡqXqSN+ÉJ|S=. S4P/0:E VG1]%R[k=Ҭdܯ7ABB |JQ)7 [vnE qhǸ9;zNRwO QDBS8(.~ʘ[UeW23[S@V5i<p״駚}&M bgwLfqht)G"_kU %8 Dɶ0GvLkD0L(phaAV{k9>O~   ;괆"6ufxG˷:ǐ+ 1VÔ37׹;k>>RV^=ha0a^Go-%bmEY-Ko%ʀ iwp*`WgVx d_f'!x0Zfw;+O+c*5cMnփڽ0^|uzi1O;6NV|՘3]0Qƙ-I*×>QM]BwdZsϫR~g((Q|k74'ʯC] k2Z&%\IK5k G~RXwJ`A nt\B2&;GRbW#;|D**Bh[ȿ=垳ﴽ}%oV>@ Ә_@V<}ԃ*m( Ob Wf,QQAWATM|X` ,t!f-˩[n{gU5Pc|9r{A!MQ1'U7'41MR+Ft'µ 4_r +(Ih)J /Q?XKޡ)@j WȀA䄜>O#B' #Dգk<ˊ zy&_ W#zuޤ́s[/j/L6g`b 5 /+_:HnKvCx&0i WMBEe;u->񭈳` j~Z)م:dAӠa7AU%X>.}ЎHаgB-;~0a@P:86❓!Nb: O'l*/6|/n=sQ&?Gԛ@ع<u`T!8_Sz)%>P6,7AJHD  tKN%Ǿ$W#ֈwnyː7WuVXnr1?ݍ'(`8juCJFHcUl%0\Z @ﺍx% ;ij&/[urR_ )6s4x9%ll1+l3)-/[ҎF %dқdcmxp%a]0n0n_Dsz2(>aP π(AQ>}Dbֿ 3843Jw!qY0gi&6ɱ\쨁-&Q~"e51|Dv+D8bFn5r7oйo`Ct.4ťx #Y͟< (1j`XPNĚg}nqq' 8>"nsț'YGCʍ`[,nHt^+KnwPKژOڌ۩ͪјY׏sEAN,.X{4YoB*3-EdJ;̒L?5, DSr#eEoֱX)f J% Q*{ÙaR[!U/[*e3D3lڰ nΗ8@ u@Jwٵ7HYsѩb2ˤ4(fE֎\a[퀫]&v&̂"(<=j~9 9ƹO$W˟v1!鰩uۗ1B }_B2W }s?3mjXʹ˅IO5vM )>eR'N5 3BbS66R&Vtվ.լ5Kc j~+m{c. XOGECKƳ0* YklwP;!5_31:*)x⽂өz'VbI3]M;^"m ٨h XO:33}m֥sAp z5( [ μ윆wh >QwU<˛}/A(0eZ@ qSQ^IY}2d+=ŷBsq dv%܁q< ش+&!!sJ+EaxbUKj CO+ʪuր9myz5}fENoyP<x9 3V/A8TB C.t408citpNnͲ%^1Q^#[p VFoƽmMj,h / 0MIopk(ZH;k3zm*4w]< 0+(j3ph 4˓t6ɬܕl//M2 S3KPo\0:14n\X VWM+ *un8ae|$ඔTڿHx\מFzCP Pk;m~gm{NX=F6` XSeMxWKHnN^ie4z~&LS ȞeJ[zցuY:^{#^hR{ 4*")..qRCPj wa/Dަ]r2w^sf4; )4C^4 + i.XPSqku!5SAt,2^=XEXyg"]O=5G@1Ö tɻ.^l/ eH{:1.d3Fk!d+39q .+&PC9Tg C|xȮql̂(pYN/ k !sÉIAp$NeHX閼V<̦(S%ޢ)cVߛ"҇n^{r7ĮۋnE,҇# r2K+{ET:XDZ .nsqlBq;eL/Ygr#ҥ~%u6@Ap4*?Mq KA9 M e+s&c}x@.<* C7k$|_|q2-a.Rc[Ɗo-x7v((ctNP5Qoj\t_Ʉ}iBjY$6^ xqHY`&g֧֐ \@[JʻH)CHu3cHyhWd]*s5L'8x; mÔ#s80 ߯ZgU|:B]nmy 3x#R؜(&gA \*젥d.n[|`(W}-EWqi:}ѡȝz-5#ݪTǔ3"O"*ob!,ӛY/c< ) F 4Ԫ}A\n8OBPm;݉B$GTo)DHg}쌏ٟ=([9Y;I!08&K ?/"? BX--E}F5~v6܃ "mYj^%&APwZ4!e, 'Yt]ӏ yp{NB7bޕi+퐥!X NawR0K/[ foOd@M#Ovv B)T&s1K V+,BW+ 2zpOl3ϧ[bp;'#p7)\Nfq@-k6Ug: %_CL_fGzL=;&7gBM&HŽ4z!#Bdѩ]c ?דRE-͏xMBuCsPڿO`i}R.somzWybM '>-8/U0< v7kx toYE:5s ,̲Cfyi%Z י4?IPU|bOGn}"f'G4d1pdJrhhR'41ҧUAa`W.FƆc +Y`~(xH,"G|fHSI[rbnājd,w 8E6Ov JwFb$2Zdd@md)lX;4 T* f՞x|9H;]A>WF3UT1\$m*T$۬/2ĊUQvm۸$!Ԝʊk/ P;.PTyg9Ҩ1r,Ywbsxc\0:o:芥/*-۹MT %EANSu]2GlrX̷1HȗO?Q.~9v #K8쒍#J-Z],iH==vA 8#]QXt+؈t{67ns25J1ډ٦?}%F(5 ;s(®q0ҾmN/-mi@QYUipgoYsV )^HYm~Mϲr`W7$0f@Eh8-PiqI-Y3WD+{uZ-Bs ߡ9 ½D#Ymf&w-8yy- ȳdN?M>-h~x=0: 3.]Ҳʡu([zGHd*;M #2DOvSR0DքEk- F-Q,zK$9͊Q陋oaLJCF8K_T84{FU#"_cql.=G`cG[4%UqFd&t4:!EޝC`:got[C̡\= b|052hqmg"F:oF(j϶Oe/iH'`QNEnPFF/[QO{hasl$ zZe}"):`YgԝH\Jp9(TdRtt