openvpn-2.4.3-lp152.6.3.1<>,`j/=„O]PXTv Ьo>NGR?sk_^3:b? Q֚aLmQxcXCuSK5r-Uȑ\,!!鬛焈c\8 IR\^dfGyyб6Ԥw rlaaVƕ##w_;P1U|b \ed5.(ʼr9"eT)>D|4?|$d   Upt  %, HIWW W 8W W %W &W'`W)W**W,D,\","/"(080(90:2@>hB?hJ@hRFhZGhpWHiWIk(WXkYk\kW]mW^qkbsctSdtetftltuuWvv\wxWxzWy{pz{{{{| Copenvpn2.4.3lp152.6.3.1Full-featured SSL VPN solution using a TUN/TAP InterfaceOpenVPN is a full-featured SSL VPN solution which can accommodate a wide range of configurations, including remote access, site-to-site VPNs, WiFi security, and enterprise-scale remote access solutions with load balancing, failover, and fine-grained access-controls. OpenVPN implements OSI layer 2 or 3 secure network extension using the industry standard SSL/TLS protocol, supports flexible client authentication methods based on certificates, smart cards, and/or 2-factor authentication, and allows user or group-specific access control policies using firewall rules applied to the VPN virtual interface. OpenVPN runs on: Linux, Windows 2000/XP and higher, OpenBSD, FreeBSD, NetBSD, Mac OS X, and Solaris. OpenVPN is not a web application proxy and does not operate through a web browser.`jcloud101openSUSE Leap 15.2openSUSESUSE-GPL-2.0-with-openssl-exception and LGPL-2.1http://bugs.opensuse.orgProductivity/Networking/Securityhttp://openvpn.net/linuxx86_64systemd-tmpfiles --create /usr/lib/tmpfiles.d/openvpn.conf ||: if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in openvpn.target ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi # try to migrate openvpn.service autostart to openvpn@.service if test ${FIRST_ARG:-$1} -ge 1 -a \ -x /bin/systemctl -a \ -f /etc/sysconfig/openvpn -a \ -f /usr/share/fillup-templates/sysconfig.openvpn && \ /bin/systemctl --quiet is-enabled openvpn.service &>/dev/null ; then . /etc/sysconfig/openvpn try_service_cgroup_join() { local p="/var/run/openvpn/${1}.pid" local t="/sys/fs/cgroup/systemd/system/openvpn@.service/${1}" /sbin/checkproc -p "$p" "/usr/sbin/openvpn" &>/dev/null || return 0 test -d "$t" || mkdir -p "$t" 2>/dev/null || return 1 cat "$p" > "$t/tasks" 2>/dev/null || return 1 } if test "X$OPENVPN_AUTOSTART" != "X" ; then for conf in $OPENVPN_AUTOSTART ; do test -f "/etc/openvpn/${conf}.conf" && \ /bin/systemctl enable "openvpn@${conf}.service" && \ try_service_cgroup_join "$conf" || continue done else shopt -s nullglob || : for conf in /etc/openvpn/*.conf ; do conf=${conf##*/} conf=${conf%.conf} test -f "/etc/openvpn/${conf}.conf" && \ /bin/systemctl enable "openvpn@${conf}.service" && \ try_service_cgroup_join "$conf" || continue done fi fi rm -f /etc/sysconfig/openvpn || : test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable openvpn.target || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop openvpn.target ) || : fi/bin/systemctl --system daemon-reload &>/dev/null || :a %P)%Fjb -5 +bFBJd  {-1wBp {5 >>?* .| h9SAA聤A큤A큤AA큤A큤A큤A큤A큤A큤A큤큤`f`f`f`f`f`f`g`f`hYIYIYIYIYIYIYIRYIYIYI`YIYIYI`YIYIYIYIYIYIYIYIYIYI`YIYIYI`YIYIYI`YIYIYIYIYIYIYIYIYIYIYIYIYIYIYIYI`YIYIYIYIYIYIYIYIYIYIYIYIYIYIYIYIYI`fYIYIYI`f`fYIYI`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@rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootopenvpn-2.4.3-lp152.6.3.1.src.rpmopenvpnopenvpn(x86-64)@ @@@@@@@@@@@@@@@@@@@@     /bin/bash/bin/sh/bin/sh/bin/shiproute2libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.15)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.2)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libcrypto.so.1.1()(64bit)libcrypto.so.1.1(OPENSSL_1_1_0)(64bit)libdl.so.2()(64bit)libdl.so.2(GLIBC_2.2.5)(64bit)liblzo2.so.2()(64bit)libpkcs11-helper.so.1()(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2.5)(64bit)libssl.so.1.1()(64bit)libssl.so.1.1(OPENSSL_1_1_0)(64bit)libsystemd.so.0()(64bit)libsystemd.so.0(LIBSYSTEMD_209)(64bit)pkcs11-helperrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)systemdsystemdsystemdsystemd1.113.0.4-14.6.0-14.0-15.2-14.14.1`BZZ@Yܶ@Y@YMYA%@Y6@X@XXXXBX<@WRW1@V^VqR@V`.U@ŬUUv@TPT|X@TR(@Reinhard Max max@suse.comrbrown@suse.comndas@suse.desebix+novell.com@sebix.atndas@suse.dendas@suse.dendas@suse.dendas@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demichael@stroeder.commatwey.kornilov@gmail.comastieger@suse.comidonmez@suse.comidonmez@suse.comidonmez@suse.commt@suse.commt@suse.comidonmez@suse.comidonmez@suse.comidonmez@suse.commt@suse.demt@suse.deidonmez@suse.com- bsc#1185279, CVE-2020-15078, openvpn-CVE-2020-15078.patch: Authentication bypass with deferred authentication. - bsc#1169925, CVE-2020-11810, openvpn-CVE-2020-11810.patch: race condition between allocating peer-id and initializing data channel key - bsc#1085803, CVE-2018-7544, openvpn-CVE-2018-7544.patch: Cross-protocol scripting issue was discovered in the management interface- CVE-2018-9336, bsc#1090839: Fix potential double-free() in Interactive Service (openvpn-CVE-2018-9336.patch).- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- Do bound check in read_key before using values(CVE-2017-12166 bsc#1060877). [+ 0002-Fix-bounds-check-in-read_key.patch]- Do not package empty /usr/lib64/tmpfiles.d- Update to 2.4.3 (bsc#1045489) - Ignore auth-nocache for auth-user-pass if auth-token is pushed - crypto: Enable SHA256 fingerprint checking in --verify-hash - copyright: Update GPLv2 license texts - auth-token with auth-nocache fix broke --disable-crypto builds - OpenSSL: don't use direct access to the internal of X509 - OpenSSL: don't use direct access to the internal of EVP_PKEY - OpenSSL: don't use direct access to the internal of RSA - OpenSSL: don't use direct access to the internal of DSA - OpenSSL: force meth->name as non-const when we free() it - OpenSSL: don't use direct access to the internal of EVP_MD_CTX - OpenSSL: don't use direct access to the internal of EVP_CIPHER_CTX - OpenSSL: don't use direct access to the internal of HMAC_CTX - Fix NCP behaviour on TLS reconnect. - Remove erroneous limitation on max number of args for --plugin - Fix edge case with clients failing to set up cipher on empty PUSH_REPLY. - Fix potential 1-byte overread in TCP option parsing. - Fix remotely-triggerable ASSERT() on malformed IPv6 packet. - Preparing for release v2.4.3 (ChangeLog, version.m4, Changes.rst) - refactor my_strupr - Fix 2 memory leaks in proxy authentication routine - Fix memory leak in add_option() for option 'connection' - Ensure option array p[] is always NULL-terminated - Fix a null-pointer dereference in establish_http_proxy_passthru() - Prevent two kinds of stack buffer OOB reads and a crash for invalid input data - Fix an unaligned access on OpenBSD/sparc64 - Missing include for socket-flags TCP_NODELAY on OpenBSD - Make openvpn-plugin.h self-contained again. - Pass correct buffer size to GetModuleFileNameW() - Log the negotiated (NCP) cipher - Avoid a 1 byte overcopy in x509_get_subject (ssl_verify_openssl.c) - Skip tls-crypt unit tests if required crypto mode not supported - openssl: fix overflow check for long --tls-cipher option - Add a DSA test key/cert pair to sample-keys - Fix mbedtls fingerprint calculation - mbedtls: fix --x509-track post-authentication remote DoS (CVE-2017-7522) - mbedtls: require C-string compatible types for --x509-username-field - Fix remote-triggerable memory leaks (CVE-2017-7521) - Restrict --x509-alt-username extension types - Fix potential double-free in --x509-alt-username (CVE-2017-7521) - Fix gateway detection with OpenBSD routing domains- use %{_tmpfilesdir} for tmpfiles.d/openvpn.conf (bsc#1044223)- Update to 2.4.2 - auth-token: Ensure tokens are always wiped on de-auth - Make --cipher/--auth none more explicit on the risks - Use SHA256 for the internal digest, instead of MD5 - Deprecate --ns-cert-type - Deprecate --no-iv - Support --block-outside-dns on multiple tunnels - Limit --reneg-bytes to 64MB when using small block ciphers - Fix --tls-version-max in mbed TLS builds Details changelogs are avilable in https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn24 [*0001-preform-deferred-authentication-in-the-background.patch * openvpn-2.3.x-fixed-multiple-low-severity-issues.patch * openvpn-fips140-2.3.2.patch] - pkcs11-helper-devel >= 1.11 is needed for openvpn-2.4.2 - cleanup the spec file- Preform deferred authentication in the background to not cause main daemon processing delays when the underlying pam mechanism (e.g. ldap) needs longer to response (bsc#959511). [+ 0001-preform-deferred-authentication-in-the-background.patch] - Added fix for possible heap overflow on read accessing getaddrinfo result (bsc#959714). [+openvpn-2.3.9-Fix-heap-overflow-on-getaddrinfo-result.patch] - Added a patch to fix multiple low severity issues (bsc#934237). [+openvpn-2.3.x-fixed-multiple-low-severity-issues.patch]- silence warning about %{_rundir}/openvpn - for non systemd case: just package the %{_rundir}/openvpn in the package - for systemd case: call systemd-tmpfiles and own the dir as %ghost in the filelist- refreshed patches to apply cleanly again openvpn-2.3-plugin-man.dif openvpn-fips140-2.3.2.patch- update to 2.3.14 - update year in copyright message - Document the --auth-token option - Repair topology subnet on FreeBSD 11 - Repair topology subnet on OpenBSD - Drop recursively routed packets - Support --block-outside-dns on multiple tunnels - When parsing '--setenv opt xx ..' make sure a third parameter is present - Map restart signals from event loop to SIGTERM during exit-notification wait - Correctly state the default dhcp server address in man page - Clean up format_hex_ex() - enabled pkcs11 support- update to 2.3.13 - removed obsolete patch files openvpn-2.3.0-man-dot.diff and openvpn-fips140-AES-cipher-in-config-template.patch 2016.11.02 -- Version 2.3.13 Arne Schwabe (2): * Use AES ciphers in our sample configuration files and add a few modern 2.4 examples * Incorporate the Debian typo fixes where appropriate and make show_opt default message clearer David Sommerseth (4): * t_client.sh: Make OpenVPN write PID file to avoid various sudo issues * t_client.sh: Add support for Kerberos/ksu * t_client.sh: Improve detection if the OpenVPN process did start during tests * t_client.sh: Add prepare/cleanup possibilties for each test case Gert Doering (5): * Do not abort t_client run if OpenVPN instance does not start. * Fix t_client runs on OpenSolaris * make t_client robust against sudoers misconfiguration * add POSTINIT_CMD_suf to t_client.sh and sample config * Fix --multihome for IPv6 on 64bit BSD systems. Ilya Shipitsin (1): * skip t_lpback.sh and t_cltsrv.sh if openvpn configured --disable-crypto Lev Stipakov (2): * Exclude peer-id from pulled options digest * Fix compilation in pedantic mode Samuli Seppänen (1): * Automatically cache expected IPs for t_client.sh on the first run Steffan Karger (6): * Fix unittests for out-of-source builds * Make gnu89 support explicit * cleanup: remove code duplication in msg_test() * Update cipher-related man page text * Limit --reneg-bytes to 64MB when using small block ciphers * Add a revoked cert to the sample keys 2016.08.23 -- Version 2.3.12 Arne Schwabe (2): * Complete push-peer-info documentation and allow IV_PLAT_VER for other platforms than Windows if the client UI supplies it. * Move ASSERT so external-key with OpenSSL works again David Sommerseth (3): * Only build and run cmocka unit tests if its submodule is initialized * Another fix related to unit test framework * Remove NOP function and callers Dorian Harmans (1): * Add CHACHA20-POLY1305 ciphersuite IANA name translations. Ivo Manca (1): * Plug memory leak in mbedTLS backend Jeffrey Cutter (1): * Update contrib/pull-resolv-conf/client.up for no DOMAIN Jens Neuhalfen (2): * Add unit testing support via cmocka * Add a test for auth-pam searchandreplace Josh Cepek (1): * Push an IPv6 CIDR mask used by the server, not the pool's size Leon Klingele (1): * Add link to bug tracker Samuli Seppänen (2): * Update CONTRIBUTING.rst to allow GitHub PRs for code review purposes * Clarify the fact that build instructions in README are for release tarballs Selva Nair (4): * Make error non-fatal while deleting address using netsh * Make block-outside-dns work with persist-tun * Ignore SIGUSR1/SIGHUP during exit notification * Promptly close the netcmd_semaphore handle after use Steffan Karger (4): * Fix polarssl / mbedtls builds * Don't limit max incoming message size based on c2->frame * Fix '--cipher none --cipher' crash * Discourage using 64-bit block ciphers- Require iproute2 explicitly. openvpn uses /bin/ip from iproute2, so it should be installed- Add an example for a FIPS 140-2 approved cipher configuration to the sample configuration files. Fixes bsc#988522 adding openvpn-fips140-AES-cipher-in-config-template.patch - remove gpg-offline signature verification, now a source service- Update to version 2.3.11 * Fixed port-share bug with DoS potential * Fix buffer overflow by user supplied data * Fix undefined signed shift overflow * Ensure input read using systemd-ask-password is null terminated * Support reading the challenge-response from console * hardening: add safe FD_SET() wrapper openvpn_fd_set() * Restrict default TLS cipher list - Add BuildRequires on xz for SLE11- Update to version 2.3.10 * Warn user if their certificate has expired * Fix regression in setups without a client certificate- Update to version 2.3.9 * Show extra-certs in current parameters. * Do not set the buffer size by default but rely on the operation system default. * Remove --enable-password-save option * Detect config lines that are too long and give a warning/error * Log serial number of revoked certificate * Avoid partial authentication state when using --disabled in CCD configs * Replace unaligned 16bit access to TCP MSS value with bytewise access * Fix possible heap overflow on read accessing getaddrinfo() result. * Fix isatty() check for good. (obsoletes revert-daemonize.patch) * Client-side part for server restart notification * Fix privilege drop if first connection attempt fails * Support for username-only auth file. * Increase control channel packet size for faster handshakes * hardening: add insurance to exit on a failed ASSERT() * Fix memory leak in auth-pam plugin * Fix (potential) memory leak in init_route_list() * Fix unintialized variable in plugin_vlog() * Add macro to ensure we exit on fatal errors * Fix memory leak in add_option() by simplifying get_ipv6_addr * openssl: properly check return value of RAND_bytes() * Fix rand_bytes return value checking * Fix "White space before end tags can break the config parser"- Adjust /var/run to _rundir macro value in openvpn@.service too.- Removed obsolete --with-lzo-headers option, readded LFS_CFLAGS. - Moved openvpn-plugin.h into a devel package, removed .gitignore- Add revert-daemonize.patch, looks like under systemd the stdin and stdout are not TTYs by default. This reverts to previous behaviour fixing bsc#941569- Update to version 2.3.8 * Report missing endtags of inline files as warnings * Fix commit e473b7c if an inline file happens to have a line break exactly at buffer limit * Produce a meaningful error message if --daemon gets in the way of asking for passwords. * Document --daemon changes and consequences (--askpass, --auth-nocache) * Del ipv6 addr on close of linux tun interface * Fix --askpass not allowing for password input via stdin * Write pid file immediately after daemonizing * Fix regression: query password before becoming daemon * Fix using management interface to get passwords * Fix overflow check in openvpn_decrypt()- Update to version 2.3.7 * down-root plugin: Replaced system() calls with execve() * sockets: Remove the limitation of --tcp-nodelay to be server-only * pkcs11: Load p11-kit-proxy.so module by default * New approach to handle peer-id related changes to link-mtu * Fix incorrect use of get_ipv6_addr() for iroute options * Print helpful error message on --mktun/--rmtun if not available * Explain effect of --topology subnet on --ifconfig * Add note about file permissions and --crl-verify to manpage * Repair --dev null breakage caused by db950be85d37 * Correct note about DNS randomization in openvpn.8 * Disallow usage of --server-poll-timeout in --secret key mode * Slightly enhance documentation about --cipher * On signal reception, return EAI_SYSTEM from openvpn_getaddrinfo() * Use EAI_AGAIN instead of EAI_SYSTEM for openvpn_getaddrinfo() * Fix --redirect-private in --dev tap mode * Updated manpage for --rport and --lport * Properly escape dashes on the man-page * Improve documentation in --script-security section of the man-page * Really fix '--cipher none' regression * Set tls-version-max to 1.1 if cryptoapicert is used * Account for peer-id in frame size calculation * Disable SSL compression * Fix frame size calculation for non-CBC modes. * Allow for CN/username of 64 characters (fixes off-by-one) * Re-enable TLS version negotiation by default * Remove size limit for files inlined in config * Improve --tls-cipher and --show-tls man page description * Re-read auth-user-pass file on (re)connect if required * Clarify --capath option in manpage * Call daemon() before initializing crypto library- Fixed to use correct sha digest data length and in fips mode, use aes instead of the disallowed blowfish crypto (boo#914166). - Fixed to provide actual plugin/doc dirs in openvpn(8) man page.- Update to version 2.3.6 fixing a denial-of-service vulnerability where an authenticated client could stop the server by triggering a server-side ASSERT (bnc#907764,CVE-2014-8104). See ChangeLog file for a complete list of changes.- Update to version 2.3.5 * See included changelog - Depend on systemd-devel for the daemon check functionality/bin/sh/bin/sh/bin/shcloud101 1620821610  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVW2.4.3-lp152.6.3.12.4.3-lp152.6.3.1     openvpnopenvpnopenvpn.targetopenvpn@.servicetmpfiles.dopenvpn.confopenvpnrcopenvpnopenvpnAUTHORSCOPYINGCOPYRIGHT.GPLChangeLogPORTSREADMEREADME.IPv6README.SUSEREADME.auth-pamREADME.down-rootREADME.polarsslcontribOCSP_checkOCSP_check.shREADMEkeychain-mcdMakefilecert_data.ccert_data.hcommon_osx.ccommon_osx.hcrypto_osx.ccrypto_osx.hkeychain-mcd.8main.cmultilevel-init.patchopenvpn-fwmarkroute-1.00READMEfwmarkroute.downfwmarkroute.uppull-resolv-confclient.downclient.upmanagement-notes.txtsample-config-filesREADMEclient.conffirewall.shhome.uploopback-clientloopback-serveroffice.upopenvpn-shutdown.shopenvpn-startup.shserver.confstatic-home.confstatic-office.conftls-home.conftls-office.confxinetd-client-configxinetd-server-configsample-keysREADMEca.crtca.keyclient-ec.crtclient-ec.keyclient-pass.keyclient.crtclient.keyclient.p12dh2048.pemgen-sample-keys.shopenssl.cnfserver-ec.crtserver-ec.keyserver.crtserver.keyta.keysample-scriptsauth-pam.plbridge-startbridge-stopclient-netconfig.downclient-netconfig.upucn.plverify-cnopenvpn.8.gz/etc//run//usr/lib/systemd/system//usr/lib//usr/lib/tmpfiles.d//usr/sbin//usr/share/doc/packages//usr/share/doc/packages/openvpn//usr/share/doc/packages/openvpn/contrib//usr/share/doc/packages/openvpn/contrib/OCSP_check//usr/share/doc/packages/openvpn/contrib/keychain-mcd//usr/share/doc/packages/openvpn/contrib/openvpn-fwmarkroute-1.00//usr/share/doc/packages/openvpn/contrib/pull-resolv-conf//usr/share/doc/packages/openvpn/sample-config-files//usr/share/doc/packages/openvpn/sample-keys//usr/share/doc/packages/openvpn/sample-scripts//usr/share/man/man8/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:16267/openSUSE_Leap_15.2_Update/af9da428d5d26d07303ea3b13cd46e8e-openvpn.openSUSE_Leap_15.2_Updatedrpmxz5x86_64-suse-linux       directoryASCII textELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=b29a01edb5a5156b0a5c7ab28806decd994c7548, for GNU/Linux 3.2.0, strippedBourne-Again shell script, ASCII text executableUTF-8 Unicode textPOSIX shell script, ASCII text executablemakefile script, ASCII textC source, ASCII texttroff or preprocessor input, ASCII textunified diff output, ASCII textAlgol 68 source, ASCII textPerl script text executabletroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)RRRRRRR RR R RR RRRR RRRRR]xF 9utf-8c407efb6ad9e959dcb603508c845ccfbcd4fef7a29bb878e0d0a813be9494174?7zXZ !t/]"k%jq.SET&b8Ɣ"@5k7~C;(q`=#s堘BMc7& fpYncZRobm듔v񤁉 -a>z]ì a]@  D^>m'8Cf=AOZ9qWQ@,znZ'Ḩ)tl8kT<" |ן[Fd7mVLbFeD1=[g86]$`Oپ9bI1_}e+Al5;!hWi%דX])x@9o&[_ 9hr>,iK2ámFZxBI`t= Uh=_Rũ;;cBů|Z%PF`CB&~. 4K'2Qg<_ȀL(wbx.Tuo"t&~<}&wvA?j<ԭQ` 7Mmwܝήw*Ms%vDg&|]3ԙ/aBZNK*(ZJV& }tB;(<|_瀭xmunQǫ3g^vg,G0v#F4!|V9AdII4nS/eYS`.A_"`B1>NG9{l 5ӊ.Fs QO%?K 7x*CKQ7#ȐV SB#yEw8gk0ktP:w,R.MDP(!b)I|f۵"96ycJ&8&I2WCg" XIXa/*1</X8Ly@*2sJ7ymK[\P7v8M;r]w54Ur8&5m3ݧ I|عÛtIGߧF@quB11p ajNacEyT b (婒`; pNKW]2U q[qgA7G_a$CQ-4zSWNc |ݒj V%)RT.O,|u|%ΥJI:,] ȈY I 0Z<ܴ TN+!ҧp^ RvȘD ivXAT9R[Yfdգ&ci .Do`̡$"lԳF S{ P#*n"{}Ucֳ.С}i(wrk/H Ԓ}iGr:C(x<$p_ڴK[9J ^:¤/Ge/ݡѭ)R?d_d L_4.K%O[6J6Рth8 ˄ ǝ zg$1:>4^۬x*rl͍(?o]9hMKME;/D4K^Wf#a}J? L4\y1.UQIoB/ +k =UCZ[J'͗?nk9g~w?e5R0IL WAeGd&r+G`g89~+Yτ4zǓ40B(itg x6gJq&FF'MMH &p4 Ngy_Nqx r#"IX O-{Z٤rfAֻ{w:C.P{rge$A.N) slI3~ѓ{跺2!ǂQ}F4A̰mkŖɅ9NNX.VIRGÀޮsS/_&n<5C@R%xibN2Z΋wlL4@gtn>SaWHb&n"G'>^=]J%!Y rX|$Uj%U`$ƸKInjNDꉐ$b(yPw`Cy0?i:F2 =v}!qSγMՈJ_)F4&h$! XeZ_L\` عX \c;0%D+S9@+BhZIC 1䞎X2["3G.r\oWs:SOAd!4՛ur!w(@iGkjλl$%lms,?pYt%[Ew(]A4A60Q2Jْ}nwWuzc?3dG f#5c|l܆Cq;C&?|({.Mչ`E"\eŧ Nv )-29ȼ7''`)H^)00O4& hm`>6N^$FDjLA1N|t{NsjM(fκH$$&7^SP6ɋ8EԳ,^fzճ| I(8_&!ѫnX6Ks܌$k,$Idž^On}R?Y > Ǻ D9ZVniHҔ#}T>% 6qK o,V Ѷ6(﶑.&ULR|Y(諙?(ӗ&eYI<*v_q&2^xG)%w yk !O` N)ȆŇO(!5*dHql=Yxh&KVu&PūoA4m*> ԼAy┨=Bpgp$\P.C2={++P w6i3ƙ{MtoȃAttŔ+Cu?Jp{>?Y_)༡"x1/ؙd%n4x)t( úpBũsݕԅj `liIAoJM<%"H fzʺ-@fbЖn2#`|Jͦ`+%lq;63H͆plOFRݶ qp *`q|Og(YL)#K%M5Gj5 +o 1Eh#,{BCL?ܪF[RyB,4)\9#Պy\*2 /I`ʾz!׊ `A,yw9C"Ar<1.^Bߤ&}XEZp,4ل paW5y?2&l$z䌱^w59ʟN!QzoIa׋g%|=,d*KY*rmn3Rn1_|-Q4ǔ݅QBkß1XtތF\ Y+{y]!Ģcy'JVc+>xp^~L!Zd=쁒z3SjMjgnDy|VRʄ;j pl0n@/_nw]*B'>Ϯ},~C~'^pEl̗3Wy;RM%4vWxDW荹Yc:̅p&'圜}ݾՂ;#@.Y_©wCMpW_7b(ФcyNr5ѣoN%w}={8`Q$H`rswKٟQA`4A[U+g+WdDi<-O ٌ+zQc{q{Hw8m}o,YqY'^{4O~y:՞uYRڿilԦXwJB $P?P6p8f<?fZH$1"OOկ&%UnuŲ|{2օar qh:{7>FODԔ`XIeC/cS=jsxF!u1z]mklg*dj>U r| ItwqwwJ=hƫL}?))Lշw/L@ ݒCKJoOZp0]S+;TN?)ѓA bk}z3 ȀU' jKS$߾A zdnH@ZjU7 T~J7^fy;CX#Q4yXϝ[:ۑfAc CZ, `H$?HNK+9A=b='BϚj.2]uYJ}0&8v2 g,@c8 >cKPGr05Z, |[QŢO?-Ʋhq2f5 "y*ڭT7'u{ēj01fjX~-$gr)ugW+a!=r( UVxiowo3 bJ;Iύ~G%|^)^O _Q3HZ2)m?,REm=Us2>Ǎ-[e|kx$D3>a@VFyk2yv}zD\EZeߙ_-Eyu]8؊ pz÷p6R)S&c.S(Ew֠l8TOf"s&bS (*(SbZUs(ט}AX pdV:ԪPdCB@sMFoC:4*dݓٳ0J1IqUwvR < C9$t#ҊOTByE["u-yxW0F"Si(mzMfy`/HrR dū(c$׈(%Su\zLgƢ8`#kڹ71D%ۦSnLT12!p/G+Ӑt7/#.w#$+7o$oeԮ/J'$+DW8B]8$#~L"5~ y(aD3,cKق{voQߝHL=@wm̑ bBgjCT\'ý`hRJQJZdB Zd@yvoi2ëKUEƤV"חp͗VT/=@E̐Ao/=>3?9QAsJG°GW6h3Xؚ!|Rz*F[ 6DwҌDCjlu{wz% n_|;[^3?nj̰Zu#KkS M \WZ = 5PxwҍyTr*:UnwQç%߿*v-ky|Lb͵$_.NIl;k0ٽ L-%pp?u[~oa^a윐o.;lU֒56 ا3=N-*dp30ϯW((=F>V0yhvd23䓚\;w=wVULJܛMuZz6 ~ټ>>A WӧɭRhyucrʨQ^zn#ab RGr8"GZ ғ֜1 Ӷzi ڱobZLCD66tGqg )9۪Dҏ˲AV9cЖfa'EW_._ oÃ20$G|XuI`_f?r ˽e:GƌՆg&܎͖ 1p傱C--5l3Κz?Ru]1*E YZ"N@~ ӣѦeJS^5zǟ\)n鏲`@NfGEzv }ճH%6 R#{*7> pG&Jxݩ˼=^(=ԉFf9#/l abjTH) G͛*J\\Ԟ !#L@Bо*-v?{T@[N~j(DؼpŴ{7LJc`6VJ&9Ed|\HNcBa\56S Xk:-ws~Ć(^GJc/4}*nȕ`&e1'TiH5˴ V#Z}4%r]H +U c{|΃mʸKIB&@z[B.j"=FuwƍC=h#cֱ=5K0߈PwsϢ~!M]vwyb%L0eO}%gQv*#n>jҰ-/) C [+ݑhloP,ίE6rJyV^@=zS9[6bxM3"`g˟o5 Vy}]N*\ 0BgVO PZ'W)z.1 ɒOJxLogvV@{uFdxA?&͏3,zjg -Vl^fa8+~M̐ב41ZrZz>TN#zs`2vC] ALڸE9lv YnUWX{[//ʬk:F b2tf|֦h%绬h}wV"pni1o'ūӏ0 b+P}ҮPw靳CLs.(giNE*{]cOXTWuxtL&Pxu}xs3wq@ob*t?@yCK(dDqR= {4#1>}uk`7b2eTƵMd)wBB%̟d|TBN2/;`b' ЋC^_7t717WI—}ꆻ;:d<=V6ҷyS1n-R;JC"0u/pRe唵|vw|Z|~ 'Cދ62g-E!g2_~@Z6* LkQdd}|^X֫Ͼy+7u.Y '_Bd'\HG2Zgድ7nh륿f0ri=[Pt* K9(fj ѸIYyv*iMÌϡ<|A(8݀]4YP)}S?(H+ށs]ӻߛ.,=k1/ {ngs /j. 3Y X= FO~AsU]*>\vwFGLB8NMrjB"iSgai)'Ja9uE:!!_Lt R$[{v%Q/ӏoUs2g8ZP,6o$^k$ȆjT\QhH ue~Ӟ//6oin`\c o ڕ& "TlwOK=Lx~ѻ 'b < Cn+AsN oq]cEwa5MeM]c>:t5ɅJΝ>umҡ@yf^CF+%9YA2KؑH,)g`;}0X kt,>iRjhrjp+h:TXxiJQP媈`7̵S(fExAd;}1@4!!u}}_6G3K,t{P^ z\ OB`a%R=|)NC a1, svV#3A/BI)'4h\ֲ"j쫖sEzIy=BxRV);o ٌ8K~Lx Km:0ln?N֟efoҋG`<-U1*JW+k ݚ aj5xc]杴 px]8nFVn,iHW_"h\Cb1"$`sZ`݀7Gl;\ жإڨl5 PMiØPUxܜ ^sdQ|hx^wt_! 1!*k0 *tySc.fݗYz}tBpԘ0!ìgCl ?=y,o$(dV7d Vd-|<2:H UK+:,Y3!dIL 1V4hnMnb UآYmwxsoF ÿʶ=y'*8N Hȩ7 .mR8.|ݛ2 m?nwBX˨=W]N[d'2gQDNAJ(M|k~˭Y7uXiB AW=4M~vBn˒d i(F1O*m)1yDX2׈jC`!v2>΅ud0>gA B[ ;-,5)SzFd0kZ/)( Զ$Kh9F#<~v_VoΌ8L4J~Z6i$=Iǽɐb4["RQnaY}fi#q)X0%B.Br(nDW"O]=u#F.9E6Q?szK5Wm ~ۤA.J_Nַuqʋbx`G)tt'+_Āce|%q+`gf!U8fh$vY\ek <6>D_Fٺ{=-r.7?D~4YH :!};Sd֍XSz(q'*8wPЌcarTظ/iIt!.B{j#?~\rhm&^!~uqP9ٓd:TVS살dNG ZT"RS.R?8I,5 +UKTXGCiP=-+N ]8:ZM봭KV4UliLЦZIjLݨ^\cߟ)1B^QBЫ .5Z&a*IZJ*$dۇ6AHrUYΜLFb%U_QYy!þݏBDDFDQ \.5a (ĸ+ƅL?(3A1:m)B!8mR&hQ^1 $x.<*_Pmԉ@n 6ݓJJ =W;Nfj0wt`Щhtk.So3/8Bܟg(b1ʽTja~{r")'t>)`@ɅWf9]i)FE^M2EYUlkPp.Ua5r`3)~e 42 ffͪPG/MDEZ>a\i7$N3KL$\Y炳wFjX;t&Dȧ%v9edVX݉Jq%e=_e̴,lB??XcסDBewW_ll3eC+ @hv*DPo8Cx L`/[U#\$y  .#"E[ǔ6%q9th` ǁDU;lH\\@Q;`; 0XՍb^\}<c\\0HvIK4050;52;o=Q!uT$T(] BO|'ͼ2̭a6on{upggVZ>hU Ǐ_8T#˃wt--PS֌DE۾3- I&~@Rhp̷r-;F:~bb0._hqqCh2ߡ'[a=U~=%]98&zJ{s0[w]&q0z8Wp99hvR OוGf )W8'-.⊬ORjN@Hci/;K25NQ~'XS0 ed2ܖ@qbWk Ԥ nvX`T:oK:f4T8rQN9 Wy=Uws9[3 :t!:eBc0=C;sXZckNҭx_h*.UL!Y|&zƂ @5YM W;?!"'%SLpFTgd>,D;,4I[f# \Ɋ+u8b)~ڌ'c'=?6z`)<.p }c=d*CGZ"3mQDuȢ!3DŽ<ZÔ֌K5Wse]>Y vf+Cfc'?o|^DTG쒦  rsUE)EW/lv]Dig{E{@k؃loK@4P:kv_OÃT161;j"C sqd/WJƵ:x gߧU8yDWP 9|ʠ;OK,][DV:^oh%W $^@b2*}ofJ6Ej 9$ e8"Q ݭ9R:0\^i"}纝kg>c?f@L wsn1"VfVLUdK!xGV+JC3F~툼q>yeOn{U2Uݣ`ŤM-l Y8˃Vxp3|̛_N|v[Ȫs\R}ֈ#syY{75% hSYb-:z33U"5V9dmKva\Yu 1q ^pB6(6լooNANHآTN-(MB]ecGrn"S+m󏙳g[C^"̱KBn'0qhMs2\G5ЄR2nZ~dS Lh[;{Y&u*'Ǫ o Lx)Kh1*sU4mkq4u ?H{U _Pn1lYhmcH.!9On)tLVZ9Y]q(>]?n}ZAȶQZn pҡ\#v(`eޢ܍H b6kqW?qX5pb{* JEӤ`a?9,YiL攛E57:Xβl$wGEAu떯{ᮧFW;2@UaN$,^~Ke@靵;9in_^3Kmʂ.>NvS gBbץLUY'>gGcŝJl"uAZ,j  ֝{6)b,ўS_[l~lű@ ig/ԜQl6pGOxpc\bFAu-dȇDV8P C7Q{ۣk`E{HXͧ !HD4b5`B~*_oYs&c넫R 9 v9*k:E`r*oyjz!ΝR-8 *!KRPLF:$MiN倨+IkPm?BHDHLB&A@yX`]7Q`JZCS\˫33G1٬ϐnT#q'jGf_ /L78$D]*i \i䱁ke< 4*s(  ݸYP￳}ZF Uie Dn\Z, ѿ& `@Tr œ> T|9kUW e#įTcS&(׮)Xaͭ+HmC&gl29RuyD9|/r 0!%_$]5ğVv-)m\*5ym #uJ $ NJ uP{GLP @']_cZnŖ2 9vLz`rChQu>Rh9'lʍC$k2w`6X`qpdf '(-27AāLkjNoa_U?E)P/ /fΏK-݊dCm:X 50M7KKY,!,D!iTJ6$>i4$?&,MuUOFQC1*ߘ9l2T^]̢CVX1cXOgקՆ=j%'y8?\ER &ZPZHj|PwFILZ/nЍwfԈ!j--ʑ=o "[Ѳ]00 zE :6+?O% ʒQkIuPܳü CPW!\bҠXgU@0(rUF I`A_j hU^C ,|!@Cl 򑝷pz|C1~ fX[(g(t5VNdև$er)d\`|Ƨ4ݵ)ڨ;& Oio^/od3(0O=)*~<3`  1OkYXUό\b1)'!²O(m`AazH;, WJH &s{Ds7x|,1^z} 5ݏBoWY_&F>Œr6(- sǦPJ{bXae)WgpqT3Pd!xm#p9'.3k*8Wi 'iBrbtt0e.8Kor!OsRJVS1N^z4t(Fyz.*aC cRט!;RQJ}b*egMjef- Zfaʔj!02ԱP,嵾Ҟ̚k0I/.fA R nPN :=ٳBpMj9To,o&cu!<_w&hm"%/I6<#R'\Ot7fmӮd*dHNŔ x, )KwԎ-J1[c,O5+];).[(AqB=c?Y2(r.@ԯV mX2osy112iV6 7rkci1c % _Y6 %?sA-b@% s6Lk )d tb,^H|qzї]e&bټuCd^NtD,mꀎH{&T`M`HoCJ[Pg2aڀөWi9l4_ `J6r}͸ר4 -[r ߎ ԉzK&HڴF)!O6)`o*D\XDp}낃msl IG,XK1g:1h`(H7`3c(+OΟo6R.11''jb#Ҍ礷 ! ]j-lk'5ڿ2Za#0ς}GF<f@c텞MЗ|Z*MP뇢 rfFu-(zؒ3vZ^t2O &/߰Hy=@Bq Va>,Y[\\=W3V޺)S/ +48 32t}}Տ#u z=7na.hO!TY258N/n+|0Ӽ]g?rP<vP2XTW8TSO(=)ok+(RxU΃@X4f`ǦR\d h3vSEc!g*s,4YW-_Q$,Utڞ6bYjwF%91EzG4 M/w k"o5hs̠ᲷJd>Kx#L, *sh{*BNi#;iYu@oyXT6!7jCêUUvvSY <4\К%m[~=Pobz,+e RQ P|ÅHĹ_=^;Vz6ؖw9P#9Y^2}<Ң^l*]B =U`ZC-{έ=&YWo./y'I?i-[#$}T Ho)枓 U0W^7[pl4Ё9pb-.jjui}L5Q7\9%+ۂpXpC рg'Wے?3#0m],L xL)$B@,4l`fU*oV}/7l#)W+^B6gD9ӑy*N@p+tĐ; ob5<^khLIF$e1- hoc o$EZ+{_#NCЎAM,yp2D\l(n]EizGl?A둰`qW[ '(.M.i8&؞C?4)It+#z&/OaNG4Wg;7e@F2bB'}9+"hfWpVo%Ֆ1 2{(3[(W, -,pdnrPTii0:i8QS4 n8+8$t_f NvO*lz\GA67,JAQ>\}>*p;R 2aN^hIQ+ӶAhIWg؏Ku|ez0(|\_pu7` ?\(![?1U>C>v|֣)N#%gm(,#鼶dk9V5U. m zyΙN<;39t6ev &#캹9-:tHNGo-3[C# Qtp;HD} v@E,7 "Wj ⮥\G0ryDIpvuGf5 <۫a<>Vl]t]ݥͷ< *o殒`O[kv-tSK̮E#I!UW$qDSe^ۤB*ȭjqK*5 hVv:՞mE,Wy>;y $bI${KlC;I(ۗNQ"q`?nSb¯ b8ޒ" HϿ-9L`)ww j~ERtb9w҄G&АsDWʵjnn^=&4Au FV<#DԶb D/0F(~mWdC:;˽mCqQ 1+1GJFAk~v & hH0Af;˽jWUDM^ݩP~~| ѶG{r"9EzU%MhpBj1j=SYL'q~sD|oߞQE~p6Oa4P9u#(eD`WU7 4dAd{ST5 )x1sGj>\ߒ\ q` ,X޽;^[&W `. ᆴUD1FڑCms|yR(' Ҕw վ\ABe/SMb uviֵ8$~oZ ޓS rDicѷM T^kA +=hࣼ ĥJEQqQ| 3{`9-Q5DK2+^nWowe7NrQ(7ޒ"w Bi˲ieA&; ,$,S75RwXrp,ehXGi֋gfNZ+^ ü˜9PJΪ Pvp@\&@̳+aVR>L@,;um"eq(bP@SO2B:%6˃5^֬@DJǥGR,!9.%F8wGfgC)z0}xCX+9Ry (zk c|étbPl^j[̻WŽƗdj5IeL.?:ISay XR/Ƚ~0kpn~g~ L@\wі0-*7/@IgE Ìrx yw6p2mq*1+Zf44Z`ɻQWOz)u:g֫>Qg-^?t =ۂU6N|.b9-b3uv?鈴xkY7+873yXGKUo2;iЇQ pYI 8ڈXIe QL ]|f%q`/=gʨDؼzL_/ @;]pz2j}GϤ+\ ԹViGYʡc CWD[~a_>K[fWRlȨ0t$x,aWTA߇Dɬ>WD=5:nvC2*UZAκWG">È7K$^ [D;:q//bA}6~gGh-?~xE) xU)o# h&r`A8AqH{2rGW7B̙^pԘ Gmr+7'I$a#"=xmWGHK WVݣ0[vJUFe_4+m@}_N ~XW ݡIL_%Y P7ג &;p{* ]*>1 Ctmd!KcA;FW@aJrfM a㥠`֮4jAփ,e>1x/*BQC L!ڷuT;^Ewa=-PMڡQe.k.1@eAQ(;P\ajŇьp4wZiH };"ǰWܮ ñvL=эv0X pFGH:@4ș@3j8 %9rh6Xf2hy ;qzl z@:VB>pM Xd&01ZfVh iv#mv09tD'Kކ0dalca8U5P# ?'Nn3-\Zuk$37Jtm#B "%H R[ݐQkRl&UF67R&aQTwɽ3ͯe:O1L;׳EU7qHl-ǥr,U4,W"&>Vi b1L a0ӥeX8j{?BdbHy)#TTs ]ճX{2ė/##_< :@b4;9l0qRyd:3M\c).'Zmik w7zXCQݳ_v/mqkzp6Ԟtmt/KSqazh;.SݓtxĢe;țDcҰ9DQp@َYz%<0r 1wV}YH$sSݑWG5pҏÕ9KhW?9M XoiH?GQ>xso( P:[K )B(훻t2+&ǦU\y)Z6QxQqڅ~gP"eeԥ1I=)xc,KQN u)0(Jgqjs { :®!UF-Z8[k IjloDnPɒ*i< ] `DKivjlRq]Qbq[H*S2TZgwwPm(,Tޑ׋ϸVyIYX4Ƈy牯Tpr>y׭>^Ok1f7yiMC,#TDK4+*$ӏ? /]j=qܔ] P!ԅzﵨ] urF^p-77|ޕ6 4A)H\ZxC8Im*̝rem[@VqL48/컵%)xK !dG(+M go{6*ԍխKo a4NH mM)yR|66vICw58=(3e˞] ~p'.?/,)}Uh?:>k5s ,Vڟ׀{C*CU40Bpv2)F9)U{]ehr%=p[U>2㽇d&rxs{c71 x`n%zK%e]2P/ϕn6VMl+ΰaH^zKUKtC3C/jR}jw^58ʏ u`"NDƾ7/5ލuB8,X}T1ԥbɻm"9)BqoY#ID?ʉދ˛5۟R1枷ͦas]u˔Vl CJS@Į;/֓e#@cB:L00lhW8dw&{B6 jroExIMZՕ&0\`\bH `}}i!.s\ZP#j!˂AT zp19ƛboE K97,?X4ݎ:uu8eNWdZI(%RC*Z!JH.'û `1FCEYz`{?v^iǝH ]S:0n^\)wuCaI=N'c[9K{ 7/g.1&t}'4TfPMN;P/VU|Ie!5n# w'V~VRdRp#do[ɑFd_dDT GYCYB9 fj`1<~Ř$#B8\p7Zp CaW"s('lؾu)?DdH Zu~tՋ{qsR=q\&I~XO{pb^#@s^'V5e5Gfֱ5z楿OMqMdéx[ Lz6׹KpX(u9 j!fD>[K!Lk="lkثZ6l{ ϔicӟʝDT%R\Y-Rn]Ex++o=i|N)\*Jx .@Ca4R?Ki~=t+H'z,rޤ+۰Tme_ Nu&-770h P'VF6p#C~YcK_!sM1y9^q$mSNE)+ߢVH DM!*j!NR%^zNu =.Ik偲\>G M1zv͍QՀͷ|PEMC7TGSbUSyl*]>5[/zp-/e)+qԯ߳'trNln>)W|vC1j*8iN| jP( 4״_ `m-uS 7@!cɫTEd ;#aP]` h<ztCp9ޯ)f "=rciL6%o>@USS$؏OMo RIJ}!Fِ)2Ǯ=ZjPoOyՙ(X˘s$)ՓYre3Mg1`y*E8v"\vzm),<d7wz>[oA{MJ#SЬFyn"JQf%+vumbGfJ3&`:"Z] f[2z\j<Ot1T8:F7n!)0C!]L&c04~?*'=eS灆bfڽ qF"6kQ{sZ+8`(Q}eobOi1!'(~ô)9D!aJugGcɟE<{,C\5bd'F!~pk'rɰf9xlsݡ`f!5`*Hh8簥#i8E~o:mWK+x8GˏzBt44 {;_Ʈ0Ox]J: Y+JdXOM80rA蚵cY.v~i-1~[%/P0S'd.3em&b̟Es;DIcVgWd;q紋;,303n,<, ɛVҦblJFGQȈ+!9@g]k&?c?H$+TCߦPB}jAyg25xpbYLU)4#8Wt[)Rx\wn\j,pH)@@q'9p8X:Dg*# :f! LGK@܆9QS y 4F!?+/ JG^l/^ _F#V[AH+ K\AS[,fD^g+>:^ 1WuwsQ #ggy\غo 7EDMnn 4V@n.u_[#) ~)-gfOӦ9C~{%q<5d|۰֒ouNr\'@bCas4Ī,vK K|/mgkhWD|u[o꤭{h(&Bs=kh`ԐhosV[&M}tV8uVNC_`uIa~LR0A[w39m YBv.KF ׮+*h ؁P?myNb"ܣe2;!-VUe*ljMvB{ã/Z jts"q9޷Y1 u`CWws1uԑ`bkK * Ww (,֗䘵F׌3Pۙ;p#+{G+x:aFu,chv> KN|wVW_Kim!O(Ra Zʊ R:C:ƥU{ B_&X$iZt;༟gʦ7XVX>%v !2iSiOM{*毿EځU"ջZՖf?(mO|^Z#n' eP6G6!gЛ/t. 0j_=1RDBD4I8k{d~O| zξj{l^)*.ɫGPPLi2:jSa#\P0k;qǑ,λ~_?r+=žCs_=1 1C|YRfE#T0Kb L%cl8ⶑԿ 4I `9O2.4VfP sp;+=()W^r@m͊pVlVQ wf|"1#(/f*(KWfKsozWf/+Fd0#._M6>U͡U :~^>\U ÕWrkP0I>AZ?;Rڐ+H◉Z0;`z;j1YNsjvt! -.Nd~p;:1=x.*h=@-`YM60*q_n0ӟ @1Fs=`7Bfg!m#2OM7'̷ iJoLv`3ϑE(c8K)&`zm2q90Dj\Xwu T9>lh$z'] ݥxJaZ ʛpX A ˏڤISEّnr afEm}!12Z&'tmh k 1EHN;BT2)_5ŸJDCǞ[Ĭy[K#L4wbw=z_,)n!{7GLqX>ohjFn>w1L f\#늾{;˒M"&iA~qCd{kk:hrmJA77+|q"HSVuP ;KWDOR 5v!cBq;H>auAqs<䕩#tF&~ho:A.~F0FJ|ˆD`9dV$ CۑSߟ7-TMLExwϓy&L9Agү;̞ʃč`]]k>y;4j@3/z8x׈Cjf]_Ҳhsr EnQz2GUix-=Y]6$4YsQ'`O{,I'M*Y!| 02Fe oGtO#񔃏RhnMk?Ҵ3"b V>"92䕣Cȥp1q61En+' b}+ZL PH6.shVWL%lەca RMr w[_q_e#ju>䚇 m\7C˫цXv`@l_uWV%,0>BKckY BMe俺NUjZQ!ٳ˯`ea$!) #w v>0OH^[ _F͚ݝ5z al" BIoΚHF䚀JΛD{XSjzcf{&,VJЍYu'.+?ӡwt~w>}$ tYc}% fk6?nh?P}Ќ󔂵bZζMުmOP(E/3߯>y5b c䕴si T%LIYF5a\)Ndw = I1Ha%Etzq?~@|xm򷮒yo1־ڧyKrINm Ň4wH{D_BbW;u gwP9 Zs$5$eƔk : ~2?+c_t  ~Z-*P{%Pp)qI(O=j:V)9ueWD:+,4~IVay#Scio?f*ȕ݅H1 ѷS& 3>N6w$j XK)ިXp=F>S1h"]K#\oCx3/`G  xͻPؖpqe/s}~xF o{ q:p;Mƫ(V\ؓQ ]f/!+r?ҺT묈D ~k7w> *j:G(x+7s?o#©tVDN#5 M <,r}}㿓-kN (.l;}_ޣYw7]ͳbpGGP?}r+KG%th=_1ZfG+ui=a p> b 菤/K\jD(.B5_QwX~+i")vUJ ¯&ÎVyQ z&Rq8iՕb8j p&EPZjݾk)nb>_4=tG7"CXyU)R3! XZ*s'<*⡈qʺȦ(uICQxN␌ŧ^+dK;*0ݷ1S&ULj/'.Z8H X/uH#czKt 3$^}9(O>XҮS}#N?pf $FX=Z?ItZI%Oo$jB1 W:2s~|:<⎌^Pۭh?"1Se"U z8"tL l&7q[PP/F4Ӏd|؍Qd`zx(FK8U%/ ?d8FJ,NTm*_uX-९hE~{P?5 Rtg5|DBџC(A(2X{CK;1< 1֦(L`!q@EMn+YIt 1'A{ G:"!0f&n7SB߾lpeҊՓ8 EkX5ņ jO <q{Āz@6Yxh#+m98-s*v'+!2c(j=TpNTaD[G>G]JH&,n}Ö늟LvDZO3p>.q:!s+@D-ŵ'f#6-JUpnI>engL23ɹ[b}?SLDf׷L-'sArN_NeVX|Hw> Qn_!VcX$+jB,hx?y,&}M{]+6%9w #}+j55hY:}Qig1IIBPjր訯+lIs?$h<2&O4_5ϸl,Zq&ۡ S囧w!g )S It=㻘oM/n=\&douu\ #HXk߆֫Y*1<aTz =ۊmkAhT oQzd RoW(x|鱏r_2R A(N{nnYk<_ 7VY›X %|KR`*gY}Iȭm"(dPgd'hA~DEO#gbn|65dy54SB)7)=.cDIyq^(?W>, Rn)FhB@t9,fk]Td5_SMB75 a/ز6Y I-;!QIֆ m `ɓBHwz̐ kIؚ[ޏ+ɭt=w ԝ?"vsd' LJ}:7`N٩:LO=0 Gm'_ŕƜCZ|Z꾈ՃP=$ ݠB E;3ӏc|:-/* !h)خ۴*Bh 1@z &T^j >7̃d|Bt ew<7.OScdQ8P_Jy ,6v>_# {m Kt'Kw;?}H 묢[zۀZT+ivg'4<#,# 7c.V 7jЖ[3ZG^?!H'c _DiP>(U k.hPFb @JN3}`y]s5AHӓlKj+d/Rb3o뙪fJ>ҵE*u l~_Ӱ _zݙ;oe Hс0n<LHY^ė63R=M L)=@5@6zo@'Ƈ$/`=f"_ |nX,1$G+b[bN :pIˠ嘔uH.Sl7LJ}1/$t+Y9dHѝnҁG}:#樉dS\f =.B> 0)Ja;qcܺqA5UK]BYWTR'[rHI 8$- &B"aXBRgV<m|uTG'Sg=K8_|MPD3y7P~EU^6h~0Oԇ͔)kսQza;$!7gy"۲u>G3ׄf-pֺTۂ6QNÊfq!UZ-괫ƞbC?n {f9F7Sq_~7/~vN3߾3q\͒l! h^%nmuO]Kr7:92ػkz9AY 2qvLrPXEQ#ů*iB?RpFPVKO4-5٧ 0-1Cy,_^c~(f.Yf ׇ80TB֗G4қafA,0 qцN]TTLj51Kb71Pʦ]ߞ{odڄϸ(A/?T77OYt}]uk:#D2l,+ #2;kV?";w0P$qſ;k A6m취3X/yvVktp)0LIl$SNEW PoLk89TRCl )Ul {O^:G=5#ZBp`pnt^YDMd%PGI8wpR*jfi04.& }yĢ~C{$Oh־$ Y+L1?ߍ*\'c_>@w hk.6%'Ij0hҖ(fꑖOAZ[{咡[quߧ( ſ4xX 5RV!+12z80E|smG =DRy4 $0w.&'/ͷ/VGm*YmI7庢cP)y* ; pu%lƒd1{=f]KbQQW=Bx1m0z݁i 3l}jF, 99lU+vLaI%c\QngAChu ıߎpXIF* o +m2(KOت-%erZɥ<7W4XxvLrixJKbY9e/]Rw6bΐoqsB8t?"a_YVZŦ̖|><y!ϓkL RZjL7q㷘zL"@N/Ь@Z-wp޾p>(ȼ\{ym .;{@d!x9&1:u5 6^s$9bv|$x :6p.H+-82W,Vp׃ 6[ɾsL=hH31DgUI+(풨^=j͖IFY BNemlӋ:f+hp2cdu#C_؏cXvRB*VҊyMձv?ْ¤kh[wnk5H+mXxWըi`|YB8` w2a J0Q4Δ;VYFX]7Y ZTet.{`_o/LGnvid|o0B=#Lj+4(3:Ej>`pdyzqGX.j-&`2% ýWjՠv[RMKʶɜsV԰qAR+;LIOoU4M"$ku!81'2Qg%\ieH b(O\*B3SP(HA1Xh1_[H#DnaG>^H,gwэ6Oy8(,1)lDM[j*:O= 4E 贡ǭo9Zk\A)2OZmӠ><۳FD۟n)n0dgcVO''(o<r{B#GETX+ʎ6c_,uCZ\CBUfAіѥ:SjR%AZLW|rZ r o$ Ug [Um<$fF)S7Y\A!.$҇نEΙP/o,%uw6*Ca~cD߶ƙAgPҶ|[t {qy?7p٢EƢ{nWElPB WByf.cFIA5KirZƻ TaFKՂȓ$$k8eG6*\n[Hӯ5(*vdXJڏ7wmߤl#?w~̥*f )O/Um &糗:B WяBA*U@|K=;}Qbԑ :]txyey] mXr2CY(Ek(40N2fELL҇_p@p/V5zBFH=󝲐@4Ry*Eas_L0:ҶKQ,_le`ꪊpNzdL@<6_AbzklcKtÙcifۓTIK)nVw!Aj_ãyfT+⸿sxjۡ )0%:.f0 3ۀh̓!$X GM^6hf?$rLEDcrGcMG,ׅtm8-ʶR4Y p^Z"R!.RFj{-mu J a\% ƻ-OGg><~^gG(}vǹiw5rµ5z][Gswt6?$lk@D8a@`oH^`_jFDZhׇ[NQzOƨ(򸑱{AQc|?OI$}U>O/Rs"Q x6A}^7AF([ tQfX< D*Rl-׻~](\u,A~1Eyc2q(mpVaM܏}97Y~Xɠ*"T:¸+V3e߹h0=Ẓ2A$^.C|ĭ+6ʎZuN2eDBX\>iU=9By6мKЄ>%0D#4 WKѪO^al.لR F;M&BL3ɫK)z`yO:{g-Oun'ŬpDxy?:k~͇9J⦭ݺc{ω/T}N ϧj `w~-pT'.' !$/ ؑO6d^>D0 %ᰗ"}<|ta'JҞG5Giܶ@YHuJ#/umh7 kwl#`א03 ɎP:ҡF;o5_e՘Z y ^,W|^#L." Sjw$HS47|G mbkfQRʐ2+:JSګt/Q QooE+5O9ۙ0^E@2%  ;\OZpL3x)vG &VWNSl1ëLnm [wg͙}g]#wUS# /aRюڶp")/_G@YjqFb~;\,.#H>ptn~l7אᶞH+~VzxVhCvة6cL6-uyE,ަ+ӊ^{5A\rE&[b 9D}I]QxҜ+ 4QoNl@Gs >Γ]Ks3Qx|\tذ*RDPΊ={ 庾HWNˉa7Fkd~uՄg usxŨ\󌔐Q ] N2 A9Aܛ;2i;$3?C]?!N BVnl:K,bvM`mU7B@foJ[:j."(5 6 "YeﮄR>~<5>`ՋD-%b;ٵjMEQ?JRP<~eyk?]a@m>gV 4]&΋㿻 r+ qc2}{{C)@"{uX2MS(+|ʶ_vڮpG0g> W^-"A'Ut՛lkD#:̳kʃRJqoB;[%)NkXnۥ9*ka̡ kuNh?4T 2 7'.͊}@NRGح х)gc=EǐVݜ(dpxi[>fV|6 A%W/@~kwi]TG<@TA~8'=?t1ֵ* Z5%livڇCWD)oLS,:dbh5xLѩ+/JZ4䭬wNYoGrO=`_TEfmlF gQI;&?rU~MO>a qDm 7|MNfugC[ y $*cDM{褀o9P*p}*ŅPN8WobpֹQ+2;pd\ao,p5U&֯G >"&uO}iT~lg~72J[(QψC%EOfWt3 j qK*G'Uv6"q`T7v8/U6z֤މDGL=>$7RkĥœR׫ÏWכUINd$Y X!dHXn/q0ڥ"Xf 'B5 P41!Ѐ[}~ oZL3?fҌ? `tm2.1ZD_OƩPXT2`½gkp.A\oYj=HJ;5:#~wpjYt'cQ#dk|3ӵ%D[wGA<r ,ڙFo4CD]šaEov8 )sSFL6݁uV8^ՇeE\B&My2RRpe5ݷ,E򓲪2b+Wt> Ȩ׌O6VWCymh GS4t@TMC(qA/0לR[G/)0r(%LV<%pQXKcDXIh7n7 ~Vm~!dd,7 A xKj&&Qu^ N:y19`t#"b)^ Ƙ:N)wŇkwn^ m:cEn%l(PJ L&^ *]K3UVw vxXd>MQMь)W8>;"W=!]&X&]X7{l;1XzjW~ŕv:*W"Mb Qtz9(zLLTܬ:NEP@,3CuP8T}(*6}6[kD(bofZbFyΙ_ E2q*wZ67 qi) ZB&a 7:0FIL3l2b <* |10TEE96BA@O{YL1GaPΑO5LHkHX Yr@E^dd~ЗETD-.>FˌBU ^{n|<XLS}C +D$mB KcⰌ`I6G"RQޔJ +TM!mS$AQu xF8 #  .N(@ŏk_4Hx̱و~aH54zcbF;B!F^ՉQ FVeu1ހ~Qv2㗊C"C-p@Nĥ%fzb?dtWA8MOzHG4lٍ~4%_ WbDJ)GX~ѐpKn'sVwH]1˗@4DA{@uԮ<4H"uqUuAvȬnܩ HGGd?@'W z/ Y _L\uY5 eAԯ9OMcϭ4y澬Z*48 ρL =5S`Ni] 1냽Mj؀so ZtǴ,Ip$D&^NP'!1eGH_m"4G9]7QM3m)ȤE?C@շf'FѸ bG-;FemTwW0gW IǓqFH0$z GՄѧq nE|CT(Ӈԧީ00y^rpUF *vH Ah"v:xݏLt7+HP50SFo H~+k.^KsX󨃿K)Rl#]ld{s}DYAO)\9x@ 776G*= *=Oi!ztD(z gV|gęm"w]hgSFWuϫ_lS.fF 5ȈN83>&H@h&';oPnpcYV͍uaO &%Z-RR-S !|{:#/>+ c/M`J@%v$DD85p3bL[fW4Un'fȋ$,mw&TMTόkWu)[qϊfff`_e\^9pܪޗTOJU婌5I>w5!v6r)*֌6cɯYѓ9fiS"%iXAgR.})Tٚ`pQw2=0֚ܩ+!!ꦿdn ٶPI6z}˝aPnEyştDm9⹇dFi;\n 4>;&ݮ3#QΠX:Ȑ1W\G'Ts5so$1jOi2'+vNZ  -fGM r @ZRXPŜPa?\ɯXĥJweb e fɷ~fڪ~&?D3.m(-4vpT@1s[}yC^s SaHO4,dDp}`6bdp ]Pm)gvM[K0XyQMɦr+344r!`}'@+"O ԿKWp-bb|K&Ǐ?x}Ύ@7'Rn9dи,%}-;s:`ӣt]J~:Ή Q8X3>]`1B:؇:=8w@.N&!$# 41҆xA:R(V]|2KhZ#M 6s!;|[nIJA.6X8i۸ᱍwyy-J1OD WUEEǐMtp ~I8O`#R4Ñ@Pd{G߸~I},iF@iw>r:Kٗoܿh;9.j}֖j_iES?$̀*xm?w3ALr+ eьO|˃j8zTqb=%kyyNGA7}#%mDJQ̆,S #K|74饨{mq۵LIBy0|ϸ9c)ҩ-oAzYKc#=6 &쬱l Lj:@mq4,eg}TEu*WՔ,ҁ1ªNQsQ,l%W\~r/;v9=]$RWܞpnH !AF8Xy3o@'Ė _D1[x7i^Ay[\ 9&n=C --gO0Ͳ,8 HZVuztTN1<36 pN٭^ w%f QFR+{84h_-%6XA[2)1f{ `%/jQ+_ow$!ȪҿxRPmEEbmH/Nqn6$ W eD?=(cE矡wz凲&E+= oeEwUxӾ|$F1D4O6M.2C rb\P-zl۠<fP~#YH  L%/|TZ {92zK`A;n?OPwׄiaTlcu?OEx_z,]Pժ J ̉TG y=dӆ4[-#6Jȣ^|f ~u;)-S#eW* ~]AfNsY>-CsLΆv{з|gޱV( WӜ Vu ~")&8s|%~Fj21mA!,#bx 7 ܱ&+麶Eyp d^gN͐͊-+ҫ 0lIWpZ" pl*>8}%fSQҌ NX`9ϓ/4pJ~W ɌB.%`6jDy;If5ng;4nMWN..) C ݤR.F>*MczJ#L5{rtS(v+LzVO/uGy[ Rgfwv*tu FwKᅥ1i7nW2$]RHAW7?hU!1BeEHwJ"R[~E<ڡn._^Mr)oRetM*uBDž/l,W@=VyrۣYfvVʼn&J-o]e\=_O\^^:!?W[Dz\r_i0Bw+ S*!ޅ_}Ho]ܲ( A\SfAPia'8>t댌p^^g@ 1ݜ`(f05ZE',;O/NڜĈ݁0Sa"a|\uEˌ[" #a$">A } GX-H|c@Uk֍w`$`CH)nrvb*Ȯ~^֣˧a6 ˜k]{Oi*6ՅfCV F b)mѕ1y*xajn Lqf!3G/r! 1h=+pR+԰2۩^}34Nt`ݺ[& y #g0r%9be#s;"%Ħ~ ҄%$I9[@bv0V^sE?ZJ.Pve K9xK2"Wj{Jx┌ !5RƶZ͏ J^P^*}#-zQO@1'簥ھVy:5eonZC\4ŠxRvi=ʁ8B BhlWU?9|%Qg'vNgGD"h[qoLTr |8!L!Ԍ},¨zMA)}iC˜H[vNxJ\>?KB@BX1E74',tLj>)Uܡ&_@X|1R, ]ЪIxAUG(i̇j'/AsweY'f':V<uೲju^APnԌݭt6H~#k+cĊHt~ΘkB%3m+e#k񌳿K>nu4x]V`(u^<:ij^x``b!.^ҬV=dw2I|jDc.|&Z-\vO_SzQOXf xG@YS.eEٛg@0PH`R`րy7}9W,V\zD,5z]1 D5#`oty2!(" Y'&/94T$Bt䒉R^tO/R:^KO =h KM&Mb T=+75Q ұ.zfmjӋ.~0 77VR\\5Ū!I*EN|yBs+a_&L׻X:cB<a,pknI@*-z _+i@ߎF\牙ިqo{ (T666[9WT4AD`OEun7d}h3m6FE[Hh#|5o#iF߾dVZD^f՜ ?]n-C\g>wuȋL_W?9)yj(\֖6Z9m g`޿[r|gAs#H*.=O|]< %a?ݟVxx^a+Ѥ(1qZTj?% m( u7?ݧ]p0>'DI!O-Csn 1*eEثPd?:a8礼ZyI[5δ94P@>J k ]W'WxvDL0eF4O46\gW.R֍q $6#öttߊt y3LP/ d{bZ%$7^Ue\sdleڗ M>6&Yk'VqjycbTr:AP ^'\jՙD/-pgAbW& aڮ*\'@\8=oP8ßIXQȹdn" 1W/0x ,KUZ@!% r|z U9quRNE)7[*lLr/c 6vY 567'dZ>јY,LZ}5o-κ>eK"kldLRAg;L G)]]Hajͮ^eW-.Xs%O+XϵoKReuF:-KWA#rAWvy65ozd1yDgl>;NOH즡:^D %q9"UJ_tJA[ilET X%4 %J#wڧ%F^6]Y yqGؐ0&%t9^W'3R+K<+-IJ[-vbk7]<~iOalI &Mn<ZD}UvD h).Lc bc^J5]oZBL {k{G;{xEl#8 bo#,V~"Df.by(~rмƓ㶋lt̋{BܟZ&i9̯ Ұ!͏'UnMb97m*qng~pT?l'];e- 2\>gV vie$o&C"YL{(_1A&X/}߯'M%P"J fP9K\G;O;욻5s2 1'rsQ<ݦOg2fk&D +<`)HVX{㷝*ECP} cmvoӽ$R4j $9=`C 5V&Zoыgk'ɰ#%J6b\̞ t]K)W1ȃI?oEA#\6TœbzRD9%  Pr~Yէ,OķO7H"ity&Hh$~iV{B h|yݛPGFrP6,O;?8}I XMT'ysZy,[{_g0-KV*k ]|8xẋǥkCi5o0-W jm(:`&fUAa + C穚XDz!fM*Ҁ)7Ƶ$='L&B zT _Sgw] Θ|(<(vh~,V7SAC$^sn{tR0v tmQJ*GPuɱD5q$zeFQyShY΄U4'ç2 w6giuX|A@LT^w;NY儞IT ;~7SXuLixtkGU) TVHF]%vaHر$|\Uk[)Ւ 9>q\ }(p⛢ 9u\ulm`@pֺwz^;AI|ϊ6@Q]XheOЩn)"Nє5a#ӎ9!y?0|?ABQb!bl\H0{iF"^uqvi`X #@ic%yRgQa2'zd('0fŁUu,)(󯔊2jJP W`I'Vx_?p /.ɟΞӋW?^Z-W}"܏&3adE)!ZɄAv:ϯ yIU!v̪kn%^ow{+M$VV zcۘgOфSI tYuEJ v :$=w,a=&cB:}Q5Bo j?# hFq C^&;P^t0a֗ D<||7j≄ T BjPԭ`ߝ~݋?N/_>?C4m$@'<=:xc Tpg\?,ήWҪٍ}3zvYչ4N(L^a"$ -{n#Z1U"fQ$Lt+`|e RQ m'1@s6Bc.܍F+Bؓ噮3)+7 @ХzLuحnQF\-)! Ćo؛?ZJA(Ee=dIbԱX;#N]˻}/?/>KgaD#9J$MN7bf+#Fpn:^-b )eï$b|c GF'qGǕ[j};Wl30d#Mnh.̏edN̘0q4Ű#q(wqmQg=5ī\Hmd.UV0 گ t-I;ZmśmtሴߜL!JD4pCx5AZxmR8] ̊&ʶ.pX-4+ 2kn5'?ĴߛY n΍tӺP1NnT( {L-(( ΀1z`Pv-I6)DV@Jx}V;gSde%C.Jժq L\ [y9JvTlۋIu&JWmʍs-#9":8*-l%ԓ!4Z0>eӖj&W+"C`.Zn\ ĩDæ4<4uY3e"2$U*@~GuM4w rLтyqQl3dZ:Qw;s8ǒ=Tȏg Ph!kĸdw`됒Sap J4'4=0^2Ղv*mbBo jq~ž gQC,gZr m: ce 3F"ӯDsAԻ{wYz%l]pN_]&bpWL%_C& TDM)`u˗IHT[ܣDq@ d'] HJ\˫5on| <Θђ[9DR`66mIPgRڕZ 3\f FO9Vs4UrH}2INմRp7*DEݵK>wM:81HvM0]\RۘLz#bl/xTo\kV=E!)u# Uv t(u3!scB ujIau.ʝkoB\*Jp@PY 0}Dk&OB^wU2&3[9U4EKj1 zk_p]AzQh\;aֳ'ծwQ9 <%A_2j$3(R;v\Yl?S.|[倫.`f$ `н*:sA/ 2XuCx /P{q<61Zw`:0)kr6+!pwmGw$S/UA%pKa-ST@'L~ʾ8JȄur؜PONNwȌ4L 4QҞ#J'| 8{:FN#*N6i2|ˆ27cj=5{T!R9 i4WpRmA@eQpΏkr.}?ç;P1Kܭpq=gp+{HBݵwWKe4@M.q)R~2K ^A|I.%00DQYUR\()n4СJ5).3K܏QsK(ɧu`h}iXc(_QfB1ԝ Dg)\_{3ĿEɛް\L׹\u`$DZ+S,7y9z䔺rauy^nPvq\Brm,Q4)rR޿89vtq'Lk7.`ʆE#CN *3,2*Ox҅]X,u)BB%U:hͲZp0QZ%2|X- /$Uw INf#XϏN %p5+GUkܶ*.ݫKxɠc3C(4%1-Eb*;iNYe2No&ޙ"JP;C՝^psb dWsC\ p!A9|BYW: -/_tW3Uީ7~ 0T}#(3\4W8i- g$ !Jۼ(8[;McĸE̛ܩn=æ~<ރ*nYՙ|cat5Fx2̒!2xo~STʗBFQѝI)Ż%Jʥv(XhsU9gg}7v4%cСjG >Kr۶e_Ork#Ll+ײ18ѢL"|y >=Х8As3mOnVw(7%lz㒹K[}{4۱/;qCY'D }t0l@<02tЇx˜x*\>Pf*D4uvH28'1F()@p,:2O8i)UXqGHSz0 Ґ<ѣysP.x܊ݛA ({RF N> Tl$TR E\R=!nB]%i"#Jn<o4nH j33R)N Ґ8WM&*5Y:"ZNJNn<ꐖe{ v Q;Y`)Cj(XLIsdE8]޼oO˧o?E9},OCq9Ũ^HіS)K$s) "x=+saP #?SO>QM/pi7ANLeV AԿm nnWZWwM 8ƿ6F"v]"9|{՛MV>-͠×].]M{b112,hñQRe(S5L3kA%-73P3/,13zV|JS]U " I=:ꠞ.HQi7qQ}ꎰa}"ڨZ}5j'fN645nm 劽 S(%PaxU/*̓Ӧ "h*1gW 1 S&c^U tٿt:DEB3e*jd1Ӧ0C>Zp03Z[bƱP^ J҉Tlqb)hK;5#qa?) `.o㯇24|ķ8}^Kxخ/"Uݎ |?|;(..~y4(^|M~> __p`+PIORz=xz =A]YՏu |REM;`q W[60]-Gό5|ē̓vr;;SLKiDjz`g*&4"P A@K}=y7NjS z GkRW'\v%QDҌjVJ $[^.O][a2/ `,tEL;P=L1[ M4Z2]Bx9%ڃAO2-.Ɣ~\u]u;iz@~^R2a}c1q cK~q/q8[.{Ϗ2HC-=A~}/$}tjxߑgQ`^y*'Q}$ Vi+xZ]Ұl/jrM8oނbw$WP7lM".ÝUr|3V^`V2\  Gn r6_lF[_.2.pשAz"]%a4Ax j+LwɊ )țY"^S$_7X:32oL_u CɏlßpUd#) ׂl]%5˅cHp.oH +u'zKzlVmj6$F19k m򹛲#HH*f$G/ C&$87J'-M1wz7J+*_iMǒ0W0Ѕpif~B4MMRC)]lW r==&6$ [`8Ϗ~ϕ+r%+% ?dEjOJP_$9BR]Tx%,O?6!)mI'c%8(K(f"6zOW°67Oxh\/ Ƿ »5B(@(d|!+ԥ.Lȕ >p6KjR.:ѱp*0'qUp1Q n2+[crw|j"o(I9GV?zBѦYƴȒvģ|R_ ) V]0ta4rJVaqɪ; pZŦqOX7 7N#HP ӋO,Iv-h.UF֟#0Qn$]yv乕]"FНKjR^pܗ-|P)6ljTS%p!RwALwHV6`=WP P)*y``GI-݆ x4!XOHHEލt9sER*i4P2H4ĠVmT k+ͥLXp5€zcPTR^\ !>1;^ / $ w&$Dȍq }T&2~'k³{A{:x7u"/!Am$[m› z;K,!'ZJr P^b)rO_|Gxbw$E&WnS}<i+N]Rfow |@]lzcU@l.ɻCRePyD^RM8H{w~:$idR :h|+mnDGm&@5BCnv=LԋM^ V6gdEck4rҝ ?r qWGEquI)Dϣ"6/vM( '!pY!!d2'R? G9E𤞭>gfQVVBeM|" vß0،])eCl2v `>fKh*^d픶bf/07qR^B`)34&jgE\Qr:c-yX), ,}chqT䈉 =FwnA]4Zά&6V𨉓8-G^%iX#~l7xzq *>Hzi)sL1nfR5ª8Q^xjG~k)xh)ͩ4y23 eZœ["Oѐs[A.LA 꼌AȞKGaE4ҋ՜Ҹ'iùqųς|m+xw`\*X@oG3{ K&^]//_K@ѾD!ʖo",LMhq!b?Z?q\9m=]{6TX?]Dא^)rA3#6'SB'෇Ã/V/sW. 늛 ߐ"4O鬣H88n1-r1hͪ B8]6sJq8}Yݘ6NcO "2Ux6 ) C rZ>giYuS\-r<*n|)t\h~aBu|2J*F.vglmM0՛ H'p-#0mY3@=hozɚ5"CvMTM uCy@:UpNp 7l&J9W6__Ff ]{/+[4gRU\.>&4s\ A!jliKP>/p<_0uH?<)J&ŭ]*0B%%CV^c.H?˒'s !D `UMbĸJ@2,(QDq;oq QHb&090^ "]1*n=hbx V!)/a1'FN $CI8m^= nR^- a+Rw/x_5>e;|^}dG=ngH (Z"}0K HS_S{f i5^pY=[+.z7qt=!?BԚ']<`x ^% Xlo9YOM[K$0UMԶoʘ]eEw d@zk(HyyOep4 *};in s+Ij@wP f$8y#]-_O ߐ"d?rOrSׅ?vw%h2'{./%w-x"p;D2yV'\2Gk@`$ؓfvpGܣb&A5`)47_? paX4EyYRf<!o;R7ef .Z`ԝ,bB =5>Z .@ 8TW}g #,7=xj )Lun_g qum.+dQ~LÅ@.hGÞF=O]`زޢ?N:^`.? Z7 XBrn #AХ 2î W1#Pt@a2rb$,䉘wjYMfi̶\i+? * <8{QF řx k I5?ƔhRk nC'砳"tDvAzrCoOE@5qBrOp`rP#?F4WWEţ ~~@X _{0Є:RAMh˦(z'@F1Y֯owA)=eQp/+l6K$OӂPh[8>?=<}mqYq^~EǣS>\B Iїy|Zwn^6qZ+=9aG6U>'?[Ŷysh@~ brUc`Ȩp k93nW:b>9g-9>+p[ g|ֺ]9%rl!RB Rg%0x69"<`)M -'"Ѻ|f:hIr鸩, g}aT%\p"L_~m\Vq)F}p:q 'M<ӇpZQ FY}df" !'S !K E6?QΡRp:qz I[Swt iR8M*3&5ro rm@`3Z44郎Fʡ>S)r_̴ɝqK\_R"zd1ԮJT*3iL}*YYGEL7 \V74u+sԢS`u0-ĜZ^e07Z,0; --a|ӎ`qd4) EjS{ o3Lyv Q5s IZb)'EmgrWf3)|nq$n*7BGDOK|\ۘjs.TtJCѪآ]#(Ix]Lz@"X+Q4'an[CFvC 00{ _ʙ#1!-kNork%HQ0 W3qTPVlQNG 9Ƀ>XMw2jvJ7:T`zKTOWSU[UJHB۪evt's=+S&>H_W!҄_vpeI;Ŀ.Ј3ۨ-LK#2#>ymǺ7G$1aou"s)·֒:hT7 ݀"lt=5ljeNv2(%z{)Q7N"Ҷ(TgS4$E!HM,Oȳ<ֱ-9y'V_!W"n-f40k /;%)L8fgiu7LV% ʌoqA!Td٩|(\kK+\bMenG.8EUj N=0;\!0,"7Dh4r2_yiqumXlZ:l+DIKR&w"hɁ7 RN>~PUy2 /]>U5e;vH9ha4$=vj61ްB}ygJV2V=J]ϵ^Us]ٸQq M =4șd(\l!Z}xMbmX fgPhѠ|!mЯRfex*9Ь3+eK0[Ɖ;&?\^YdS.kVG1+碌>/}Adyt!Z-E/ JWQ:öBv(&_wR-'rTe;p-:/L_j*J8!]ɤ?3Hw1f׎q-匽)+%VZ0@8N{f-dS/I;;u^|wt~aRVL!AƓ#q|zpq_1Jg(<ML=6ݖ( v o0|'rqm" E;k)NR0)[}9 aE{UBu|qfV)sqb 9xanYl2szpx(q@)_npuRr~Mwb4|y//\wb‘|mEj%9iY_a<簽k(fҺv[}"6|{}>WDS'yAͰ:8|/|hkCg"_?z1Z6:`r''[j%ΪCjғrޗS#қ܄{b񽰔fΠ[dmg,×/n <tI|?'lf}^ wgVW΍LSpZfF#ܟWR=$Eq^t=v'r8]]u9ofꗫr=̚|Ibwh+Tz`U_+\/$7=tx;#]SEAX[ ˷aѣ(Irb-_yx#%߳qƎ@r='G|k|=ezi>3>vhZaR??|wzߜ^|?5l X\/_<)8).^:g5:SA.& @JQ+* 4[}Z.JOv?p EX{Irr.^4dRNhq?WO JO7gDxN1r&fE~?=mC>$| 3dӿh};L.盓oO_'痧O.Of8'N^>[w{Fg0:ʾ7wsy5BQ^8df(nd)/ްui]f3YNco*wˣz!q:!1q 2n)`ni;{yr}@(w@'# VdOxr^\\Fzʄj"bxQV"7xb?2so1'B9Dg X 6&Lze=G[h\/?h3uf͸؋-E1*^42n=%Z_>o': H֙b^H4Ae!Ժ8⸕{|U9ID,ΰNVУ=&c(g[E.wvܾ!("=7UhLYcggo΂<2i͝㝼+U2-Yȴ:4[ ݓm` Nڍ&5}xN`{Wd)]ǻï% @z}NgFYjVFw׈Z$3e5v%1A=geBk]'mbV nӦ 1ٓYbq`N~R[~9T&m5㺵U4UhԖ{~{8<u-Ys!@?2GCA>c'$]I e;;RR%o$W#B\wg11pQQѹUTbs|HrG-oʮ']CRDet5e=dU=I<6:js/슅}azouP٩nU}O,dQzn7Amqz9Ţ["W8e;pAa]tN,R8e4/Gyf/Zn!hB-iB=߮rԵ%29 3N&57 O~ N2!-/'qg-})Ya)x[#z%6ei | <^q/&Dn<8I7 JB4qE(APe(M4)bۃ'y5li5\:qrN<;b׹^g%'7Sc4? ҪIsqNeA&U7$/wh"h\iٸQq(qWH צ"N#iD2 PO#TS!h>14얝ֳ\/8P:(\,*jGrw!yp`|S qcGcWL\De B]( y$sxvEb}.|r-u֠&H&gQj, p̬N5C--怆.~fAJӨD\4:iʉtWPsR[HD*1UO8"%{OQ }u@_iC3 53ȥXr Js]xP؋u& Oy//npj 6n,oc7?~G tl8>'.'!e;⋡~qs#¬ށ `ma, C?8?S%fuM@eXw 񄬠v3ӣia(b|F /+p>j9͏`iƽeKɽmETPV͖ Z*jmOKC\GjdQ'8㮺J’ Gm ʉtlܐX;-pU2%%hQc P..nEx=/:MkD7%ŀnV6JUN/n:~o]G/.^mQ=1wF>5D)^|uyrQ$%[J\/ (#C/КEC5nk e/Su1y 4{07070100000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000b00000000TRAILER!!!kՄͣ!||J 0V D5m\+O͈Ţ YZ