openvpn-2.6.10-150600.3.20.1<>,li}p9|x22. xUlh~1tŝ<|3Ɂ0t7S; 78ŲFP6 ^v֞6?ks¶Vâ'qc4DSi2oYn: nV1#o\^܁DH^ ꋯ1Ir_p n v'x~X==~vqႣ6@bք8]G{yoԽJxy niqXޜ[[TT_g^zH1 >O$?d   X *V lFGbb b b $b -b -hb.b0b22b4t457777(787=98=:<==>?@F G$bH̬bI4bXΘYΠ\b]Tb^յbc{deflubvܤw$bxby4z|Copenvpn2.6.10150600.3.20.1Full-featured SSL VPN solution using a TUN/TAP InterfaceOpenVPN is an SSL VPN solution which can accommodate a wide range of configurations, including remote access, site-to-site VPNs, WiFi security, and remote access solutions with load balancing, failover, and fine-grained access-controls. OpenVPN implements OSI layer 2 or 3 secure network extension using the SSL/TLS protocol, supports flexible client authentication methods based on certificates, smart cards, and/or 2-factor authentication, and allows user or group-specific access control policies using firewall rules applied to the VPN virtual interface. OpenVPN is not a web application proxy and does not operate through a web browser.i}h01-armsrv1SUSE Linux Enterprise 15SUSE LLC GPL-2.0-only WITH openvpn-openssl-exceptionhttps://www.suse.com/Productivity/Networking/Securityhttps://openvpn.net/linuxaarch64 if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in openvpn.target ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi [ -z "${TRANSACTIONAL_UPDATE}" -a -x /usr/bin/systemd-tmpfiles ] && /usr/bin/systemd-tmpfiles --create /usr/lib/tmpfiles.d/openvpn.conf || : if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in openvpn.target ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi # try to migrate openvpn.service autostart to openvpn@.service if test $1 -ge 1 -a \ -x /bin/systemctl -a \ -f /etc/sysconfig/openvpn -a \ -f /usr/share/fillup-templates/sysconfig.openvpn && \ /bin/systemctl --quiet is-enabled openvpn.service >/dev/null 2>/dev/null; then . /etc/sysconfig/openvpn try_service_cgroup_join() { local p="/var/run/openvpn/${1}.pid" local t="/sys/fs/cgroup/systemd/system/openvpn@.service/${1}" /sbin/checkproc -p "$p" "/usr/sbin/openvpn" >/dev/null 2>/dev/null || return 0 test -d "$t" || mkdir -p "$t" 2>/dev/null || return 1 cat "$p" > "$t/tasks" 2>/dev/null || return 1 } if test "X$OPENVPN_AUTOSTART" != "X" ; then for conf in $OPENVPN_AUTOSTART ; do test -f "/etc/openvpn/${conf}.conf" && \ /bin/systemctl enable "openvpn@${conf}.service" && \ try_service_cgroup_join "$conf" || continue done else shopt -s nullglob || : for conf in /etc/openvpn/*.conf ; do conf=${conf##*/} conf=${conf%.conf} test -f "/etc/openvpn/${conf}.conf" && \ /bin/systemctl enable "openvpn@${conf}.service" && \ try_service_cgroup_join "$conf" || continue done fi fi rm -f /etc/sysconfig/openvpn || : test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable openvpn.target || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop openvpn.target ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in openvpn.target ; do sysv_service="${service%.*}" rm -f "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart openvpn.target ) || : fi fia  xFjH ,5%p\BB 7Bp mB>f &H ,?*: R]cP&| h9S-DnAA聤A큤A큤AA큤A큤A큤A큤A큤AA큤A큤AA큤A큤A큤A큤A큤큤A큤i{i{i{i{i{i{i|i{i|egegegegegRՇhegegegegegegegegegegegegegegegegegegegegegegegegegegegegegegegegegegegegegegegegegegegegegegegegegegegegegegegegegegegegegegegegegegegegegegi{egegegi{i{egegegi|egi{i{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@rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootopenvpn-2.6.10-150600.3.20.1.src.rpmopenvpnopenvpn(aarch-64)@ @@@@@@@@@@@@@@@@@     /bin/bash/bin/sh/bin/sh/bin/sh/bin/shiproute2ld-linux-aarch64.so.1()(64bit)ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.33)(64bit)libc.so.6(GLIBC_2.34)(64bit)libc.so.6(GLIBC_2.38)(64bit)libcap-ng.so.0()(64bit)libcrypto.so.3()(64bit)libcrypto.so.3(OPENSSL_3.0.0)(64bit)liblz4.so.1()(64bit)liblzo2.so.2()(64bit)libpkcs11-helper.so.1()(64bit)libssl.so.3()(64bit)libssl.so.3(OPENSSL_3.0.0)(64bit)libsystemd.so.0()(64bit)libsystemd.so.0(LIBSYSTEMD_209)(64bit)pkcs11-helperrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)sysvinit-tools1.113.0.4-14.6.0-14.0-15.2-1openvpn4.14.3i{i@i@gggZ@fKe[J@dܺ@cӼbgb; b@aa@aX@aja ``Y_@_[f_FN_FN^_@^*@^r]f@]@]>] \n\mA@ZZ̧@Z@Z@Z@Yܶ@Y@YMYA%@Y6@X@XXXXBX<@WRW1@V^VqR@V`.U@ŬUUv@TPT|X@TR(@rahul.jain@suse.comrahul.jain@suse.comrahul.jain@suse.comrahul.jain@suse.comrahul.jain@suse.comrahul.jain@suse.comrahul.jain@suse.commohd.saquib@suse.commohd.saquib@suse.commohd.saquib@suse.commax@suse.commax@suse.commax@suse.comdmueller@suse.commax@suse.comjengelh@inai.dedmueller@suse.commax@suse.comdmueller@suse.comsuse-beta@cboltz.dedmueller@suse.comdmueller@suse.comfbui@suse.comfbui@suse.comfabian@ritter-vogt.dedimstar@opensuse.orgbjorn.lie@gmail.comdimstar@opensuse.orgmichal.hrusecky@opensuse.orgmax@suse.commichael@stroeder.comfbui@suse.commichael@stroeder.commax@suse.commax@suse.comavindra@opensuse.orgmax@suse.comrbrown@suse.comndas@suse.desebix+novell.com@sebix.atndas@suse.dendas@suse.dendas@suse.dendas@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demichael@stroeder.commatwey.kornilov@gmail.comastieger@suse.comidonmez@suse.comidonmez@suse.comidonmez@suse.commt@suse.commt@suse.comidonmez@suse.comidonmez@suse.comidonmez@suse.commt@suse.demt@suse.deidonmez@suse.com-update to 2.6.10: * t_client.sh can now run pre-tests and skip a test block if needed (e.g. skip NTLM proxy tests if SSL library does not support MD4) * Compression: minor bugfix in checking option consistency vs. compiled-in algorithm support * systemd unit files: remove obsolete syslog.target Patchname:openvpn-CVE-2025-13086.patch Remove Patch (already part of 2.6.10) * openvpn-CVE-2025-2704.patch(bsc#1240392 CVE-2025-2704) * FIX:VUL-0:openvpn: Improper validation of source IP addresses in OpenVPN version 2.6.0 allows an attacker to open a session from a different IP address which did not initiate the connection resulting in a denial of service (bsc#1254486 CVE-2025-13086)-FIX:VUL-0:openvpn: Improper validation of source IP addresses in OpenVPN version 2.6.0 allows an attacker to open a session from a different IP address which did not initiate the connection resulting in a denial of service (bsc#1254486 CVE-2025-13086) * Patchname:openvpn-CVE-2025-13086.patch Remove Patch (already part of 2.6.10) * openvpn-CVE-2025-2704.patch(bsc#1240392 CVE-2025-2704)-update to 2.6.10: * t_client.sh can now run pre-tests and skip a test block if needed (e.g. skip NTLM proxy tests if SSL library does not support MD4) * Compression: minor bugfix in checking option consistency vs. compiled-in algorithm support * systemd unit files: remove obsolete syslog.target- CVE-2025-2704:fix possible ASSERT() on OpenVPN servers using --tls-crypt-v2 Patchname:openvpn-CVE-2025-2704.patch(bsc#1240392 CVE-2025-2704)- FIX: VUL-0 CVE-2024-5594: openvpn: properly handle null bytes and invalid characters in control messages(bsc#1235147 CVE-2024-5594) Patchname:openvpn-CVE-2024-5594.patch- Creating Multibuild Environment for openvpn and openvpn-dco to support openVPN Data Channel Offload(#PED-8305)- Add openvpn-CVE-2024-28882:Fix multiple exit notifications from authenticated clients will extend the validity of a closing session(bsc#1227546 CVE-2024-28882) * Patchname:openvpn-CVE-2024-28882.patch- update to 2.6.8: (jsc#PED-5763 bsc#1217073) * SIGSEGV crash: Do not check key_state buffers that are in S_UNDEF state - the new sanity check function introduced in 2.6.7 sometimes tried to use a NULL pointer after an unsuccessful TLS handshake * CVE-2023-46850 OpenVPN versions between 2.6.0 and 2.6.6 incorrectly use a send buffer after it has been free()d in some circumstances, causing some free()d memory to be sent to the peer. All configurations using TLS (e.g. not using --secret) are affected by this issue. * CVE-2023-46849 OpenVPN versions between 2.6.0 and 2.6.6 incorrectly restore --fragment configuration in some circumstances, leading to a division by zero when --fragment is used. On platforms where division by zero is fatal, this will cause an OpenVPN crash. * DCO: warn if DATA_V1 packets are sent by the other side - this a hard incompatibility between a 2.6.x client connecting to a 2.4.0-2.4.4 server, and the only fix is to use --disable-dco. * Remove OpenSSL Engine method for loading a key. This had to be removed because the original author did not agree to relicensing the code with the new linking exception added. This was a somewhat obsolete feature anyway as it only worked with OpenSSL 1.x, which is end-of-support. * add warning if p2p NCP client connects to a p2mp server - this is a combination that used to work without cipher negotiation (pre 2.6 on both ends), but would fail in non-obvious ways with 2.6 to 2.6. * add warning to --show-groups that not all supported groups are listed (this is due the internal enumeration in OpenSSL being a bit weird, omitting X448 and X25519 curves). * --dns: remove support for exclude-domains argument (this was a new 2.6 option, with no backend support implemented yet on any platform, and it turns out that no platform supported it at all - so remove option again) * warn user if INFO control message too long, do not forward to management client (safeguard against protocol-violating server implementations) * DCO-WIN: get and log driver version (for easier debugging). * print "peer temporary key details" in TLS handshake * log OpenSSL errors on failure to set certificate, for example if the algorithms used are in acceptable to OpenSSL (misleading message would be printed in cryptoapi / pkcs11 scenarios) * add CMake build system for MinGW and MSVC builds * remove old MSVC build system * improve cmocka unit test building for Windows- update to 2.6.6 (jsc#PED-5763) * configure.ac: fix typ0 in LIBCAPNG_CFALGS * Avoid unused function warning/error on FreeBSD (and potientially others) * fix warning with gcc 12.2.0 (compiler bug?) * Fix CR_RESPONSE mangaement message using wrong key_id * Print a more user-friendly error when tls-crypt-v2 client auth fails * Ignore Ipv6 route delete request on Android and set ipv4 verbosity to 7 * Revert commit 423ced962d * Implement using --peer-fingerprint without CA certificates * show extra info for OpenSSL errors * dist: add more missing files only used in the MSVC build * dist: Include all documentation in distribution * unit_tests: Add missing cert_data.h to source list for unit tests * test_tls_crypt: Improve mock() usage to be more portable * Remove old Travis CI related files * options: Do not hide variables from parent scope * pkcs11_openssl: Disable unused code * route: Fix overriding return value of add_route3 - Removed following patch because OpenVPN will now work with OpenSSL in FIPS mode. Note, no effort has been made to check or implement all the requirements/recommendation of FIPS 140-2. This just allows OpenVPN to be run on a system that be configured OpenSSL in FIPS mode. [- openvpn-fips140-2.3.2.patch]- bsc#1202792: --enable-iproute2 added back as default option.- bsc#1123557: --suppress-timestamps isn't needed by default.- update to 2.5.6: * bsc#1197341, CVE-2022-0547: possible authentication bypass in external authentication plug-in * Fix "--mtu-disc maybe|yes" on Linux * Fix $common_name variable passed to scripts when username-as-common-name is in effect. * Fix potential memory leaks in add_route() and add_route_ipv6(). * Apply connect-retry backoff only to one side of the connection in p2p mode. * repair "--inactive" handling with a 'bytes' parameter larger than 2 Gbytes. * new plugin (sample-plugin/defer/multi-auth.c) to help testing with multiple parallel plugins that succeed/fail in direct/deferred mode.- Fix license tag in spec file.- update to 2.5.5: * SWEET32/64bit cipher deprecation change was postponed to 2.7 * improve "make check" to notice if "openvpn --show-cipher" crashes * improve argv unit tests * ensure unit tests work with mbedTLS builds without BF-CBC ciphers * include "--push-remove" in the output of "openvpn --help" * fix error in iptables syntax in example firewall.sh script * fix "resolvconf -p" invocation in example "up" script * fix "common_name" environment for script calls when "--username-as-common-name" is in effect (Trac #1434) * move "push-peer-info" documentation from "server options" to "client" * correct "foreign_option_{n}" typo in manpage * README.down-root: fix plugin module name- Drop 0001-preform-deferred-authentication-in-the-background.patch Upstream has meanwhile solved this differently and the two implementations interfere (boo#1193017). - Obsoleted SLE patches up to this point: * openvpn-CVE-2020-15078.patch * openvpn-CVE-2020-11810.patch * openvpn-CVE-2018-7544.patch * openvpn-CVE-2018-9336.patch- Avoid bashisms and use POSIX sh syntax. - Use more efficient find commands. - Trim marketing filler words from description.- update to 2.5.4: * fix prompting for password on windows console if stderr redirection is in use - this breaks 2.5.x on Win11/ARM, and might also break on Win11/adm64 when released. * fix setting MAC address on TAP adapters (--lladdr) to use sitnl (was overlooked, and still used "ifconfig" calls) * various improvements for man page building (rst2man/rst2html etc) * minor bugfix with IN6_IS_ADDR_UNSPECIFIED() use (breaks build on at least one platform strictly checking this) * fix minor memory leak under certain conditions in add_route() and add_route_ipv6() * documentation improvements * copyright updates where needed * better error reporting when win32 console access fails- Update to 2.5.3: * Removal of BF-CBC support in default configuration * ** POSSIBLE INCOMPATIBILITY *** See section "DATA CHANNEL CIPHER NEGOTIATION" in openvpn(8). * Connections setup is now much faster * Support ChaCha20-Poly1305 cipher in the OpenVPN data channel * Improved TLS 1.3 support when using OpenSSL 1.1.1 or newer * Client-specific tls-crypt keys (--tls-crypt-v2) * Improved Data channel cipher negotiation * HMAC based auth-token support for seamless reconnects to standalone servers or a group of servers * Asynchronous (deferred) authentication support for auth-pam plugin * Asynchronous (deferred) support for client-connect scripts and plugins * Support IPv4 configs with /31 netmasks * 802.1q VLAN support on TAP servers * Support IPv6-only tunnels * New option --block-ipv6 to reject all IPv6 packets (ICMPv6) * Support Virtual Routing and Forwarding (VRF) * Netlink integration (OpenVPN no longer needs to execute ifconfig/route or ip commands) * Obsoletes openvpn-2.3.9-Fix-heap-overflow-on-getaddrinfo-result.patch - bsc#1062157: The fix for bsc#934237 causes problems with the crypto self-test of newer openvpn versions. Remove openvpn-2.3.x-fixed-multiple-low-severity-issues.patch .- update to 2.4.11 (bsc#1185279): * CVE-2020-15078 see https://community.openvpn.net/openvpn/wiki/SecurityAnnouncements * This bug allows - under very specific circumstances - to trick a server using delayed authentication (plugin or management) into returning a PUSH_REPLY before the AUTH_FAILED message, which can possibly be used to gather information about a VPN setup. * In combination with "--auth-gen-token" or an user-specific token auth solution it can be possible to get access to a VPN with an otherwise-invalid account. * Fix potential NULL ptr crash if compiled with DMALLOC - drop sysv init support, it hasn't build successfully in ages and is build-disabled in devel project- update 'rcopenvpn' to work without /etc/rc.status (boo#1185273)- update to 2.4.10: - OpenVPN client will now announce the acceptable ciphers to the server (IV_CIPHER=...), so NCP cipher negotiation works better - Parse static challenge response in auth-pam plugin - Accept empty password and/or response in auth-pam plugin - Log serial number of revoked certificate - Fix tls_ctx_client/server_new leaving error on OpenSSL error stack - Fix auth-token not being updated if auth-nocache is set (this should fix all remaining client-side bugs for the combination "auth-nocache in client-config" + "auth-token in use on the server") - Fix stack overflow in OpenSolaris and *BSD NEXTADDR() - Fix error detection / abort in --inetd corner case (#350) - Fix TUNSETGROUP compatibility with very old Linux systems (#1152) - Fix handling of 'route remote_host' for IPv6 transport case (#1247 and #1332) - Fix --show-gateway for IPv6 on NetBSD/i386 (#734) - A number of documentation improvements / clarification fixes. - Fix line number reporting on config file errors after segments - Fix fatal error at switching remotes (#629) - socks.c: fix alen for DOMAIN type addresses, bump up buffer sizes (#848) - Switch "ks->authenticated" assertion failure to returning false (#1270) - refresh 0001-preform-deferred-authentication-in-the-background.patch openvpn-2.3.x-fixed-multiple-low-severity-issues.patch against 2.4.10- update to 2.4.9 (CVE-2020-11810, bsc#1169925O): * Allow unicode search string in --cryptoapicert option (Windows) * Skip expired certificates in Windows certificate store (Windows) (trac #966) * OpenSSL: Fix --crl-verify not loading multiple CRLs in one file (trac #623) * fix condition where a client's session could "float" to a new IP address that is not authorized ("fix illegal client float"). This can be used to disrupt service to a freshly connected client (no session keys negotiated yet). It can not be used to inject or steal VPN traffic. CVE-2020-11810). * fix combination of async push (deferred auth) and NCP (trac #1259) * Fix OpenSSL 1.1.1 not using auto elliptic curve selection (trac #1228) * Fix OpenSSL error stack handling of tls_ctx_add_extra_certs * mbedTLS: Make sure TLS session survives move (trac #880) * Fix OpenSSL private key passphrase notices * Fix building with --enable-async-push in FreeBSD (trac #1256) * Fix broken fragmentation logic when using NCP (trac #1140)- Modernize openvpn.service * /var/run has been obsoleted since a long time. * on reload, send HUP signal directly rather than relying on killproc to look for the main process.- Explicitly requires sysvinit-tools as some of the tools shipped by this package are used in various places regardless of whether openvpn is built for systemd or non systemd systems. For the context: sysvinit-tools was pulled in by systemd since 2014 but it's no longer the case so better to be safe than sorry.- Fix inconsistency in openvpn.service: * It uses the unescape instance name as config file basename, so use that in the description as well- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to shortcut through the -mini flavors. - Use %systemd_ordering instead of systemd_requires: in fact, systemd is not a hard requirement for openvpn. But in case a system is being installed with systemd, we want systemd to be there before openvpn is being installed.- Update to version 2.4.8: * mbedtls: fix segfault by calling mbedtls_cipher_free() in cipher_ctx_free() * cleanup: Remove RPM openvpn.spec build approach * docs: Update INSTALL * build: Package missing mock_msg.h * Increase listen() backlog queue to 32 * Force combinationation of --socks-proxy and --proto UDP to use IPv4. * Wrong FILETYPE in .rc files * Do not set pkcs11-helper 'safe fork mode' * tests/t_lpback.sh: Switch sed(1) to POSIX-compatible regex. * Fix various compiler warnings * Fix regression, reinstate LibreSSL support. * man: correct the description of --capath and --crl-verify regarding CRLs * Fix typo in NTLM proxy debug message * Ignore --pull-filter for --mode server * openssl: Fix compilation without deprecated OpenSSL 1.1 APIs * Better error message when script fails due to script-security setting * Correct the return value of cryptoapi RSA signature callbacks * Handle PSS padding in cryptoapicert * cmocka: use relative paths * Fix documentation of tls-verify script argument- BuildRequire pkgconfig(libsystemd) instead of systemd-devel: Allow OBS to shortcut through the -mini flavors.- Add p11kit build time dependency for pkcs providers autodetection- Clarify in the service file that the reload action doesn't work when dropping root privileges (boo#1142830).- Updated openvpn.keyring with public key downloaded from https://swupdate.openvpn.net/community/keys/security-key-2019.asc- Drop use of $FIRST_ARG in openvpn.spec The use of $FIRST_ARG was probably required because of the %service_* rpm macros were playing tricks with the shell positional parameters. This is bad practice and error prones so let's assume that no macros should do that anymore and hence it's safe to assume that positional parameters remains unchanged after any rpm macro call.- Update to 2.4.7: Adam Ciarcin?ski (1): * Fix subnet topology on NetBSD (2.4). Antonio Quartulli (3): * add support for %lu in argv_printf and prevent ASSERT * buffer_list: add functions documentation * ifconfig-ipv6(-push): allow using hostnames Arne Schwabe (7): * Properly free tuntap struct on android when emulating persist-tun * Add OpenSSL compat definition for RSA_meth_set_sign * Add support for tls-ciphersuites for TLS 1.3 * Add better support for showing TLS 1.3 ciphersuites in --show-tls * Use right function to set TLS1.3 restrictions in show-tls * Add message explaining early TLS client hello failure * Fallback to password authentication when auth-token fails Christian Ehrhardt (1): * systemd: extend CapabilityBoundingSet for auth_pam David Sommerseth (1): * plugin: Export base64 encode and decode functions Gert Doering (3): * Add %d, %u and %lu tests to test_argv unit tests. * Fix combination of --dev tap and --topology subnet across multiple platforms. * Add 'printing of port number' to mroute_addr_print_ex() for v4-mapped v6. Gert van Dijk (1): * Minor reliability layer documentation fixes James Bekkema (1): * Resolves small IV_GUI_VER typo in the documentation. Jonathan K. Bullard (1): * Clarify and expand management interface documentation Lev Stipakov (5): * Refactor NCP-negotiable options handling * init.c: refine functions names and description * interactive.c: fix usage of potentially uninitialized variable * options.c: fix broken unary minus usage * Remove extra token after #endif Richard van den Berg via Openvpn-devel (1): * Fix error message when using RHEL init script Samy Mahmoudi (1): * man: correct a --redirection-gateway option flag Selva Nair (7): * Replace M_DEBUG with D_LOW as the former is too verbose * Correct the declaration of handle in 'struct openvpn_plugin_args_open_return' * Bump version of openvpn plugin argument structs to 5 * Move get system directory to a separate function * Enable dhcp on tap adapter using interactive service * Pass the hash without the DigestInfo header to NCryptSignHash() * White-list pull-filter and script-security in interactive service Simon Rozman (2): * Add Interactive Service developer documentation * Detect TAP interfaces with root-enumerated hardware ID Steffan Karger (7): * man: add security considerations to --compress section * mbedtls: print warning if random personalisation fails * Fix memory leak after sighup * travis: add OpenSSL 1.1 Windows build * Fix --disable-crypto build * Don't print OCC warnings about 'key-method', 'keydir' and 'tls-auth' * buffer_list_aggregate_separator(): simplify code- Update to 2.4.6: * CVE-2018-9336, bsc#1090839: Fix potential double-free() in Interactive Service * Delete the IPv6 route to the "connected" network on tun close * Management: warn about password only when the option is in use * Avoid overflow in wakeup time computation- Remove --askpass again, because it was also asking for a password when none was needed. As a workaround for keys that need a password, the "askpass" statement should be added to the config file (bsc#1078026). - Use Type=notify in openvpn.service to reflect what openvpn is actually doing. - Import the new signing key from upstream. - Remove obsolete configure switch --enable-password-save .- Update to 2.4.5 * New features + The new option --tls-cert-profile can be used to restrict the set of allowed crypto algorithms in TLS certificates in mbed TLS builds. The default profile is 'legacy' for now, which allows SHA1+, RSA-1024+ and any elliptic curve certificates. The default will be changed to the 'preferred' profile in the future, which requires SHA2+, RSA-2048+ and any curve. + openvpnserv: Add support for multi-instances (to support multiple parallel OpenVPN installations, like EduVPN and regular OpenVPN) + Use P_DATA_V2 for server->client packets too (better packet alignment) + improve management interface documentation (bsc#1085803, CVE-2018-7544) + rework registry key handling for OpenVPN service, notably making most registry values optional, falling back to reasonable defaults + accept IPv6 address for pushed "dhcp-option DNS ..." (make OpenVPN 2 option compatible with OpenVPN 3 iOS and Android clients) * Bug fixes + Fix --tls-version-min and --tls-version-max for OpenSSL 1.1+ + Fix lots of compiler warnings (format string, type casts, ...) + reload HTTP proxy credentials when moving to the next connection profile + Fix build with LibreSSL (multiple times) + Remove non-useful warning on pushed tun-ipv6 option. + autoconf: Fix engine checks for openssl 1.1 + lz4: Rebase compat-lz4 against upstream v1.7.5 + lz4: Fix broken builds when pkg-config is not present but system library is + Fix '--bind ipv6only' + Allow learning iroutes with network made up of all 0s - Includes 2.4.4 * Bug fixes + Fix issues when a pushed cipher via the Negotiable Crypto Parameters (NCP) is rejected by the remote side + Ignore --keysize when NCP have resulted in a changed cipher + Configurations using --auth-nocache and the management interface to provide user credentials (like NetworkManager) on client side with servers implementing authentication tokens (for example, using --auth-gen-token) will now behave correctly and not query the user for an, to them, unknown authentication token on renegotiations of the tunnel. + Invalid or corrupt SOCKS port number when changing the proxy via the management interface. + man page should now have proper escaping of hyphen/minus characters and other minor corrections. * User-visible Changes + Linux servers with systemd which use the openvpn-server@.service unit file for server configurations will now utilize the automatic restart feature in systemd. If the OpenVPN server process dies unexpectedly, systemd will ensure the OpenVPN configuration will be restarted automatically. * Deprecated + --no-replay (will be removed in 2.5) + --keysize (will be removed in 2.6) * Security + CVE-2017-12166: Fix bounds check for configurations using - -key-method 1. Before this fix, attackers could send a malformed packet to trigger a stack overflow. This is considered to be a low risk issue, as --key-method 2 has been the default since 2.0 (released on 2005-04-17). This option is already deprecated in v2.4 and will be completely removed in v2.5. - Rebase openvpn-fips140-2.3.2.patch - Drop 0002-Fix-bounds-check-in-read_key.patch * upstreamed in c7e259160b28e94e4ea7f0ef767f8134283af255 - Partial cleanup with spec-cleaner- Add --askpass to ExecStart, so that the user name and password are correctly being queried from the user. (bsc#1078026, boo#985798, boo#1031748) - Use %service_add/del macros throughout (bsc#1038406).- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- Do bound check in read_key before using values(CVE-2017-12166 bsc#1060877). [+ 0002-Fix-bounds-check-in-read_key.patch]- Do not package empty /usr/lib64/tmpfiles.d- Update to 2.4.3 (bsc#1045489) - Ignore auth-nocache for auth-user-pass if auth-token is pushed - crypto: Enable SHA256 fingerprint checking in --verify-hash - copyright: Update GPLv2 license texts - auth-token with auth-nocache fix broke --disable-crypto builds - OpenSSL: don't use direct access to the internal of X509 - OpenSSL: don't use direct access to the internal of EVP_PKEY - OpenSSL: don't use direct access to the internal of RSA - OpenSSL: don't use direct access to the internal of DSA - OpenSSL: force meth->name as non-const when we free() it - OpenSSL: don't use direct access to the internal of EVP_MD_CTX - OpenSSL: don't use direct access to the internal of EVP_CIPHER_CTX - OpenSSL: don't use direct access to the internal of HMAC_CTX - Fix NCP behaviour on TLS reconnect. - Remove erroneous limitation on max number of args for --plugin - Fix edge case with clients failing to set up cipher on empty PUSH_REPLY. - Fix potential 1-byte overread in TCP option parsing. - Fix remotely-triggerable ASSERT() on malformed IPv6 packet. - Preparing for release v2.4.3 (ChangeLog, version.m4, Changes.rst) - refactor my_strupr - Fix 2 memory leaks in proxy authentication routine - Fix memory leak in add_option() for option 'connection' - Ensure option array p[] is always NULL-terminated - Fix a null-pointer dereference in establish_http_proxy_passthru() - Prevent two kinds of stack buffer OOB reads and a crash for invalid input data - Fix an unaligned access on OpenBSD/sparc64 - Missing include for socket-flags TCP_NODELAY on OpenBSD - Make openvpn-plugin.h self-contained again. - Pass correct buffer size to GetModuleFileNameW() - Log the negotiated (NCP) cipher - Avoid a 1 byte overcopy in x509_get_subject (ssl_verify_openssl.c) - Skip tls-crypt unit tests if required crypto mode not supported - openssl: fix overflow check for long --tls-cipher option - Add a DSA test key/cert pair to sample-keys - Fix mbedtls fingerprint calculation - mbedtls: fix --x509-track post-authentication remote DoS (CVE-2017-7522) - mbedtls: require C-string compatible types for --x509-username-field - Fix remote-triggerable memory leaks (CVE-2017-7521) - Restrict --x509-alt-username extension types - Fix potential double-free in --x509-alt-username (CVE-2017-7521) - Fix gateway detection with OpenBSD routing domains- use %{_tmpfilesdir} for tmpfiles.d/openvpn.conf (bsc#1044223)- Update to 2.4.2 - auth-token: Ensure tokens are always wiped on de-auth - Make --cipher/--auth none more explicit on the risks - Use SHA256 for the internal digest, instead of MD5 - Deprecate --ns-cert-type - Deprecate --no-iv - Support --block-outside-dns on multiple tunnels - Limit --reneg-bytes to 64MB when using small block ciphers - Fix --tls-version-max in mbed TLS builds Details changelogs are avilable in https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn24 [*0001-preform-deferred-authentication-in-the-background.patch * openvpn-2.3.x-fixed-multiple-low-severity-issues.patch * openvpn-fips140-2.3.2.patch] - pkcs11-helper-devel >= 1.11 is needed for openvpn-2.4.2 - cleanup the spec file- Preform deferred authentication in the background to not cause main daemon processing delays when the underlying pam mechanism (e.g. ldap) needs longer to response (bsc#959511). [+ 0001-preform-deferred-authentication-in-the-background.patch] - Added fix for possible heap overflow on read accessing getaddrinfo result (bsc#959714). [+openvpn-2.3.9-Fix-heap-overflow-on-getaddrinfo-result.patch] - Added a patch to fix multiple low severity issues (bsc#934237). [+openvpn-2.3.x-fixed-multiple-low-severity-issues.patch]- silence warning about %{_rundir}/openvpn - for non systemd case: just package the %{_rundir}/openvpn in the package - for systemd case: call systemd-tmpfiles and own the dir as %ghost in the filelist- refreshed patches to apply cleanly again openvpn-2.3-plugin-man.dif openvpn-fips140-2.3.2.patch- update to 2.3.14 - update year in copyright message - Document the --auth-token option - Repair topology subnet on FreeBSD 11 - Repair topology subnet on OpenBSD - Drop recursively routed packets - Support --block-outside-dns on multiple tunnels - When parsing '--setenv opt xx ..' make sure a third parameter is present - Map restart signals from event loop to SIGTERM during exit-notification wait - Correctly state the default dhcp server address in man page - Clean up format_hex_ex() - enabled pkcs11 support- update to 2.3.13 - removed obsolete patch files openvpn-2.3.0-man-dot.diff and openvpn-fips140-AES-cipher-in-config-template.patch 2016.11.02 -- Version 2.3.13 Arne Schwabe (2): * Use AES ciphers in our sample configuration files and add a few modern 2.4 examples * Incorporate the Debian typo fixes where appropriate and make show_opt default message clearer David Sommerseth (4): * t_client.sh: Make OpenVPN write PID file to avoid various sudo issues * t_client.sh: Add support for Kerberos/ksu * t_client.sh: Improve detection if the OpenVPN process did start during tests * t_client.sh: Add prepare/cleanup possibilties for each test case Gert Doering (5): * Do not abort t_client run if OpenVPN instance does not start. * Fix t_client runs on OpenSolaris * make t_client robust against sudoers misconfiguration * add POSTINIT_CMD_suf to t_client.sh and sample config * Fix --multihome for IPv6 on 64bit BSD systems. Ilya Shipitsin (1): * skip t_lpback.sh and t_cltsrv.sh if openvpn configured --disable-crypto Lev Stipakov (2): * Exclude peer-id from pulled options digest * Fix compilation in pedantic mode Samuli Seppänen (1): * Automatically cache expected IPs for t_client.sh on the first run Steffan Karger (6): * Fix unittests for out-of-source builds * Make gnu89 support explicit * cleanup: remove code duplication in msg_test() * Update cipher-related man page text * Limit --reneg-bytes to 64MB when using small block ciphers * Add a revoked cert to the sample keys 2016.08.23 -- Version 2.3.12 Arne Schwabe (2): * Complete push-peer-info documentation and allow IV_PLAT_VER for other platforms than Windows if the client UI supplies it. * Move ASSERT so external-key with OpenSSL works again David Sommerseth (3): * Only build and run cmocka unit tests if its submodule is initialized * Another fix related to unit test framework * Remove NOP function and callers Dorian Harmans (1): * Add CHACHA20-POLY1305 ciphersuite IANA name translations. Ivo Manca (1): * Plug memory leak in mbedTLS backend Jeffrey Cutter (1): * Update contrib/pull-resolv-conf/client.up for no DOMAIN Jens Neuhalfen (2): * Add unit testing support via cmocka * Add a test for auth-pam searchandreplace Josh Cepek (1): * Push an IPv6 CIDR mask used by the server, not the pool's size Leon Klingele (1): * Add link to bug tracker Samuli Seppänen (2): * Update CONTRIBUTING.rst to allow GitHub PRs for code review purposes * Clarify the fact that build instructions in README are for release tarballs Selva Nair (4): * Make error non-fatal while deleting address using netsh * Make block-outside-dns work with persist-tun * Ignore SIGUSR1/SIGHUP during exit notification * Promptly close the netcmd_semaphore handle after use Steffan Karger (4): * Fix polarssl / mbedtls builds * Don't limit max incoming message size based on c2->frame * Fix '--cipher none --cipher' crash * Discourage using 64-bit block ciphers- Require iproute2 explicitly. openvpn uses /bin/ip from iproute2, so it should be installed- Add an example for a FIPS 140-2 approved cipher configuration to the sample configuration files. Fixes bsc#988522 adding openvpn-fips140-AES-cipher-in-config-template.patch - remove gpg-offline signature verification, now a source service- Update to version 2.3.11 * Fixed port-share bug with DoS potential * Fix buffer overflow by user supplied data * Fix undefined signed shift overflow * Ensure input read using systemd-ask-password is null terminated * Support reading the challenge-response from console * hardening: add safe FD_SET() wrapper openvpn_fd_set() * Restrict default TLS cipher list - Add BuildRequires on xz for SLE11- Update to version 2.3.10 * Warn user if their certificate has expired * Fix regression in setups without a client certificate- Update to version 2.3.9 * Show extra-certs in current parameters. * Do not set the buffer size by default but rely on the operation system default. * Remove --enable-password-save option * Detect config lines that are too long and give a warning/error * Log serial number of revoked certificate * Avoid partial authentication state when using --disabled in CCD configs * Replace unaligned 16bit access to TCP MSS value with bytewise access * Fix possible heap overflow on read accessing getaddrinfo() result. * Fix isatty() check for good. (obsoletes revert-daemonize.patch) * Client-side part for server restart notification * Fix privilege drop if first connection attempt fails * Support for username-only auth file. * Increase control channel packet size for faster handshakes * hardening: add insurance to exit on a failed ASSERT() * Fix memory leak in auth-pam plugin * Fix (potential) memory leak in init_route_list() * Fix unintialized variable in plugin_vlog() * Add macro to ensure we exit on fatal errors * Fix memory leak in add_option() by simplifying get_ipv6_addr * openssl: properly check return value of RAND_bytes() * Fix rand_bytes return value checking * Fix "White space before end tags can break the config parser"- Adjust /var/run to _rundir macro value in openvpn@.service too.- Removed obsolete --with-lzo-headers option, readded LFS_CFLAGS. - Moved openvpn-plugin.h into a devel package, removed .gitignore- Add revert-daemonize.patch, looks like under systemd the stdin and stdout are not TTYs by default. This reverts to previous behaviour fixing bsc#941569- Update to version 2.3.8 * Report missing endtags of inline files as warnings * Fix commit e473b7c if an inline file happens to have a line break exactly at buffer limit * Produce a meaningful error message if --daemon gets in the way of asking for passwords. * Document --daemon changes and consequences (--askpass, --auth-nocache) * Del ipv6 addr on close of linux tun interface * Fix --askpass not allowing for password input via stdin * Write pid file immediately after daemonizing * Fix regression: query password before becoming daemon * Fix using management interface to get passwords * Fix overflow check in openvpn_decrypt()- Update to version 2.3.7 * down-root plugin: Replaced system() calls with execve() * sockets: Remove the limitation of --tcp-nodelay to be server-only * pkcs11: Load p11-kit-proxy.so module by default * New approach to handle peer-id related changes to link-mtu * Fix incorrect use of get_ipv6_addr() for iroute options * Print helpful error message on --mktun/--rmtun if not available * Explain effect of --topology subnet on --ifconfig * Add note about file permissions and --crl-verify to manpage * Repair --dev null breakage caused by db950be85d37 * Correct note about DNS randomization in openvpn.8 * Disallow usage of --server-poll-timeout in --secret key mode * Slightly enhance documentation about --cipher * On signal reception, return EAI_SYSTEM from openvpn_getaddrinfo() * Use EAI_AGAIN instead of EAI_SYSTEM for openvpn_getaddrinfo() * Fix --redirect-private in --dev tap mode * Updated manpage for --rport and --lport * Properly escape dashes on the man-page * Improve documentation in --script-security section of the man-page * Really fix '--cipher none' regression * Set tls-version-max to 1.1 if cryptoapicert is used * Account for peer-id in frame size calculation * Disable SSL compression * Fix frame size calculation for non-CBC modes. * Allow for CN/username of 64 characters (fixes off-by-one) * Re-enable TLS version negotiation by default * Remove size limit for files inlined in config * Improve --tls-cipher and --show-tls man page description * Re-read auth-user-pass file on (re)connect if required * Clarify --capath option in manpage * Call daemon() before initializing crypto library- Fixed to use correct sha digest data length and in fips mode, use aes instead of the disallowed blowfish crypto (boo#914166). - Fixed to provide actual plugin/doc dirs in openvpn(8) man page.- Update to version 2.3.6 fixing a denial-of-service vulnerability where an authenticated client could stop the server by triggering a server-side ASSERT (bnc#907764,CVE-2014-8104). See ChangeLog file for a complete list of changes.- Update to version 2.3.5 * See included changelog - Depend on systemd-devel for the daemon check functionality/bin/sh/bin/sh/bin/sh/bin/shh01-armsrv1 1772473469  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ab2.6.10-150600.3.20.12.6.10-150600.3.20.1     openvpnopenvpnopenvpn.targetopenvpn@.servicetmpfiles.dopenvpn.confopenvpnrcopenvpnopenvpnAUTHORSCOPYRIGHT.GPLChangeLogPORTSREADMEREADME.SUSEREADME.auth-pamREADME.cmake.mdREADME.dco.mdREADME.down-rootREADME.ecREADME.mbedtlsREADME.wolfsslcontribOCSP_checkOCSP_check.shREADMEcmakegit-version.pyparse-version.m4.pyextract-crlextractcrl.pymultilevel-init.patchopenvpn-fwmarkroute-1.00READMEfwmarkroute.downfwmarkroute.uppull-resolv-confclient.downclient.upvcpkg-manifestsmingwvcpkg.jsonwindowsvcpkg.jsonvcpkg-portspkcs11-helperconfig-w32-vc.h.in-indicate-OpenSSL.patchnmake-compatibility-with-vcpkg-nmake.patchpkcs11-helper-001-RFC7512.patchportfile.cmakevcpkg.jsonvcpkg-tripletsarm64-windows-ovpn.cmakex64-mingw-ovpn.cmakex64-windows-ovpn.cmakex86-mingw-ovpn.cmakex86-windows-ovpn.cmakemanagement-notes.txtsample-config-filesREADMEclient.conffirewall.shloopback-clientloopback-serveropenvpn-shutdown.shopenvpn-startup.shserver.confsample-keysREADMEca.crtca.keyclient-ec.crtclient-ec.keyclient-pass.keyclient.crtclient.keyclient.p12dh2048.pemgen-sample-keys.shopenssl.cnfserver-ec.crtserver-ec.keyserver.crtserver.keyta.keysample-scriptsauth-pam.plbridge-startbridge-stopclient-netconfig.downclient-netconfig.uptotpauth.pyucn.plverify-cnopenvpnCOPYINGopenvpn-examples.5.gzopenvpn.8.gz/etc//run//usr/lib/systemd/system//usr/lib//usr/lib/tmpfiles.d//usr/sbin//usr/share/doc/packages//usr/share/doc/packages/openvpn//usr/share/doc/packages/openvpn/contrib//usr/share/doc/packages/openvpn/contrib/OCSP_check//usr/share/doc/packages/openvpn/contrib/cmake//usr/share/doc/packages/openvpn/contrib/extract-crl//usr/share/doc/packages/openvpn/contrib/openvpn-fwmarkroute-1.00//usr/share/doc/packages/openvpn/contrib/pull-resolv-conf//usr/share/doc/packages/openvpn/contrib/vcpkg-manifests//usr/share/doc/packages/openvpn/contrib/vcpkg-manifests/mingw//usr/share/doc/packages/openvpn/contrib/vcpkg-manifests/windows//usr/share/doc/packages/openvpn/contrib/vcpkg-ports//usr/share/doc/packages/openvpn/contrib/vcpkg-ports/pkcs11-helper//usr/share/doc/packages/openvpn/contrib/vcpkg-triplets//usr/share/doc/packages/openvpn/sample-config-files//usr/share/doc/packages/openvpn/sample-keys//usr/share/doc/packages/openvpn/sample-scripts//usr/share/licenses//usr/share/licenses/openvpn//usr/share/man/man5//usr/share/man/man8/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:42980/SUSE_SLE-15-SP6_Update/13cf8625c62c201eef970bc2a165ab85-openvpn.SUSE_SLE-15-SP6_Updatedrpmxz5aarch64-suse-linux       directoryASCII textELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=c21074455c5d98a6b005c8ad31eabfadaba2c548, for GNU/Linux 4.3.0, strippedBourne-Again shell script, ASCII text executableUTF-8 Unicode textASCII text, with very long linesPOSIX shell script, ASCII text executablePython script, ASCII text executableunified diff output, ASCII textAlgol 68 source, ASCII textPerl script text executablea /usr/bin/python3 script, ASCII text executabletroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)RRRR R R R RRRRRRRR RRRk7 nsystemdsystemdsystemd-sysvcompatutf-8a10e2db5fd8521099755bc9a650e97601cd7996dc56b43db1d518c8b2636573a?7zXZ !t/]"k%{\.SET&bAP[%&Up2{>1;QW9-I?ѳGاP(7n"XFV vѼ\ r,ME U͍oL8!%tx[?[r"u;I=E yc {  ǝ ؙJ iOr{m5p&bv݋'Ƽĉobd[R=!b6N*3Aq8+! rpB1.Mm6dKEEV4Leيy6i>L cA&C>Ԯ9m>c,\/2 CK@u 7Wlz3­ɳ_,iXhR^| $|b 0ڰ "xQ;8oR1YIɇzy+rmi_Hb:8{ULj`"8G%.3WJv/% gͥ+6| gD#Ϟ8!v:5/z3"!pu<%:y BvA L9)(5rB*>tŦƕCRyvm+/%C('W =mj"ڊ~⣑y\R`G~K6Oa*ݣ)4R '4醒+!H`x9TUaRi|ڌ1JYͫ'JP^#SK"ÛIl4l+Yv3±E&nOGo\ LѼ4[uBʺ ECx`RR> t >^[^D0߆ܠd&zd|GVflx⻡T?bla|,# xpqEE;jGvFOqrӤ>D<+CKa `be\.b̉%}K@elǗF4_ginDi[z@Ox0;]8d>?Quj *%SR?g6xB}Ѻ捶/<[Ģ;~(3g-h0Sd: G? (L7YoK>R4 \ j``;A`B&=D%Fk3ǝD% ҶOBM-Qtf*D` dw+aGֻ}Zd"v1w1u圧t-9ڕ<ƅ7jWe!j J/;@!$ gTdUsU޽s#n մ * Y9j!`,^qY#mnڞ?@zҟ| ]ю1ռϭ" EXݕ5NCAYA .3~fUbF 0<\/u&W3"`~ꂢ/;Ͳ^H(԰8h+7p[R1vjpQ%Ogvt2T`tr2+ZFJq=W_^\5/G/],25NƁ\g)>vy;L=r!pdG*wVehrUW' Zmk(LaUZ6 ӎ-B>+6ib$B't~<''v{s˩2uuD '4T5=HC>Ūk3#<|y⅖gɁ46p7@FF"?P*?)E|dMJfݥ7 ͇/ЃSXz0:w lCި?ƾDV)M*Xn^)iv;59(b_A]} Zcd8qe[ks-*"EQM;WiyHּuMrӌ_ȔOq`S̹`I{k r "+GL҃=;?ou%0Tp>=;w`tQg|~7W$ZF}c fZu8Ԧ>^pe>,u1T d6@ƿM,f. uV:ooO|/ωh4mMQ USxŨR< 38fseO"–\[z(BKKq 笹,F*!jiQ̊3y7Rc52m S-z,-+G+%%)mJ'n!5ea`[$lG9GfǵL  Wuu8Xӌ5SSHlCNXo$9R.U>| a4LBǞ>NX m8h\\%e$R&_ -sȣl/$j*_~Uu_=%7گ3Y*_ot0dPшaΨ 87U+)Hv7|f 2%v碾AQL6 ]~O^)˴F\QKq肐 vŲ-v.pTܾ_۽]fֽVXɅ@-rGO+3.3օHN֬%ȊL[(!~̜ }830t X#{% E&tU!sr~9"J>qi/Jeie{@ů⸴8GOٴ* 2ÅN0kT6uнS{oDKt. :L/5b㄄M!Z$gD,"9ٙ(*ČթLC}pA ZNohZLXuT ϲZ`&Axv,ܑZ$pUnofs=_/6nM*#Աj}LITM7p A %6bw ԧ` X[V} FMwܽ@a[>IttaOȌ"! /d6EiiG "UcUK('7sO@^:}k-e"dF7w}"xTm\'wUof)9J+NV&K=XN$#nŁs 1"Jk;V$hUy'?$<jXîz7t㶫 Tڐ0˞"W0w6.1uJo _^Zyqڷ[}vQrfDzpRE\΅h_;1_s{ΑLV2Xڶ* -Ɖ:T!\IA-{F={JvogP좗?W=@E-툙B@j%g8_;%ڮ0I 2X 5Ԡ h3HU$ vONgjT5Q3&F 4c;~7So!ΰ ,% kp# ;+`8jw7}rF\Jsh_b ֆv{0.c<&U8;?u):sTt# K#Ubh}+5$Oڿ6Han66{o& [f}Twb@sb՟ٴ5] FDE+> [)g(5~gGj7g,M wP ALHyH!%˝\o]\9<1`5͐)Wf)&q,4CS%   /x$'@As L*S#Dbעw ejʆY>$ņ>Kmh̑Ŗo6Кqhs}&mvZGZ!ꍿ1dDHѡzB<.c̉ҝKfct|/3b#ob Aroa>,~>Y\'Iʹ8͇YB^?j*ƔxlI2m ea:z#W<]dI B-Sx۷^Q3pcҵp KkI_ۢOXd߄L$;}hܬ`^B%-שd9Y8V|yFg69&$X! Hs{#ݗLKL(0͟d:IWi| ʂ#Vk J7*F"vO9B|WZb-@aԨOrC}"-rJzȌf2J.7e-$@29C⯂/U(SHWC0~l5 5k/:=۩"Q2bKb}5u&\ml]QPkͼ(f%&Shk`M|F\> ܪDV11fhYQt~8 #[(1ιw4% e 0C_R?jධi$oURl,E KX{"}gOC^z.d*m5a޹q8"eDK5mL;OTŊWRʓq *}x>:O{FrgSS`0K<pYGC+mF';*'wZa0)t+ P_gºOڋRNWWBĖQӾ|I`ǂ^T'|];>צ v @2lt4XPߴP`jZHιet_.pݮ3u[vk2t8Ӣa:B+q,! 6n |-ODr;HFYJz E5HRǔ4Uj)R釤Rq̼Q_:LC OhB2aYr WhZBv&8o;V,2mTGƛ\>ҁ#^Ld#>< F; 30P ൯d2k #d 2_CI)@x֋OoU!oc+kTv{1W$`pvc2[}P)Ike@8/%!bF͝#ȹ1p"J` x&]@!5W-G KMEWNx'?=$RE䃅 w2qfmͽhiw#sʡCfƶ;ͯ!3")ڪ6ŋB5/F)K['`V=i5?Fp&9o%iܻmXxH/Q; oJ1)ym #bqY C(o[d阼C%=a \(djwF-zƗb}QI-bwT,?Sߖr5:a|r7fݍ0s`zfVnşsާPJL^;7X_}IHGv1Am;T87F "8p󖦮ɦ_X(dMFi #%d&_xY=PEjƒ !¯( }/WI?R*iGA`cG6"qi{lܔ 勐(aϔ YCT"vÆwр2U*k6R ZZ*ΟD+ÑuLBܰC`=,%$qAvӚ5Ydwv$Y{X /Tdhފr|}$rI$4;AmV -<"eLܼ ;ESUe&ȩeaֱ>sd0a3& iz"s*ȞA L#7&N6[ѹ5"4;iԣuCys>:S? PZuO%㞂bW[o^.kH00.|?ٗ,qC*$OoϓWp:>ԃr$-x4 qjX2z+ѡtlVnڰM}*<'S^utj%v?+Ȝ0)%Fk›&Z'Vݰ:bxɵh<1M߻^B D!J h Vo~MI;{=&sj?0SFl,/Z=b7w W_X8L%aDiٛb:~6RXu wvp>$ 2gW%Rpt sl鋉IWpI3WZ/*I>Va߂ :61RߝyeO?{R %%(T*:`{Kuϧ]Dgh*Pb}E ,,JA2;v']H:U0Mykzr]Bs_J81/-(l8ςI۩,b]o12:F4k- z6> ǝDP,aJŞ"M,u49V!יYȅLĜ o3YV{Z Q8]ڙ p #ΧzuNpđ4Z.Wf37!ĥFXmr`VjF''3ӱ}a#4eniڽVdm {1 uZd ]"ytoY:$n .i<),] CĂ46.DAGU_}h:p_96Y."аjO VF  a v %HU}k^α<\G@f5,1(0J'WbASʮ!ӶxϒH)` aRA`\O]4% xc#A| 3v}ܝx BW ƮFMYMrH¥|qn"F*:/'Aͨ2> ; l,Ǭvg|L@9)S!]`n5=oP%^EQ:}aȍ'K?oNȔ7CzI,7"+e6iRyYw*b  y]4Y5]'7+y2+:ZA+&Z@nP~u Sw*n'$1<f:zO-8T"׊%˳CAJuRq4d({Uޗhy;4$z6yQHxlPغY}& 2v5FZA>2qDQ@cY Dum=4a>g?pˬEt:O@inW*_6s/Z龔~&%ݻ_Wʐ=aթi..LGlt8掵**U ڬESÏϋxnq\;|_RC6~3y|=bbeBP 7pydh:(!{q]WAO WwMtZ^+ yiEKܶΜ5(*S|woTŻl  <| ͺ% "նwW츿N՝rf0*s Si]`Ң aulbvmo36 ߙ0QtQ1yߑ,-k$KAgPaCgM.$ _E}fς-j>;us翴 kTQK(e&\7$ &"7J`ONjof{_p7X0yRԜb|M{h3/8칂fS_3x^db%IP )yєޒj`LmQ~HCRb\zォGte>^7mBKڮ6|w܈/;h c=.z/F) v$̱*KF2۬ &;ړxE %%?MǏ5 27!4φ+s7zMAl< jv'#a5ڣa1AuiwF tO$77#`HہEÒfpwTEȺw|i2y&?I^=u\~ŝ_AMI6Lm+e\6V#gW$䚜ޥCAju7'iH`P@6 az00v.|S;F!^Z)cU-^۞4A6+ 1 GA E P4c{2P{ E*m jr>d[w +ɼAgֈଭ|὞6f?=zC|, oֹܭtx6lz3HkN=Ӣ"~'|V>i%broFQG}mntt+;ͦB$)_t@h; ZpBbUo+|a!+Zr.)i 4xj`$w0Zۉk+"$i*ZR6jO@Űgw}6ouW#.Yz~y3E}BDԨrE:eރt$ ŋ[̆mbME;kx*|L""9~8w^^gGY\ 8 PE/aË$Ԛ{oL/9F-mqocTe_` L{-ގ jȀ6; S7nWt {j{hiW|Y3R (ͤt^[Ta]I[8(ٶTv[|\ 馓tItA$WcSbMO[rR\vz+N[ dKՏ Ìְ=:m J ?"-PJjv^ʎ jF7j43?Z!S)Ҥ>t^iYB8ևTGeINJ &4҅z>p~^*wR";FBojXl#(- @}V4[ingM3j'+>d۠gSٱ2h 2 լa͹!ofZe0RՕ~kfuZv>[~W9*^=xmrxi`klMd]U7V7T]/Rr *%7]Q[A[vqsKj$ ۥ&N WZ 7L߳¹*k]HOX .N SѵD1䡜.k"=]L(a~nT$A՞'&46;"-N*:ozs=y]}B%d/ njAg&[Ҍ \dpp  "Cø!੣X_eRPh(͸`K-2H9) %JT:*| Y$FNk<](&DJT]V?D#vqoos>g N khgB9 dG5g^ٚXA\6*,tm|dp J)eH7//AɘT8.q:>ptKJ 0h3MwّUPW#/fb~ewqŦYdlD0P@Ϟ)j$;5cj8U/K(7Ok1\yc0}u_`"Y\@XN`Z&a{N/})}H|oMCF\J /vu@XPz e/CTog-gѹBP~^ͼ}dri{ { AkYcFMtMy^Ey1a"ˑ9$. Fnl^^Nv[l}1cSxzp? {^ )tb^_} ^DWz"-%D17Sg^z,DTSndh,݅گ5tA/bR`r|8p31҆l0^x@\>Ag@9<)4hl$7T;n -P+e@^-`Rd'CvUlNA ׾It֡DmE3MՕhd|c^AA݈~3$9:7ٞQ P b}y\n/qCE"%8 < ۲ !Xr\߀ft~QO։;Gwf,/* ޣ X_~F #8k[o,L&CF+bPdf .#ƓAq9*~!Rt\BT׎ߦz!i`PV2y(_[ή8|QЧK!3%Ɍ,):,UБ5c~&Ue[a+pl'>W*Mzk+uoKI.s(/n)s:br(# !+^k<:/ep/Dxw6 6U_l9$S[_8?W7h5bP%{rjPd.KX[mњDTs崣),̩˦,j $Q]^iQ;Ae3cQ.^ +`;mKct75-ؾ.MkQbZg͌ӊv%"M魀D̔/SдmR:\ չBP,OOv2̲k f׍A *7aY|zVմm@aGqftَVM|Odt5gҲYfMTlw/6Yt<.{ 7dbnFa4SD2&Oy[7j! "jL0GTx:P=Ζ[4=ptiUt_=ps3J0i :t C,6S0Bg@ U+$>И=m&GiG,s ;L;Ğ-vȲͰJsed2IQ1t XbT(x>8¼h_VaԮKQ`J~I|Sm`$ z0lKqn,W8շGlN(tW$\ԃ 1<хkݡi[ H evZ.^hQz"oǍ @بw2H:s!:н(i*E 2',ZPϽ;h*o*M]غY]GK{&S-`9%$"8M#Q!⮈ygh^#  y0kn8@PI-jE@F4!]yvXUgQW|Ιw6%mc=mX3* cLyrnApB8nG<9./+Bר>z'%WQu/k =dkjapK%jOٟn5d7I{f`z;kiFy7 DV\g8W+J HƋgҝQU18OP [c8ϴFK/Eqj9j,U@JF.W1 Hx.S *jN%(`]I`2E6YxMntF_eB\DŽ&{NxIBҚVgak{S !֟N1k 1ÈOտ{Bw,cOzճK8έ] ]|`86q sy|zwHER }Qڀ?5 s";B5#{E@7jpQ_pLӍqqɇ͘"P+B0Zy@2Q z.r8EDF5-oUp),/2Qd&2n*as-I"_=Y*;zWFVroUoPK&+G|"ԿVnĕ G5jjX[L" %\Fd#RД0Ϗ=b{-)? #% Ϻ{ ږіIXSa^w*%GՒ̼uzrU6.o^H*@LA|f3&8*̃i}#\;8125."-e2ߟu*ѷC`#r\ix+n,ʂ߳s' sA#Dйzƹ~Skb!Ή.'~%Ϭ^ͫ+s8@ܯ-z- MUa.{|S![߂00\rBi\z t=ReL^I}W%nC.PP׍e*2O"kv} BIēِ' -a$'ԯvAǻc> Κ,NH:s-0֗0* [.]7F _m87b&1P3rls˚tAN +k-'}w]},`R<FcWi&0EP] ·XB{О; o\!1 "Qe~]%)O* m"fEbTCO g 2&|4iXlβ@1A>Icħ}ͳ#:FmLꎡKc5Ru?{h1v;q.- JZ8vuc#h\9go RC,YLK@s1r p/BBK5VgmuVg*:-+4:fw, ~b*ZI uQ1zG @6z&c&t ~UBIo9dSSdy? KCW1ы[4z|n&xŊX]VR;CmE~ն)``wUM H0Aq9x- fY~:#Fz[dOos7Oq$)_GwCPfP ~EQ^czƤVԲlkGA㣟1egQ|5J.i,O.c 55EI퀥9pbUaKjAud wlߵU(/¦/w \^ 6 i_i=P{>Kφ[m,k&e*_2AKΐT?8wCk> tZs 󶢕x % a_w%-}? 8?qOLSܰX&UR4`0lL'ym[p`T?IѴk.6KKcYٙD =ȿ缮<}Ɣ+ ,5` sLZ&ZQ dc8] /op"$5v31:8JQO O0["$t#f,mr^|""QF Qu,cd!!kR1{WLv\F7%Teۃ-Ż!ڴSp"Q ΩƀEcr/9)v#S|H)`&:pσ G+h"Wᷩr~ i)ޛ_;;ZT秼wgϰw+FceKD@8_2(K~!_הg~l~KcY?(Ab"WvdKZ G#kh !՞1+dӈqlZ]T7U38&uJHKJnOzj%oH" +# y @ߊSPjW+J t(޾g_̺[̿amO~Wv˧*+tqp-Vvo",_Zz>e%+#T՜V>2PUzQ([JSlDoabf4pŏ@j_b3)r_8?ndR>>rI![kF''eq2zw!~`Gs 8,಻:Q4$f%&SXC]wܠj1v{>+fmD@+ 7J:aHwRZBo,ε WaQbe`2{ɏ>QСL#!{ ccR·'tO,NІ.?`Iʻw]34T+^-:–҆7*!~Euw{ ] "_KuN?h ymE˜2єLZ:-eV'ɸtTTvF"n~⡶ebuҹԫril?(Jpd# f~ 3l XBaWjƼa'B|;*JAi{%eczZAVX8&Ip]im*솵.y?$xd鰏>İrѭq'ԑ&+-3@؍,xħG)touTQ5/֪mJK!|-u-`3QB+3o!iufL6fa+D`_'-.LjM4M݅ BO9XmW9ERP q|:VY& |2*КdAo QUV5ME5J`R/pk>)p?Tdx#h,.xiҕH9H2x]gGa lSA蒊h"k 16.[T gq5m;hSKJAq@:fZ۾!I8T)o*؃-b=]$+&p3䓃V$7L)dd\qLeĩ bSQ#qϋ_KISjKtC׹ ߈)w"/nG'߻0jSAfޫI TºG.pwcfZڴ4m>R',Sʄn@%7@hqd|@φ.8t^S۞i5Ql}v.c+10F77v)KfZ(E񗼄0W-/$җPg;)f$-X 7k =?gWђ'甯 ©W 8f&Dwe<膔6F - W}ox]8.Jo/UM\@:":[)<=FyPs8,{ee*~O1U; ܾ4W^#Hތa<@:RBLhuD]hJr|&Ƀgiu:uVf8q=:K^oeS+^H;ꢀ:tr۷S$Ix7UǺt(+>oB@Fhv{?a2So+$}g W{~Mİy2ZCՒ U'Αqh"pq_Iy/y/j\)ɫ3 z< jӊ[lCzW ~.K7:azɒ)ϰX3(]ulaT7fCHRha}ޮmC/bL(tMgҲ,Zq#aҚ6ZfdueWyZQyO%62uRD FL理x͇9:d1z 7(.ދ̀lp?{b7"i/NFf'܁@=fz魌َ~c!IQV"|h㬮 ;laU!+o qGCzg_EKYJv W1'Lu\Hȑ7Յ6}S9Tuh qQzޔ q*Jېck29`ǫR. % #+xK\;uR0i"Cqrj %Dfz?U82K{wwy.EB3'\掫¸ 2FV";ue![t $l WV w3dӼ摓EJ#N: dZ|(ݴ_]^)И/)`$ ]~[HtZz-l\cVa〇DuBSc $$A; r@T=zZSz ePѶx5sn%=c΃x!] R<}Uvqog#6|YS^+v37 iBlsH]@ dFA]B2J:"iNeQFO;XOPA{.c =Ck\!v8ZsZiiKEVf@iQ[Zn,!V|.~[&{?b[32_VxGlx ;oαq xj~r{K\?;HxtolR3~1~MH? ,_E@AceUO<cQf{Zͯ[AK2 Q؎b4 bUo45y4eC>&E0z[$҃h dR<⭏Qpՠ OѲUj:) 0ex>Q 7$ZP}TyȨ/1$G(GkD yFnHnظf'D^bͰ{zEt ȶټytY2vcn}}ζP0qٲ!䐶 fzOgNpY-W%]?3(i#\N>F'A侀eC1 V[@X>լbVkYg`Z\A/HPۑiy\yo- $*"bs i(Ao>}u$Z>'7q0=iUw44a ^No"$.vyi~`\4 gke?- p9zH,a×RGKFMvG%0F!Xf;EQ 1usb)C<KCmFg !|܃z 0'v%(͹OZ13 |4C®ZyȚ, E^{]6'$ݲvƦJTAg/@=PF h[H&) HzW M7QK+y;d%f+^5؏m795|Qq>f9k F򊖘_%,T gF=$|8d0 y#E}2j&FbT>-(Esed95:Kk+$9쪰>^=$D@dR@O ޸+sǤQgm W^hP)-9X5q E͡L` E3e]KܜD9YYuٿ!B=w o3{t/JƵ;޾ }_ r"!C#teWߛ3?OF^W01q#* KC:zA:*\lQŻ#1]ڳ^A6?ѯεDUH#nֹe'p²ԨG*ilO~^M㕴 n޴μ@ ! ծoJLo (/0f&hut4H?IF㟿y^>mò4]>ܓ,w|i&&Hj "vx,3B\}jޚx*~ ߬kO',o@礏9ȏf˕z&)S`DzAdT(;MM #+N@֕АBu9{3erFic'<NIe _,uyxܷ<< ݠp:6;YΊ0@K#<7j1 u+i=; t":pYJY2a7:!yOj#C2Bp7^lx֠^ "Nwe^u[MnxrGaͦΖkbTnl!6?ni}͚Ϩ+$DDKSP ~ Zf)4&#/ڬgT.N~7ԻЩ[kgbӫPNDWqH)q&.[YjRpsO@"osz4<(Zq2͵DI .pu_ w7 !z݆i 3ŤZkmck.6 >R)bYCL6Э}[you ^ âۚ>11k`E ن2ȢJSAN-Mp?h$z/}nޠj׻ca1FdI^"fW^XjC/p[3)_>uA$Zӵ>+7R!JUЉ40"Z5i*:eEZ #v'gUM%3>~6'(b _uap͇o. L:{?ua"(,}@SY w/mY ͻ97֌FuO\MjzAvq:< 9BZ-$\*_b\`5E_=HS-cBʗ?3)+2#U* _<9z(":OC^N|Vz\vp=LѩF&ἾL(uO}N"vlb:I귬 nER${P6Wkc [T0Uܾz'E @?6[X޳-4zy ~QB`!ehtԸ㙧;6ݎB& pU=\!I9wUtYd }ٴgQS FX6ղ=e-sWO5G2χF=^ǬRFZԪԻ}^0 6o؜F<*o};l@I ۷xHYY=ǡO\Y2q,` =WaiQQ~۸/_gV'8 b>H_ ޗBP 5i$M3|uiY-NRmOmIYҖRhnc'c!x|(r'jk=X=c暘m74W*Wv2mE=^ᰞHER~'W$hN^%>҅ǵubm<Mͦm+$YI4p+IYT'ʵ1oF0E>V=Wԓ~H"ףuV yfrs4p4)`ӓ*o$[7+0;:=tv%-IM i*/ї$d.uD[w4ʦj v,  +`ny]-"e,; R}E~QܷJػ8x_.?g<gō8 PpEMA&u~\M1)Pvc͐IEx֋_vq[ŗU m=ԑ" Y;cbԼzEjo# ׷iiBfUd"ȫq?/(;&4-YCt3YjL<,XL"vㄉd\W|&ї΄|^zt%P^JT)2:uڏtЙv< ޖH\hbĔH:LZE=.8x~WTﴚ ͎j)lG!6 di#T <-|Dg"ȅ?<|-+MbC]/f+ cR7̚PPzdf~׆0G/%ܠ恢vO}XH:Ѡ{U!R[Z ٍ+y-Bm戡Oc%0_3YZUYɻjƨuyDۖ m3[k=+՘9.2*nR FQPmaR+ڟ;xuKj=m?jKPqY)XMA;OWB9\ok;ozD @%]D1h]{ÀW|%6۠ Wz[$ѰG?R$?DBZn8=BAYWgߤҳUQ/\¨ջGWZ>w-0#nuņFyRD}>4KZM[mM9U-G*Ii/ G%nEV#N,9<~'/ +*ĝU!2x&»Ʌ{ʳF[1=(T&hE%S՞~mA4(k|N?-y)mX-PRRt/ze> l\|2_P".S̡gJ:@ߊ!tx gX$Dp&IWJB 2`E❋s.ʓ N Уh{w+*^9Mf͒^y]H+CE;Bzhn?-Xf=Z3.t)_>5z`uGThq/g fPf7<7Yv# M={ Ro/=J4b#z&H0K,r/LHc{=y͂O"Jv0xdV/H%y78&ph˹wnW_YYpڌmA(bm#3E J lE=H_j!>JF7!&Pow\uP>q:ro!Z<]~AGO4]F,׸`7՝xmU6ꥉ-`UD6Z.oYXAWaq4L`1*6؅23NGNPݭjS׍'dz#1R(Ov Y7[ceK˂evPIAd7ES)i@d.Nb,;q]}I@6A+e::Ћ 6 Ia@?o ?X*kHlWՄaUt Hv 5Fb.vq |4fm.a7w J ER#_X%ncFIɆ%y27|Hy i}Kfr052_ՆhVqk4V:τCH(3f&ߋ;@ϿrY&}x2/Z>hh#F> (-1Q,APd$wWƧ-a$o;{]َs9k'z'w ̲l;>QkYyI(OH|_um댸KPD[50l^+}xdyrR)Mw@X!ct/4{w۾aJCy\S1j;!F\mn(cP2jQ\LYy:,'NRfb׮hPR(lëk4UW kVaX%4^)iχHvDD`f}d)NIG<$hkh< .\N$UpjjgvOL朳:Bw&єNy(Ԇ<\(-:΍NW]vsܾᔆʩڱz k?=R?d`0B5͎gD@,@[F6i6(~vPN,:%QA X;q+h}|DIrJ x ay~wjrɺC)xfO/ged:vq:~جVǦzWAf= Z/B?])[;و+ lώ2]. kx:T7>F]^C\^.a܋P?k;T<1ITfD+m^b@NT 6t$>(Bhy?^\Io1Oꖼ!t8e`iE n|ShTdiP4Lw}ؔ4<)7ϣ6FdVC"ߗ3Mhyfa7塻a g_VXd& ' {Wxk)^OYe Fl Fmq w0V^]L[U޾s!-qG;p9MN =τRқO%:=ޅm\)TE<O6Bcu5 [g䤶E$c+(=tC Im]|H-Laҵ7ƒ.kכSpۋҌɘ$4&KxٖFg.zK e@ɟ͞¸DbpQ*w_b/L5H;]w`)XcZ4InԐ#CF"wR4KׯDٮpb`„@kJM FM雂8V'djX6 #s$ʴSdGpL5K::XŶ/>>k__X 4Y+QM?x.&eƚ)uL":E}pֿg|: ELP 5UO<)nTK$]hrb 03Ƶ<8l b^O wh)[zIq5';8tۻ)φ1M\7GGvJ̨iN I1&Ԧ#P-*  O6BK7-cqjdcXor jM.&4^vO޹=-\\&]1}rK!'fcPa[^T0=Ǧ6LK&$.ܨ/ ;ъb̶m/' C'߹i`71-W%?*2MUjR&/ ގgeD Q[H8#w z>\d(#i%t uc62L]菹vh F3]#kN #[\l1ڏGKRQR&SQ dvRR^}M''ɿM %W w-!\eަ{F#?>R'Q@,X^qQD'+:I V 蹡8} J[5{̒ipYHF+Y$$pEZ1o}>a l(_@=£|Y @y& )^F~n\-y4N:C'I5 .Rwũ{ wfosh&8 “u)yںcZsOU*!Z~+i\["q?"4|hj4f}cf³O۟LP ҵ  ŌЫCu>35y zbFCrZZ,@t}M)J̘?DRfEc 3vb;P<'G 8`X W0E? BWVg E*'>gO[d5m8ʆlLDFW 5@Vk,E,psmr!^>$UߚVQeEnPR Y9Bjz*"JLeRרu}p$35 I࠭=EIL$xerE4ۖ$H6*e Iޛ1>!Ɖ]ޡ]`; 9w9ݭ?/c|〈\E{kEռPj8I x&[U)y+YF2)ze8w.كJg[ ,n. >N5D'>j:0}F в|]MbPDXI)} iOOnu-myjⳋ}fU)*K!@F{hŧO>-w|t8ngwV|bÑ5c]i(Q|.3պx^QI eWN/3H6Mnj3za}+4ĩrȦD7rb&*KTL,%w)]*/=/A>@_FUP9/ \W +1)emX vTAjk.<ĹaAH46hX<Is `Rڑx٩\ʬEP;E9` ;< =G G]岶N3`g琟s%`P!!܅- #$0~ݗ*ӂq\dIsQY9 =仑7-w3G\alQNꪐ@3w g%i2IAi5J0IkRj WX>\BŧJgݷEW2VSWaҵ9Ș.(>IfOdN5KBf_H.پ|a&% >~O}aJzwkpW4L⧾hSLA TW7l`&鸀7:ZͼUks3OTᚳ塟?qry ‰#oDo( v0*3!7'{ qq RNЙfoR/U.z\74:aȖPUNCOl5'KH. B_sN?[ Ab3gHDZ;lߪ/)GObJ}W9 d8r.MO6!j;߲_A070'0_9biZ |?'jfsk~rV^t85%JtդƠu8 x:K/ס~uv+<΅H02P>!> 3x3}@-vj* IZ_t} +yPJbUq*<\_G֭6=HC%0QP"!z"}uN%;AӎhypŴy:;RS/?fBB@p)'Gi*K\XB7ݝRteXY24:tP6 ݺX7]m_\A SrZlgt03a36Gd(!Ge<MˢysCOَM)P ;l*pȍPh53+Ak2 D./)ĖS۽PVAU]x֘dj-up󌱼VzZFm3]g6Mz,myi0_]q>`ÌpzAO;(tE IS&0}5Q:UTW|'(øHb~'!) HԦGG9. flH%%`Ѭ#[J*)pa".d o6HP`1Z䦕9HwTekmu ٽRo]vu &R:V4'i ZJq_gr$6gjzҍ`7i7n ! D,=)$ ~0qQ#ݑbZ6ݴw|)b.X Tݐ?L`& lYb\>TVI)p~ut'U[h w{gY2Ct$"[?: YCX[m{#%H,{2.eq䡿2ڈ0$LoV-~9[[9>K&}|^{ hIiIhǜ|P"oUku:۔]'iN^HIb0m0WDB4s"Eh g}?Mᦻ樹 h:6Ht6PPO>H/4hO:Ajs3vAy6B^@1M9U %']7O>L_D=%W^hi⹙403Ӄ#SV0RP7s,Y`bk a؍J#ԛQ4g:AI<-@B@^nK tt2 U/r>Kk]8Άe"u;\>535-2@Odj㌄Hc"g "g,7 5 xtxWZO9ܺ `.4qab(T.U%ƝFץ%h9YsJvfK6Q)S<}˙o<:CM?ToE]w%gt;@%(*Jw?p6qڨ74J9 tNhOϮԝhIB˨rs?T{ ;AoVСd,/zf@%Rp)+YvS)a &gӀJ(%&br?q z.KLyX)9>|ǚ MܢHi1BU {I3xFֈDd&Tcqa$+НOyFJ}9"wal i~6fT !+H< 2 :'WE["CF!8J\mLY+ZeAnaLر2c&Y"j3yJP﯒ U/Nجs~;aLI?هۀ}HkƑ=\OtD΢/1l= [IUtXN"ŗKHB?bQ[棠igt9_9YA[HPM'zr?!Y[/AKKPu@1+daYgnb[U&.ajskMF ?hvpÍ (Wpq1^(Ri[+:a!4/Q!J~ NC=xJHw=q f,ȊYm86>< 5k[nF >vĀ Qvp8&/U`ʋ\c_]k[YpN KSe[|:l/{S3/,zʫ!;}fcRNz4OU@=gFvȞ3 0+Gb* JF N- ƗjS-$8-guf1 m Ÿ!unLO1eYY0'tKF ~Sq~F:7+r$9#fJ{\oQ+ Z5*EqSrTR&I=3|^mpipJԚ*\}&@TUdCf(* ϒ{y|wݴգ2Zb܆r&>+EcQx=6ǝF߯@W'KsEn &˓<[=0Z R@2ܳMICzjZ2) rS04w  rPa#1+!AMy4T m])f?!<ْfa)tv1|Fz(fG+$}~2be=yî UR96:k9/ z֝  $=93iW#1AdZ c[dn_&S~ 4IP`T(!@m1~EmIW1V})YGn¿hٞ\ 3rn7ѥћpG`^G kޟ8e͹f#Xa ,L㬨kAi>k7jǿ{sxWBnH&iKNyʥ.oqմ|>=)6dOuKY|[ `\E=n죲 (N?deU) ydy~sU5K0IߧisK A ;TP=S(Uib\ǖZ<3sm*)Oi(D _=c+s6zwN3\x!}E_z@#.bly@AώwF*Lw=h ɭϟ7%J#зf^ DtY^Knoca[KQ\ u#reLA >P (8eB~MC)?& Nvg?n㧼m8%.T}<]95ZQOoE ]#Qր+x 4j0M*};wh8bn<2[s,ׂYXM4!}PEr$ďE+1e[Y"pa/%$˘QžpE24R]NcCqqޔu.kGl\o.VtibYs -@ZROJCL#Fv/>trl*9'[e5pT(eDI{r5/R ,?tEd[{olƒ@t*U<_ZfcbL.hL"[NFBAg/?Ne[F1e*h1; wݠU!z22BǐZnz1m}G"h[?Ʊ}Gۑ');1cD F~*L1B)݊ K5en֧$eCNC?99[ ;tW`WE-Ō|W 3F_nO\˰l B֚ݷ0s@e]IXH ̆hUVzp4 2ܪ?Qƺ3 8Ո Nrȴokt i _Z ƥ/?9Eťa511oW2'=pE(ƶiWLE'nU0h_S톚y|@j<Ɓ$􊱫o5U)B ѵ܊}XHOEV^JןO͹tVd|MuLs]CY^y"<+p~J(a/ec/[n:*HOKe3uYm!\nRUý'V.!o`}IF^U㯊4Š96UyuU! nIl5ZS6)*| ,Oj#QO1z !cCq_P!yTTG҈+0e$c昰0< t`\\%G$N ; VTt_  n/˄C ϊ=oY8 |.;*W)moLHJ64/`QFIk {arТLh֮~j7*'%x#MSI=Ì~Dm;ӂA(f}~1/B`:G?@B%'b]6~#Q{DDe(סB=8rLRKH} Jx}=08*qѝaӃeE  _ Y%qgNJ!y`cd\;A)[g=v^_IՔ);\޳d;Ku%鼲lN?-VX<`%l(@wƮl*:}7CuTf)qw& n#`po.&V3QI$2!{l@1:Cf-fER+E8rb|7EHU5:цOv:~W#SlVbM\驙$—J{{Ho3Fa=_ RN+n J̴i:ցn2B O nR֊lwWu|}Zkʵ1- ޯH+u=o2@~}Y0*'j *Apb*՝ .J {ВC3,ncBK@ 3tUmo* *i$-pFgObއ[/&+mx+vа\yDeJr?%Y+O~od<˘؇,p-oݰ] L8qsryln{KQۈ]|U:Kj  ?E^nX+vRo?1ȏA{zNW~9{}7ۖbE6R}<8(/:MQ#i\dh'?=xˌz|fЈk7B[T)8sv;=z~{AաCUAf2%"0L[vEZ%GՉÿb~.OS"SSɢ*% d‹5&񈓤>k#kE)b[ ꠋj++a/h-ilaU}_)ܗ;?ci w50 {x0Tu7֏t&q eXOº\Y CaڋMk ȗj۫)!Y/~EMPQh:O<Ժ]gIBb^(= u7났mpVԄ|,]_Om񛉤RPW*M+8`jKDU#P ڎWgl@ma,Z0a`A6R]Øt1?1QƎU +{ne,ʢ&E,`Ѽ=(H\ǗҨ-ވI_"IU0UʅCgKf_lnɷ3 mM.$BM%}n7Hyݍ1_s4+)8PFc词YnS#' r4RJ ;jb$mϵjj^\/x/Ι2^k^leŮW"]Xiw)ۥ/?( X\c-- (%X 59a-( (9mI(.j}Cw2=LF)nwQzȆܪ#.8uWXr\ѕnj=a{oiQ?5O?!sP _*PtޥC 1޵rʐ|_N5vvp9`:YN9? 3JNfg:D a`0 }AK<3 hJ'nۭ<0/8b{^Ӷ$Twm˖jyC;@Pڬ |tMK,A`ІƠ64/9(SRz aJ1g;n1TDQ/Xf^KiaZdRb .P<.L̸5ɋ$ҀTh\)V/ΜD5b,?_UJF }lC9 RkNC[  9LU>å`|_} |k`'fգ)҈fQ<|GHtz,-%}j;K>Uag%e Z>%|J:z~ԏ,7,ƉÒEA" 3~'|Tm+EO4Rt.tb 4ONr _TuѠ(eiڋXЍRixolِטEvQ)0+~]:hA$TאZ)%$"tg*о<v4ؽڡ6hos p Vi $ ;OFsabaȚ.o:Oy[`p"V$&y a,wTVȼהV45 \M۷B9;R[*M;G)qm oby#BeSbx j~O&D ԛ|Do鎳~ud>r 4ҏ'^eZ2'&L`K{=e(~/J&тSE7~:~啊m`5z3:qawDU6P}= =#Ji3dȭn.Ԯ $'oQe{Ͳ["!6IJPU<ĸf?.n꯶v; (*TCΡ $$w1t![TKvw gม$gjlrG ԟ&pHaE_~yqqAAͦR%ѝf466k2~RBIUB?r,]&PmU8T~ಥ(=K( %ޫtU̹52څP TffدNySxA+D_(a@Hc[n,gg1%جT?ihl/k${eB|a;,oz8lYtޔBk *4W<+Dz"Sզ4x,@#TEsنShܰCČxj6 ԌC]=ԟ v]JjkZ0tẔG^y76RFgL(w4i6m?.wNgJ!}hul4]cׅ$c"AA1؃\:cQuyawL"k>y|oo%bc\Yk}?.ȟ_O2i/X/4T' ѪQotuacubPY/r+Kn/8c(D<$Ĭ ˯$! 7p:6J4IȇϘe)w潝FG/7qC~-ao"8KQɈL/@wiun.lk}L]BRɮ2b uZF(<"PbhJu ('nNTxzjPkN-N~+a 2)i { fq:.HB5(SW @כ8P͞taR5aҿIq )r1F ZFZWŘ?WcxӘf}GɕTfEcok8b9av5ij@5s@VА.2.+ۈj4cT,7|k}{{ɫШ"BV;"R/b%aiyꕛ'QZN=ݱ_ZtOQ*aNW97N1bR uW:_&$7cr.R]. XI{ eIjM$v5М-N&`v0:_tqmWKsA!g?Lju;S !SeCzYmRPqwd7;F9Á?i߬py-C[1~ f^l"(54@Vxy嗖}./X-bnn]=cdOwP+R cbOII\= ^)せXva}{@X?@y'(a~6v3Ş{<P|_7(iKh0*joqUÐVke[Ͽy-1Ozn<Ž9Y+w24CkME?zk|$c wꂖu3w& nS;CKl 䶸KRś '>j'&Wrj=.Z5w0);ߎROu!kzrzJ&A %j4Ezc-*t{J@ Gp{=2[$?dlΗAt˸;wɄʾC B-={)OaZ!>'X5+`+x{n 'յit@l`jYH7I;qSA:~/A&Z,WeRCopO ##Q0cՅ{fC0{?.EYoAr=RUteV&ymf 5Bff:>+ ¡iMcth]C}f!fBk)zO7h! E?7t l.*sY+=#ԣtwqɼ)by^?N( }}@}VlEـ[r9=OX5wُ]~q'_=s@QO KÂ95+֡F71<kCEy*j|քDZ0WXmheؙL õTRa_l%.hn\,t-PM:E ҥ3I ?؟DKC(&Cs1 L ^R L<,d9U(1׌mc<*E,85 R:+ *lDr7&lSTfy7kpjvX߲"-'nhJGCnY9k9rC=37N]2V睙L带D΋ƈLo@"pyDp8LF JjbPj{>逺~Y_i'Z$%dz3ϑnW(n^ ]pUhݜ㖁8Y!Eˉrs~d&Cۈ ?*.Uٔdt-N" #}VğB 4lN<4"sTdADN2 z?Ö:r0gK:A|s\̒Pp.ÕkG+WmQSoy%dy5=TrͬkmXWlOR)VڒtD|%4upѧ~pe'7f'Luۛ'׊ yT|f4 ٽєLBK*pgS/t|t[1SaeV]f~%Ft_yXT9A6lL0BscD6EF,RiHGHlJ%gf2#n:cҚCZ|~@vzg/Q! 9:眹Pdn}LúuJvD^[P"2G.WL zh1Tz6-[Ld iC܈Ԩ~(·ӕ]H4f6aL-A܄_-:\+,b̖^-MڥHx*|2Z&cցkƊ iXLKtWOr$_Ni05dY=$^ P%?vE? ϪHUHC*FMLFYn`<33O$q,aBHP E)9=L=mrmdN{A 'йYaĞxN(ߦ73춯5HݱVBw<QFsb FF(Ӊ:pgJ*PtxfR ?R iAM#}ѵIZmXBI0NţT3Y-oz` _ޭ}o ϻrQSڄ'!(}~J\!dޅ {( ݢ؆s.BӪ…Uoäf\L܆9%&ki,{Pt|gQ2|Np6Q1+ og}+  {!v)Ե=Kx[TK]+\-@kK-pEPtIV~pP{XaN0䈁yt%.20{j-Sn -#Ȕ ӿ GTgIQ|vuY4&*^{-KمQ'bZ*Ol]Pg.(}nR #xi߾,[n؈ݨ &_}c )8qWy᦮4,QC6`{\.$,E#@-Gk=ɭ wi6"nrSƥ|ҫ|TCǿٷou lI?ͻΖt?msp.WL%uC_wZ'<8?Of*"4fKռOou<)mcvVR}-*hOC~,udnSm̼篋cHL_$z +^dz^\5G)?@[Dw[ڲB2 N<6/s&l|-fACMl{T'(0?5aƯRg[xE97ܺ}M6'Cra?S#e%' A°ݢ/1 9AemP &@c)'ߥ"u-]FDmy?w^Q |Px]b4Ҍ}{\aJI.E,jFfRI֯{\^Cyjv_/Yo%ꦢ&kvBpp*v6&[ye q-1g6͙b;pog?+fhμH0/78 "\-j۔C9D0H/Lϩ6@U0$1ye]ā*l0 GYSp>ן[M4农74oT. I4z[{لڄߺ9Mu9# h]qI]u0F+iExifòF%bTlxt|鿂AEmG1ݟ ~ѧ8#GSs vc,loBXITEW^ sekc7>Ѐ[M>$9W.َdM;Tg@dK,ɯyPLLKMCŕ3fR:{lt}[ZDO#ZXsͣ w5{DT-cYE=uYgYfD vdrB #ȫ+o0C72r Lh&R="tҎ+*xV^gӰ Z, 9[U.hChf56mQ5,霷y.ܯ0LrH:#L} ԗ@|8  '(FXW8b=cP͢Zq) ӇΠ% 8$R+GoIGo|l;\ԯ[hm3B5jĨO~漲I qT~'$=Pr A|3}JQiζ!9̭sh.Knk uDZD#d>R%5BhIoI HmqX[f4}ZOY`駻_4/99"K^1sٞj\zvLEG`mgn)`} UZ IZ)RmE aUG_ *S0t2P]1M-\y1eK%ˢ6%oi{Ы\>q$أh~~Dr4zERof%䄲_K8T|o'5CMDz9Q*gYȦDڌB :T,oE.˂Xpи` ^8-<۷AP04q_^n ʻӨ}V(-GkJI93oY'(t*[Za;?I ʱd╤3Ԡz:QvF3hd%vP`W.̙_,3.gB-a+zr?u5N \pIRܓ\@}mGI\~)en+MNPUeRJs\jڟ4":,BU\-J#U6bS}^~Ɯ-dJlZ';`lXWlHoSׯ՚7dqb)|&=e^ ,0ej. &y, $|ErEUsZy2_j\u ,*lA2Hnl 38~~}Oa,R|ewYT7:b ( J۰.m|r@Kp&coI  ђQ}P6Naw 'WнZC3/&EMt3"#= (FS`μ46D?U("'%5$7<|u(R-&Q0".&?XҰ#&$ׇQއWtY8 HNCaT CozJo^M,E'}= )zbK}lqYLu]*J gK^7HI'Rn{7pE_O$-P^V _b=$hc~s>Q%F=k%cرϋ5Bqbom/2y >YZ5--T&ߵa1|\x%m!yGSp@1+QAQV@zsw'M\W *.ż?ό]?ak,5|kb:LƊoNXe?U3z}z܃RZ ɦBOp mO'hV'Z?Q@~o8+j= \7O93zxg6`sJ\%el勆^mM|,OuiWZQ=/h<6Y@Q"B}?]@҆X&m &; #nʴ ǸTUs EG[o[p_R upkkG܅hZǯS:ĩoj[yF"9ߐO0nPO'/[caldΩPSOx6@D[TɃ Ƕ'fѩ55,B~;YUp`whpwYOv?;*S5#F&ؒD\gczCnؿ ؽ<tVcIyD9saG=Ãr%Fs&c xcdVX}q{*/FyyiyL\ k~yjm}_"}@uwmp,hQ2_Y.nvT|<_V|ٔ qIL[_=vݿ.VV䋷|zA1psWWXŧ*Pr TM~9x؜h7S_C8J1:1>YmI<:2?H0̵l-@r"!Q 1,1zmZFZ\ȢDkNA0f%{Cp3mQrFH./?, &Nů< S㪪,(IBJMHnn\A7]?P0J#IzWo`3֋9gkh.Cx#ďm_#j]Clҏ@[ыE)\'f R4QpPDp!`4()``X`7F*RWm3zzR+Rv3հ;Fvۓy%n~ ~gb'&{*k 3GHm"r5T;._9ՙ_)8N731|M)FxScE_.y сU0dpiŸ,D,.U\% )(-*e42IW7*]#JsG~)Kѝr<τd^nUA7yVR㆐aEA" Sҵ0:.Ƶe< .R6+,s<k)Wr6KZ΍ r4?5v_^2RSq}&keIޓogIM+֏fM5luC~(K$W[$1t+$HsfSy7z@fG Vk5MC+ W:麥K(.IE*W\oo8; Y Az_;˼ӜG-@;'uPam S4OȆpigҖxOM 묛-?oq(%t/=um>\!X7LU cN- ߩ|Y30fQJTS6H1޹dP!QYQ֚xr^Qnw}KSvC(OWt(B#;J!^үo|4*d|5@H:Dٞi kv4x/v M`S.s]#9X(>%_Z-2ڂaw$Y‘|h?cF g" qjO ̿/13GӡІ;iQ"[tګ˛庭+ 3Io#'Q[S99%_g.F $; w(] րpȵn8r̞Xc)δ]ɏxtROZb~\|C^r:*v4eϘTpkw,mjS\ Nӡ&D^n>s2RXOKs-x-w|GaZu1: ~*)$DFƕL8qsҫ²jDۃbEN*uGUVS4B5LMMt4ח_%v(^+lsvOJf9AMUe i6تC !(^]8;Oj+U-F{X"m^sA )ҕ{%KMItPZ-c (":f];鿞qᕜU쏁I ށ%aRrmhIv A,)'/D%gFkXl?afׯ664 AݭUKroo ҳ3g|\R9Zk蕥=SrUR`|s '-|sG%T: y7lC=M!wTo: zݶvL濏ԀX/Z-#EdKz%8r0rFrX]wN_TS1cZ~,O0ΐ.j`B^\l<PTM/BT[0#ؼN"=a}>j͡c]H-kYX:3_#RNxNI(lځo^a( lj+#N.7,Εg tE.G^^ ΢6OBKL#*bkE 1I#åB~+vv鯆.G(6 own=ޔDM} {$P㾪b b-MeZ@Cy$J[88u썈ddơ,dUa[ŮN^b+Tw6zS그vaD`K%3jwFP=q't,~A0lm{0{IA4O`#L'4Zj[`veLYuBQt]K bIJ`S`"#Bu} J@-5wSVq; qP`G2 F拦R+RĿ'³{? ^8:1怜d b+XAxEY[c)Sc fOЛE'*ڂGv&MDQC``Mh>UylGC5 y?/b lB*|9<[$x1ygeO: _>XP 9+sQSae) ep9za2{-E:~ϱ&P0=J;D9M@j0ΥE*6z@ i 1;oK hF|%%mN`Hg=Wpd㕩Pqi*T70e0S2;N͉u Y1h~G$4siG*^hUSu|5(q]0s}k"PFa{5)ZZ1YCz\A4WPKDuEFOf0%WT*ZYگjZ ]TU{\mӾ!h{eAKW$O[!F#>y6 7'<ƭ ;I=ܣײmi$4y&::Ӆ4|e8G)2 lri:V(jO=IԳ3*GpJŸpV6l.a {^l{Cy`g8?dptgG݇'QU(0,ڟ5e(U5%օx~aS#]r^zv;M ,"ƩY{#:RH`\t~rH+I &ҿbL'o6ɨ39&9} !SJM:iMjT{^ ٕGe˞B>{Śo ~o7*F gfHUhR-1DN*vXsU"-_v.!8߬IGAzah$4EUPez'N6If3\$T"Tb4EE ڳ{kSIrVmr<q;/aMAU؃5ԍDdDA@zg3JGj;RdSD rboIL/T[Br%GB bDn_ZK~ #ޞU{6x~|RU|IN#j>ng?8om- > @_ٿ,M٬:^FWh 9zh奉-K>dŝ.7/AS0 \ay{/sCI9v8)WTMGW>"Z.凹u(2ȸ h`l&%nܟ_cG-,UҖ+#tiƚ(*|xG~*j͘ê]"^6'蚓FxI&q̴EsscOmaѺ!wk381 (Fn,N?esXS {*6^"{3ND$"@%O;jSr5Phs~C>$h+$~5Ͷ_Mt.J(,y0Xts<^PLs~S阝X2DT;?f^U!>i4Pv9p:QO2S3nb!,+v5LVHD_xFig*VNgQ﷭/$Qr.k!&I%Ujng΍k]ɗiI;a=kMǰ"ݲ^DBwss՚a〦w]l|I"1dvп&,@ P(o}+/(<7 q2m,X^4:$#15Gs 4`1 uYF~'6B}>CDᗭn7| [ݩo,~;56x|D@Cll9[KP1ׂ/cHx_U- IE{n1~1B8ί_ |d"|]LBL8Y]&J fzX>S6+{s?h^,šPXPWY,M{N=t@ǯ457_]Y>=2r\F hz2L  [< ߚW`lHN{hg-9QVεd_5ۻuvjZV+iA<&Vg<~:0OZ^_}Fx٠"6MJNIew ^s>C|}Yv#c6{6y`qD*@iP4}Ziq_yy6Ƈ_ RτCמhqʧb~4ʫ;ّ",U sϩ0&dR0WQg߽g';rs!fm~C7"`ݨ>E4|CP3UӳZ.uw `mx8q~LQuNܙګl>,X!v?И L䛴#Hg :СДz1cv-lZ3Pt̲XdPn |@uk2>n?@n۠dmdwXU6\2fz>C%hVMl>wWD(5hI#U |J:kQQ.1^"(6cG-2- <(/ #ݳKH~z2ިrF`2dQ9 5 u M,!bm;i@:]y4lor=5͎\lpdۑkɩcs&xEkTrUDxFc@ W';tdNO?k^  lrea"1IV~fE !1M0Ύ!i[Tipd ۇ *QYM_h)*H'@̈#)E)5UG3jH|`AfmuRddԔڱ(b>D3[#3},<37e9 Qx6$@I#2~,y#-g Eީ) ;JӋ]1wC6W&G1S._ SQHgƊl霴XĴC{_,~'|4"3MM/I{j竒Bw㍮CXY6ls^DN%(]?\P^GY0MF^sQuA hc ((#RY:ZTz+s'A]#3߉6Da . |7#l\WpHOεbUr23'7;{x#+Wi " R-#a"uekO{VrQp1C#&Ȅ-$8TC+>BdXe*2Pu&L7b.q||D}fQ}gq(~cLU=Ds6f锅S\H&&cf_@X4.wmǀ_*EP<ՙaB$W*NAqo, *+u״(e>24=x#AfA4ʅuRg(vrW] Lx^a7b*`CJ}C ^ 4 lfZ~Y>Iځ`1 bU{2DF*t%xZ F>C4r.g*hݍRae!C?-;%Yfrp$ S'EU^|^b \,F; >Sx'~z}uU5#6RKeysf)]5HЮ˂mA)aUuH`tguq!e)A"cIxP<&!qBK"p䕨ӵ)h2ӓ& YQ'KV[?/" SSQӤ5OzzO P#bqpd=ś{X{S\bP8ǩFI NB j9l&ul>x5T]3oQ~%q#Eԧ-k _H ` 7(U w>v^9pJ{ƞ |u 頔Xw[?Rh.Hx|d/7v࠶tB5(Q=fOn]I^|zN|S:ٖtT3vCaS!5)Ċu+NIhK|JFPp>!Hl|gQ-?ڪ&ȉ7stm|߽ݐt{_~>{Um.e'*,fשHqyЊ/wRI~^qGВ, = ѩ}焴߮vHFPI[ Ҷ' Y je+0UH y[+PSWak/ zEڣ$c$j|Ǟ wv|@`œ vgzUb RqT@OԒG^eh|\`oUt7>V|ʗ OK~ u,<ç;=U(H_ݬƸzs$*l2_{ Xi5hk_7> г^+Z+dSۓ cYyݝcop 0Ȣ`0 ,_Y;dz(=j:))5u?i92|i@p«KPǶjp>,7V?zE,iUXݚ½`0' Pco2{Kh-(~Vbj{N!{R2zmolx* k׃1$9%nڡtђ PC\Ў{;J6;O]# M4|Qutw[|P׉iT^Xl.㲽ZMki[FZ=_UȠ%Y rR~"mL+Qe;9V`1r;s$X==MX6P ,#p:@Dc& ntw,:Tb0?8_!Ȍ>Gx H@0 }sqU:Sմ}9%s]g/D'нmcmQ?O7(̅ &u#CAӰߵ 'Dدv&b+ yBUp #yi5فk kC*>~Ft$2uvAO%zVy#DYfX;ZZjpF\r[nE $7oG8\Ԉ2w1,ʑoVfch[✞;- Ck/-]c`%j"x3z1ூQ8mLUx0RI YpCgH)CPFg :TcaEN3Q.$4 0Dgb]8PQdNI]܌̂Ut@"oP8ut"4d6K$2GEl K@>t>bs FBpv:nT^8r C VkڰRf<Uem8\+uDɌ:G7 !r"#Fg6ܾòSMC']pX?R%p"+[2 /t{e:p2(k$نz#?(uu4έōW9+j{[lVQĻ_g_;&ri/Ӊces]OW=pk`GQzUJ geJ =+U{.uM[M ̅ !0q}vAj/4V^VL]qdzAZ.R`yэ?P0w_ РzĈu.JM K-!b}L՗YQA7H!AgYœbqwLϸJyM:C%Wl w":at>uU՞M1#i0 Saҭ :c 0 b+C>v"qӘC Sxq0K! ]lxn|U/[#-K?ȸ$bH*] *CoV9 ٸJETwT>xÇh+i2ڛp,ކ=ZS&Ub;8g0_K)Ou,JVV[XGk}u%Al:#Pv]զk?6R/\X9do'|>_E^]S:q:.4|I|nUPp-r#g_Ghhי6. Le e j@Rd 5L!,R!IʎR/lvDkZzUQ 2U5X~s,@Qf88=Lլjd-ͲXǜG] / |0>q7V:埒x:/r]F;N^Đ=JN+D;' cK S3^؅2 ]M4-n?t?ن4Sjk8ʗX}%D5DF`AK>HxFTe0"j\ev?Z$-.e4ӘQ_AenV u{=&-spňmGnZ+̈́P5S5I s~״`dz*bG~nA:˭[ hஉ̉rsh"^<gfщ%]w 5À,װRX ܠh c37kӡߪطڛ)3MjڒvT3 m^V{z+sX։ \ FkCݺ f$?ꧽ BR#2 Rˉ>:y?jG6#NoIcr>EfM`;UXi)UB1S6B@qG6 ֱI([=W,6HISCpB@m{2#?natGv/ BaHFFWP9Zr5Ըk2Sm+ ڼ *jgR~-8mݴ@wr#6fT@@iUc X>WQNI ֟N\k3;XWHJS#H,D55GbQ>tn3'Fm6*Ӹޥ5yy#ΛC^|$S/Ţq$Wg`ుt\P $n )z6.>FC6*XA!禚p(³< z`fTQ1ͪDKb@AN>OybArK=G+~Y; ӦxΈq-,7ZC/lb[kM9hpʉ dɔx-ffvǞW*+VkY.-Qgow0`S<;/mWm+H;e<47T,ZSU̱cv>!49^DD0%ޥLjI$aD2rX 执5w!oD"dZWҎ țrO_`2`A DRP*{<Dx˱&J1P5P9RNpc#OvEc=5dmZꀚe߹ڍ>vb4B*qt]HUU,97e1 SVB 9poZg?>ΝL(fS,:KƢ/1uGT7Xk2IE +MEIp4v:3"gŒq2wIfpY@j KifΧC徦X-?~KqT^ 0fl]1`5$-Z`eR^&rZ4)/S/Nf(95 N)k_~оQLkp@1T4|vaanO_ hGx ^ۭB{#o;íU'5&v 'ߒE~U-q Ob3s*^aZ_O_.T*c`"5٘GNh8K#}}%b$SbUlu Loek5DR\ZRKcڭ ~[mW$a[+qU Ơ:G|ݬ ®5,BVS@F _IwAِF7Mt(cb)pH92ܑFyu؅89#Vq8P,X~A~QX odSX@|3HϿ{1Rn !pZ"$ub5Cx*_ /9>Fr^)0@BO[!M[[J %B% cR~ugkefj߮^AaRqR垀M;kE& ՙok> ,qJ#IY0_l/D%r}uʎZ8 ^n@!w3Z#DžPbt>>hX+Ƈ8 x?3W@ਸN9ٯ9B?dDQG)3bE˜[52,gkAO #bϕ^n2|ˌ `}y=Q-~\57ǹCxuT, o]4B% ;~E2hFwbMbOF/ct/Ss F]Bs ~W0=y<7}Dr?N 2ބd5iH:ˏQ/ٵӧt;"Ƃ q&Gg'$5k iXt'l?OmcFR®dJwLwfh ycg<5̂cwu}Զ{Q4=b?w**AYXYK+*!(TK+ BfC;sݾ t'>mf:;0]CɟhN UG4ݚAUեԒ|g+t |h\Nӭ ZqgLݪ0Oyj(y}]dsJb^od2S;;f@5-?p6Kn&_/ 'vmx$GSe{z+2 2p'y-SwֺO1egd7~dKA;/_T5{=3A'?_eUAPFͧ+"UǁT;-9Jjpx9ZJԬv:ʹܳ/3!@F:T(R$%fHjOxBWCpC^tmȌUO5Jdu}Z țyo?Պ r$WNmUwOVg\ͫ ,OdI!`?~`}Q>o-]#kLiWBE!JȀf)*])E#Җnrձ2 2ĉU|(lKA K^ؤ|9TU٩n mQmႥʱKyO`e˫G[pF J UZS0لDְ$DC' ܈pI cV5A/CD4*5 &p^O:+*P@BMf2ͭ|WG%®mR*3˄s^m coDPukL6^pW-yi HF@_ #93x0Z! #Fc^p^|!XhX2ed(jق$_6X=yEq6d>UEZz=<v߈ت^\6]30Uϵalj2^bsLqXv)0zIE)QʰuQ$BQpV>f^Mh/q@kL`Ooqt&yV3NtlhPzܱv'üM*=Ti5^@MP=#ͬ z$.kd`'aYap=~҅v-TXM geBG(fp,0كkW_-YunrmsF5\gWH~ >V[6{h§q0"Q QUIde7 B"`dEN$?gR_6:;$-K4T_!x#06d>d3P~[B3"*](IbMBFz]#Ch.'`LhZ670tINUťKoF )2`p̜,V=vrcB^%w3#Y0VZr|$* rdˊza!зoGjt;&]b87z<Χvlzt9߼M 9fͣo v \5a~ LL*`8UqaMEtlwH2ӔK )"#7J|tfav b> /HmW79KtV*Vը5Wic#9t ش{DBIWgh@(%6XṢpcTPS0읬%gZEe1XZ "r"rWt[scOIC>!TKmcMarN,@B\>{C;%}"Y'Y'ˏ|a)MsLfy/y1毼 mZS)387$۩/sl<5ޔl?c(l#L!f@%yweS#zM ,&70cWp^Y:l9]4TnadbZAݬ~ TԷCgK6vlZ?:; aF._DN&zHd^ 7%ݶbxAO\PڜZVzk&$w9R 3@G)d;>[xV-$aQ6+ë[ 5gtyc:Gة¶oh(VCU1إ):F`z?R€?z7)>ˮ/<yԦ,,RO2TzTuH03~cJc.$<}MC M RFV ./;nW'4 pH Q3mI# LX?,s~U; -{aOZ - v0D)$9DhL\Beq#K:3LG;G^(HsoZ ІQ;7chb] Qφ߅ q[6ҳCBsngb8jx@+*X隊0S/@>tӌ>2~{zOT\m(5޸o͘d)l>T/DB„\igC7/X:L1-s[o.t7秹I[q<-naucnn~AmG>V8ߙ/?jᴦM/".-KZ=[F(5lF26Ǵ^Q0!=%+8ޫqdlnRFȤC«hb# ? 9Z+khUfIbO2$AE)̠-,, M;Ǝ,} ٥d>(\42ns/#@+ ί<%bikn@?iJ]ˡXC>oEdM?WM?"Le +IG۲k'\mŢFÅ/㖾@=9fޖ_,BP_9&`}v/OS3nB65s$X몦;L Z<) 00Bz{$&ݿ9~7/t%~sV~B(I5w4mo)y%$ qGd"n,XGpxB;D=W/Nzft씀ڞ"UJJm_h _AW-@*!|N˶gDPs܉ĿZJy"_ٕ$Gl[}a؞^E  -}dUXJ8(7赻_{6c @j$~6 w8/Tl7>^K1"G_F ҙzt. Z Iu"sj/V5jTtcvު_r?`K ܕbm7\vd$}U(H іLмX7=Vz3[<KVJHoHg :^S*#D29$p-l2L |SS G=T5mrY%s.)tQ?~]h8W0ELA8@!57lǾ% w1ZEZQu>.%So/qoJ/uJNGb>Ci?U|2'IMϊ^mm[do.+7d O0 83[ n̝k j'?==[3_rIfk+q']cd_z.5~X[͗?<[.1C]+d:gzN8 N]'!Uw<۴B9}2+mXоY8_ LE{nB-٧}w.1. [8 c޷@[ )q1< f1x5hmM9=dnDݯ&T'H{=߇oEnYÛPk9}c#EhkN |"8a@߻ݏfz,]B{r %u92g3W 5ua"-/ u>OdZ=LX [g:!e nYSիtr.%h8O=On.07J1E8PEfX9"w1T Uޭ.hb8{+=Z^9[făaȅ"+wM6nPp h}$C䖿6~GvwgѕqU @JGB=үYV<d{:84%~e+מt!&S4#orfz]62 19 ˝a<=R*a󳘧rIٓP4mrFbZ6Aڭŵ ޕ-2oz$ZqQjs?>f:go8%QDeŷt^QV4ɟ/.{J z#>70.쑿<lf3W[h璗Ny0E_'7*Z͍yP~~NXUdr5JwFJ(`O69)Ȩ4J\g e=U0J8K+e q]xUhyTbfysi& \'< yAH}Q+?.(ˣc-2Y)8ަ~ ;bsdzgV0 } y|.A{#C)L-jberl%yOIn(vHlI~g,"?!+4dn=o+JMn7&9NΙ$=>QhɝzhdPJYmj䙠ۊlc"L4QFYuaGD1WpέfŶ(n$%4uߖr> 蘤 S`@{ZvƅPFH.Nس)S㢐r_'?Ck}qsG1)MZt [ׯR4d%X G@oxfBC_`vې;=Y [+݇F\6*l8V';of%<)X۝8̧H,R:߯ /җu2,ɜ!@V(]}bSWwDSw)k b6CaҎY^=s /2P{2OœuH4*A(;u>\ʤU@FQ6i?۶o1K8@G9ɛV֞44 C`jx,F*<$=53@ /4^oi& Ey dQ~~mہ:]&&ae#A ~W>`e񚇩=wiC"R !r,ڀ^*nJ^Fܡ_g({i̚MLKݩ4>C^;$ޛ %-0h]/ a"y]&؜5 ( cd'EaD% tEl`} ypV*R;$H`#1r0CSO/F8.Mt -2,} q ;֗_| /vdt0ԅsrߦ^7hUNGź:XK@rهM w\+Py=kQN]}%nR>G }Fe\3]#0A(Jk`\]|H [2+Jn{E]~d4nvOX;TwWA:P:?~sp|Oy(愈[=>* 'zQb_LI$JcjiY&zQ& 8"8Wk2 #VES׈}uE~3Xo4;^[|xO7W*N3qssm[h l|g)@?Ww QVͣj `'!!]} ]`߿`*q(m'rڥFI w45)>5*K =-sO$Boh}T*^WKa{ u:vP^Z1VMXv h |"G;?Q:$D]cG αؼd T)tϏB;!Y,PC>ezw/3@|Z‘ mVF#oF ?VhEwf$UxT yj.~]k{h ^bHx)w'/Zw x'@ޏJz̭锭_b\WDŮyix297.IVk`^xFFnTs%XAaaQ.LPDX 3 +,Ձ] {e@t'o'F*CMc ]wR_,H0~i?O7$UfkPA6;q?3 f n\B϶-eFǾ-fMuzͼH{.$?$13j~|(eIC"]]; Y+ⶣo"AnN@&~ͼq \3XrS--Gu#.q!59[j p3˭T)Gm%#DF&K'oz'}ڹ'$Q|O(Ã=}fDa)ӭW7fk̅ ]_Qǻ9+/'_;J&Ev޺O՜ >OQ%v6~} o_xJH{{+L55L Q/o9ںL*nOF -qf-(a'Rl&?+GZgzdRjk㽉!T Z_?Nz߃L_s "w۪q-̋jV/Kr,)BC>39]'ZP Hict1~ YٵVC7#/ u*XUê-90h2nP D]N3!X!X]D.8AswQk5X LtHx YaYͩW+5FHUI?0?GTz-?;+t (me0# ύA9ʕ8B Y+6P#ڿ vp\>f7 |-cKҌ}sD:2ޕK;9_Kz\*4`W6nd"֬~y 0l􈙣#Feĺ mM U˒Rg`Bɴ%GYQKާw ĬlQ bxl7SN <17v HQ[vDGQ}: EXۇ]%_~L@d1 J%VX)~ןN.T4S.Sj7Ԁm"|/hk! S}Q{ڮEtMXv|: yWˎmZm*OR +ne^R,+[]\/$L6jͯ^HȢMetD残aZfqeowi!L0/,Ǣ1rra?h]0Pe?GN$^b ="Ii7EG=.ZVR =de-.񓿙)Aq߱cц{NRsIɩx'R'W,C]c> Z-)/#m/ ;:'nSU&Q Ka^]  Ig@!AE'E% ?[Pg\_z7 <4vtfI-hq?r LSpD4FC> G|K*Fy b2(3BD fs? N"bV\צJ/O B1$* @WI>cܯio s|o8~ufxVy/uㆲ */-" ,}es~陼{5 0C=PM'9mܜK% En$2jK X=$/>RHJ)#,~^I^'An^߸6aFB4I˓L$*ίEZ^Yn@@>!| `wTN# "*V)IPqV+W?P 2j ?DMytge(:AOh8x IP#Ϋj? hH!:-:E5bW=a86~a)HrΊ:ZUKf_>~on@{e#J o/b.=ZOH'Kjw^h% 0H3 7)Ti{oWtUw&N^'BR/&HPVyp먳U?RB-+] ]amF(̊BM% :3 \L_6{ԃ&NwhQ#cJك2%>+6kVERjRs&|7psy :J+VICW~ذԒL{ƒH役y+<;+_ (}yq GGcDƯrAFIܨچ BVy:h!b_Ii&Ks5%]Hdg/gCD4o=XA dCm W쑦,ɐ=8ie?v&daib@-003l'pdx)+4* LvHARSgȠ=)qg[A&9Ţ:tTjf-V/Z33Ni_3%~0ez3'Ph}y޹/=E#?͹  HuKâ&͛\i*B"bc6a80^O \i) 7GH;Fk_[$cCA!yq%~yωJ*ւ s7ɧqNUnHMuRlLOv3of%=Cp`jUpR?gOXӮNv;/ :YCJBb9'zy?Nsy$8!oWʣB̾^ad ؔqjbCTgxHdaPXgRFdKH<,rNaV18$ iҩS2 Ԛ9¤m.cvL@&SZN|LUD@@HԧD?Fպˋ/m:Pg7dK8?aF[qθQ!n}u0P>j8CJh]= um\B>IV;`{G*Ta!$sL%o#pQݨ7\EkW`r`;p(W +W\܍Pl"-Nv"KݜLd^&~nlGp(VjoWܭI ;<%taD-멵O2tr!D&v Gܖ\:Be&~ lrz/8zpwOzU0ڂQg Rr]ҩjј Hd\W\-10K$-C 'wm`k[6 m[Jwiovީl(q ,8j7c}:3G 3IJ,FrIRu =0vF )\.xրvȹq#qw!'9ՠc c\}O6|^qGc;6/MȱXLSվJo$UtG1#g;bZ(rK ώ,tG>-'K38A?JvpqqhS?9ҽjEβs/^?A## X̒m(|МF3xx'%qppU;64Df"X)dK"z1gge1U[u@,7[,8DրGOn4j@.Y B^J BKP E֑Y>Liv%2=jFk5=;5U{i4Z9axƯr.4ԒYEgBԭy2z趔?aGB m1#jc:-pd̮"%g}g";WԗT>=`h2VTxGA+g븩ω![~hKYAKe$) RINV`W*(b[(vh}9ľrc+AvS>!m_-WҶ<~B;n/\_W/^(-}e4c&gƝ E!JQZ.0v4pʪ@ +g~+P̮/iJpeVk"6 _ c f*5LVҍ?^@3B+HJ?۝ ZѤfхp% |!Aj,x&ky/9A.d04T⿉:A/n@XaOq3Inq/u{nؕAIde 5ћ ә rD{"ٮy@s#t'eqfC:PUQ#>t]q-!JƊr/3,κ^.Yw|UHMǔuskƤIWEɓFH9\^Tg'DjPzߤK3[]h_s+T% +o5|KI9GƆ_rg%O7 ^ bb鳛/`B(q#qw`KD4Ջ]g¢L4 >7դؗED#ݣz`6Uu֕/Hّ1qI%j+q$4-Q18xeZq, z}VQrqǝc谶MH:V^B"Ru-tc3Xz09~2e_@`_ŧv /tэ tCDzى+XJQ'L"J2ZLcz[7Y%"vf ~S[pƴۋrpIWBTRtn+6kϤN 9 ֚ )M%]hr@.eK y=ȗ0o8.9f *8 "9ĩf*By+'zzp ˄%?|Exg:#42q(ٟ^N_YIpUaNy|݂ޘ M [$HTCDjiBipeǟE32iQ>-35%81"oiGh!h5X*Ac^T!"ݘRhJCܢDB *B&Nݵۓ:{e2)Qۧ5_-@9޼Y*R帀MVI-eۚmRY]U&-v&T8X ļd p(W* +!ub/Q^DROX=c䋮NI,*7gE V2ۼ;h 1[fv82$!錊 $ՠ" 'a,M(ztH\PUPA-+'go 3,c KtĻ&6V͸sVOf vǝ٬veO@a:Sc#{ Ad<`J9B5>sm?r}i/%eD׽L}Ȱv)`-cOX+7)9&ј eTI?` Cڨ1lVM[ YU4\aXP83} BǠN,~ģGw\? ]2}g"um!R YFZtQ?83lTDp/pżc˧`D# n{ s'~QyG&1Bcl/K  JZ8cbǹu?> Ȫ1r3@R IDV]rIN,6dw}j7΋$4tv0QaFg}hd.8XFP+ܻιa %D(V6K)p/c¿`GS#8G8h4Xp‹}^ LۄViU1"Λۧc% `B.=*I:+!mS9$ιo(-k&CyrBv7bNGGfx5n#fVt攟N q4IG- l ^s,A3ψFLULk&BQds ooГ)n-z;xK4ĨZ&<$W.sy URz-GxSAMvoT\<[ݑ#;i]gGĈdͼk_4ZK7f׫B˲|h7橲JFa 8[֝kq*' xF^hY:OkwHwV'+7zI~dM_p@}/srb\ifj}%{ra.Ԙ̧OЈN%{hU >\&U[/cbYwqҹeA?!v.r:Px<=c/N⌼s# w$!Aΰ"SQ;k$1(0:$oZ3gN*ܼkW@v7IKug8?TQE}$InY&-GC8\ i'G`R BM= =XB,-W-)c8&â:!WOdMR˛ F4ظʖE~< Ϯ@La3_AuijWM]t\g8ӹLÎbUTH :—PM.4D}K'<;Iqe_ "\0zhx^TԛTZU[Ȓ2.ޥ,A@eN,C4~<4n\-7yCnfh ]뇿0灋E'Q2h4ÚQ?aq32oWnpkȧx UML)觼~D\ 040ϵ3yZ>s蒉S,=PdA 6<:.lӻ7oX)o1-YxuԾ;QBO_L(;s*?^Oy 9w^F0I/XMP*aT8Mv9W' YKBgSmck 0 .EWFkRy|律@-5lJ;/R!tUC6~!&ɤ͊о/ ܾulž]vi<22SAsR*D"2h7s1y] PcI e @4$GgNEۍ?=O[8n \JCy S'-^{s't(LA'ʯSUP0.Y+ĉP)e8jװGJbsP`͐ J3-ksݨ(Z)咿g0ʹo2Ѻ p]\cPQ7VCuTC`_O7BupU0w~72UPlGd%@)N7Lѳ+pqvT2}6փr\e_rA32%ߵ`9\Po;$Dxg̊e횓u/Mg6 XkՂ'60XBcFGWA!?CGƶ|ha3*Ud ]8$mjPuv{J[:'SnV48gltT|?Q9aZ E٧Bbvkj3K#%AwY(y=?\Tށl3`TtsA35).:\[zZgSFBui64Fxя7aFXIk osbؤ4HI+D ۂɥM-_ >PTIWVbAY#@2XÆ;޿x]AZƦd5Ix݈vXJP`._.ZG*18~ 0*m-w$,U<ę1H^ӟ=CfjL\GW7|f!WyG |I~ '/q\Tm T}{hP'؃N#=,אI256€}ajm,:'qtک#>*E, Wŏt+ DKxS!즁KV3@I,"㞄6]ò惎X'րj&>#XZx_xm ?,* k&*SD򨉠ުp_櫤p(]zl!#1i CFXV\}֟Oi'ؚ6;<ʧͼ[pc^jlQ ɦ_ ;[&&Mlm.z96gBIfkf+z8W9ևT%6ߗ^ɯi:Ϛ]E#XXU fycgU#l %ѹE(ځGv˺ǙJѢgˏAo׮˒Tc0ޟծXn/hKu%3TBCKka3|⭞6*!h-N9`ˏ1.Skˍ ֋6 00ӣhi1=ZXlE+Kɫ5IkQ"-)yGҬngF?[})єK2-&ڙYC~H71\/P/kܚ3e4;GU @Dҷ^㭸Xɏ=W^D$jG;BMCljjva/R&TTg̽x=Wȩ RK%Rk*{NظrͰЇ n]l1Uu+=17Bʀar'H* I<(G֨l=lÙ0.;MF6LVQq7C(%J(/+2SF u2ĸC2CP` 7,ovXj1Β#bCn2hzqPv,.0h3-KRZGCȔMUxR^ 8{B;Ǖi@T̞tjxdNוe~efSe_s7HG1@"mpiCUTR(O ]75"W?AȮ',@5[vR7{>Sq{rJ0QQE[F7ΆDu^M=\~7^Zc,V)>HpVa=Ta@ A*lxE弻N)q'ն}ѲmTNG2s"p=-&A/ / aw仨Uݬ n-H #mkL~%54,fGVKT̸aPXv;E6n6 1)٬B q3Brj?\Bd[il' 7 SHE03F0mH|`YzPd9itχ8)!nZ.r;/6((*3a[c9= S߭}JS'C\H4v'sy~n3/AK zlVuZod1a]׀7+1^і-vr7L uJ=2Pd `ӐG] 6rݯVs?L,{r/U`gu91*Csv "\uu 仐$)5A|9OM2e-7 h5>zjߤk(f1lV+=+Ag `ȏW㤤z'Ex&lrH .ky5ȗwv]6isۧo5WVlR!E_ď4(X}՚MBŒyq854u@l2-+@'kQ`O\QBxd[}I7(Y*lG]WY4)X,`W/q`n\|d/S!#= ܁j)-M 2IҦ/׫Z J̺;ی؜9-Flv\X-|g;a7F$bp r!a<cHhǾ-%ᙓ LVY;@K/Ov`A%ꔙp~kV1{yTnjS bɡ2ΥA?Dxqq-Ze*g!74,E4FO\(+GNIfqug!f-:Wh8I2Q BMR[n1冏)F˥?m/=R5¹99+ڐ J{A0}pYza';Qho/,ʈGPi}+[)˃M0e^,ڦ|0'ꄱ~'LYL8ߛuĺ8 dI5G^ O9XcWvo:=nD1A7P(KYNpߴ@@Lr3XP(sJ` VJ7%^J8R٩C,GiM"so+Joo;pyS?ōis "Jp Ûa5jɫs>% zTt@xVp?Eyq U(j3T069KR"tؽ_kcN!5>AeXN\5쪀N鳴ػxVK5KxKBҺ9/ 6iVk/ \8?D'ٕmՔ y@?Mb)Srɔ8p/N &HpP$~[3?=fѿA`TE0Wq#4QW͐l")1<??gAd ɦGt)tӫo6r v\tp88t 4Wb]1FRj4'b F)^VRےԥy 4=b#T˜6 p#.g|=x%g>ѪУWUHÓTANr˩fW~Lt "MʠMU|L="@upP,}FST"0 7 Q&40Aks=JBZ=cHKtL iz Up' j$X6*Ao.w >nm` SS˧hJDx3 ׇT'A&{f1骶4w B`Ϛ%@q7-+ٮ?čB3RQ=!V- ƨZk[gS\:}@{DM}9ppEԛZ ~7KpI4 H̱!{ OxI%] $+Mpʚ$xUl33蹉v_Oor^6Aq'FGխ!ajS'[CaA涜\F  C*):H(-h|DJ!u =-T/޻2?/ MЫ߃U]e)u-Dp5EDmcJJ@g^!A&0"I'g>Txh͉꬯A &s ߑȟ}9)Hʿ2o|'U>3&Uv! bi++􈜺YOJȾ  욉pƖ0XWDbrC9RwƂ`\[B;#Wuuц^̍}GVƭ~GnMa! F?øCfp&jnv'!JS#xyp3Մ_j@&aLݑsbPI1 ZRc to{{AC_ǀ폷H_Ib($=z'ͫtSS%EyȠ #X7sxTYi6;[,;mh;Wq+\ՕE! @MxAVצ{kbպ^< MCEK>p\W/lK Atlrn $Y`o:yZ@I73plW Qqע_VjUFM4O}#=-z@ٱzlG*`M0#ɌF3  eSE &mbwExU[ Ysܸyh)qm`91^[¯, *ec<t٤^wtu/f %"qA4a=;-yJxsq'ni̬}ȝLWoIHL6ی+# u촎!az}ލVRaS Qըm[ ROsl^x3ɕHH\_6!qL:zwttF,XJ#]{9O*Tr#Vuey'_Q7nFˆ }WE\FFe?!0pϓb)^Ե !mqBn!쏼TĢuBeɷ{>Pʩ1ϳ&ʟ;OfVT/8Ue*\FbP׹CAqYyN2H{a!fE >.J~ɴm=ZLHc>(yD25jn=@2pV%eM@Sow y=>`â?2;$Y-,+ ߇V=i \?_?T@JRrCF:'|xV#`1[ǘuuk2t5sDʧ 8 kkב$Ȯu{8Y$>ŵ!$SVV;A3i5F77ìJh)w_d[(|ux8(B UL75k^kCif!lrFo{-, hI ?,#0V Q|?*V}5^wS9aώZicLoM_f:0>y7$WZjW_2ʘe#*P H+\tS;G_EN:0iU ~35rt3*}B .SC-Xx & hA:YiFLu\p)J~ ;2+lcWQj&OV&a4C]tq|,kKR8O3Yi1H7* 'GGg 9o'L2Li6m61,on% aU{1]gZY‰w/$-J-7JRDmOZ5KW k"U:S'8c(SI@p*9[w2"t&oE턱aI|;0 !/̦hTZ-sOY #ta2o |_\ .XX yG9v{y5QA53z.XEtS otBx򞰫m_ lr0jNc:bStzIݎ/B%Yc;mzh TfV2~;O7ӕmt|54 |z$QJ-`;k$֣~ (T~!XM*H@IRFBjf;/cD ?*bŽM$*j_MfKRzqp+e:Zݱ#/"7(|ַ'-1}tm*"WJ3X>;KVY|?c(sm9gD5n.ru=\B,9!( KEox0Tۿ>c' b!e0Fy6A@n:/$> +Ïslc+9ܳ "? xqW-D(:v̷.u9(L;Y_>̤!B:x| dI; 5D.bR̥i ߌp6;|X ;,iwuB&:m㧕5.Ne:+ nsEk>ZfkD2!#5$Zj> 6`챶4}?U["^ﹶOو> ܘ溑$,ܐF{OzqQ]31\F7R-Ԏ77<^NZ-`I5U~4sɭLJElV*WSL1y~@My׌\SSych9RN I.iuG(cփm3>Ssݧ'͠`Ph\eGqיq{K,ʥUWV(BJ;h."S̝檉d v Y]-^0wyBt!/ hw#bă.)]kExOiJ% =" P|ǭ^][2B¡6Zw,1:8&y5U Of_+.cwn#h1f ݼIa*]KVFKݨ~M]T^#5F<4$gqC6HBd)瓅{à͸2BYe78> \SĦvr7Z^U&tx`gzHEAyzMCS92dKǽ63<*n >R*tM3z|o]3 rޟ9ο? lv[2!&[  Tτ*{[s,3ܣS^b >0nFŋRnsY gԝ b}:t̰=}@n̯%_G;fĚSU ji.;Hwbї Fl}ԪGLU+xWB ?8%?,8}oj #`CØH3r|J󊥪Ž_kOVp/'}Y\RU?&lL}tRZ7 J*^5^(&Fe vo 31@4+'x<1O$ 3lrB֜g'v+ı OE=BNlO-1—CtUľNF>-j4ܨ&\E; ApB8ZIm46UqU ǝڥǾڠ?1wvuGarǓ24K=x"pbamҒGxreE'z5/ ӧkX)Α mCxa51#A+a_@7ai+K lƄI PP*(> e Wmv =,I( Ě2յ=;Gc8>0YAw2 (-yg#((A5PNo?ښvi 2#R&I4K93 ^~ {σ0Cf_*;_J1+Xʾ,Y*)}EEq95vYk6_ W^y GmR@ư5UgaX9;iU[׹NcWˎ.2z%N5>Y!ek09,@,-?opy(B| zªJ|Xh~=^s{sQPS6 1uwY5ɛr`N'ek_ alq|~qZ*j& Pn߹s*z Lϯ~[xtw6Lm^3WbNLv+SGVثql/s92ן 6s_eQ{?ڻ~ˑ઀ ?eoN$mq`2,3<~.J(᱈2}-w_$m] ] T~vcjxvM(YJ}d]+g%!17aСճA E<vzQW.@?mk/vB 2ZׇQ4|KCʇo6wP^x6>T-6 z⻨VuGh_;.EȪ=& \JT#!(`?eD{I;P < cB|׮j}`.y|V|C2oJa^ AׅoQ77>djF|+dFfqW6C,E&Iԯ?⦩X|$!zR'/ϡXHk9Q,QK߭2?\OY4ADa<+ ]ke ,#kM"ʉhxI[:Gam@K!.,ah{Rco)Z#zP@{sTS:sC^/X#',>!YRoZJ!Ɠ•C>9XJ*&YXy#=J507%(djmLMQ !m AgTq[NǦF?L[M+8BV=@0qM Nr.dfFTvh`BU.KgU=RK;!<`؉@aHIFHg'W+kP7JkO('7aqXh/@0=wkH/Ი:l߻renВ A]ma!MxKA%O;7WZ{9M^/ᔬҶͪsh]dPUIlt7+f|`! pk7K.YRЁ JjAۍ(NZڙ.RudC@:{/s;,Tڬ[I ɰw .hK\ Y>,~0F0I_.uFĄ\'@(J'G#-5K 9~Wh Dqv3oa &&) V]Rrc~w ׫=R)4`=~^M9Itxk)4`\=q~B67Yb'W%N8sn2eu}(j3b<א16U, ,{iXD[],+ItA3,[=iu<K ̘zͭFU9dSSy_l2%sʟ$*91!j-ESڮ@f6yn'9\ُrB$WŐqlivCk =E2uR7 `mc &ŒEg@) &@)HcdK?^Ka'{%Tw:fT hǡ`AwA;FԼA@$ͱ\iz_7VΙob_sGrPUA؅G[7Q2I{ժ ݘz,zy;~lj._+\5ts.RmLZ9>0Y~E1sY*"5!u =ף#iz%$% %I .^ xٮ|c * s)$7NKľ9f*:Q[ѓnK ڸShETRK\/j=thi3@"fe'DJnkf}.Yƒyϱ.V񙉿GxXŃ/,Ѯ&1@2C^Ъ/YE)k"倹 e0*e )E[V'/& xGI`>ٺY3˗clj>EfvAa'-g}eر-gC5}7%2 a&Gc{+CD?eawul/lYy& ) Q˵$E^ғ72FlGp'xԋXa`'diשDʹc'`MP4WF3N 9EjPAԱzpLQdPB*RAޯ'&cմ>bU7S1Z9#Ơg¼)wWaRq/$Ǚqt:OJB͏e4̓M;'"~lﰭ,6noNM,QZ BW!3 j][8FgZE'J{͹nw`|"x,u@Bɒ|f%SAKc 6aC|8T=RvaaW{hC죯mRf1*oݯ4$/yOZyG:aKN=bU(ܾ]жOE.ꁾ99Ȧnd}U;ql׉$dtzh=>ǶҋTp#^'Ѷب{-YHÔVkq?6y/Z .`{ m/"o=g43-Lx3tϝ-qMr :z7 0,ךR#|y&~0 frcHmRʋE*d{zts:*͠D  (~H[߶+E DJ;_=w8 rG>ީ$WlcL4Oʐ6,*iƅQz31R*gU5BE_d|ђ8w{}hoS޳b+=9Mi(#YąRhqWR,1;f&0̈́"ԃCVZU=y4U=Gؗ7 g-?4vQlɉ ՁWm!ho$&IJ%*; #.gBFYwUjFu܁8cV{mX ,KgՉó_ i+(bB:\_Yhh]"ȕ9Lep*en/=(`Tw$wh dI˜tvTAc};"j LJ$AfxwBU):C♴A?I_o%p >>("Og o9 IfdTE4sʴ 9 *n.?F\ bKr8W/yag!D44wh$_fD(Cnnrý->NihAcAM:A9a##w0rBx>XDAz#^LB/пp~.J9=n?&M >$"tKӓW >3}bz|'n9zk64Vi @ja~ _Lボ(HB 3z?V+ r[5/GeT/5.f; uP KȒ~_^Ma͵J{(0wUџꪫ̒mϋ1=LHpc˚O Te]k;a:w6Vw{ax-Փ :y>xyWk !R)^3E7 A5=ͧ@TV:߮-9r!Xsa7 62,ԥg | [}f&2{AB~Pi6*¤G19u,Tm:q~i읿8S^q+wߊ,L nҨWi7~#N̷JNu!)O* *]FvNLRA^~=fȏFE<ۋ!2n)L3DH _0DXco[K~T 5d Qi-Ο-F=]|ï= ϚÞ022jLd5aC9k-jUsh`R@GaLq!>pO\^&”7Ft,~(NZY0O7狉8漍b՜Nnk`pF@X}mU%zy"N@ aBr8"B!|KQww+i&%)B9i"c;(*>TzK8ȜJK&Ueӝ4}:3O*;iQ niE޵b,#&KPQ8C(dОwa1 ˲UGqC294ټzL2Tދ_"iPE"2B֟sa 7(thGP9cwq7r`lG,Z83_C4YtFJ#GMT a 8KsEIvgCZܣʵ]߈u x3uR?ߗ}}\N֟qT V?ZnT,Wvt4;㽈!Q> > A_$^ esRZ.FR;[BNJ?pYmP,+NKzA ]ɥ|BSQ˾FaEϚ/ȹ7%A׍e-d])_wI,8v"zpM}\N>8XOuojgשw ~=1q+Ňk;*<)vP"AFRjЃ?Dq,킐Nt8>IHqǯҔ@D1uGf9spyUy{(%3wKvl/C qߺr/4Ͳ1稥ލыWoVO>C_cpu=֭m@_]'#R%۠4`9Ny-jDcc[ ؉G$8k9G6κh>7HP- h @@ymՔlZ44Qv+x$OZa^h\o2ΌoC c0ڙ8K~Wf(D;53,J $l*Гf*yfļsW|36}oӽ:̫zE@N`'y!`Jѥy9ī& *B/yL5j0|UPPZ(ׄ KcYQf UD޵ܛ6r%M2s`p as.46~s8¿8p,Y}, Sn W+.AA!d[u .M>͊ţ-aGɽ~7‡W"n:΁z9uY R2HerO=cJߥ_ؖɟf`^#uZK&xCAҵalj_%rTr\T`Hī57^ϓ酌YUf$Y#8Vb2 h}h+DX%X.f-ghNj|GC竍GoXr훊Kq&nlzIK*ttv,nŒ<`HގO˟XJ9KWT#W%7 \-HwqKU˦6o₋1YFN~3 ^??OɝDrNlD;Cﳍbm3pƃ ݶȸln5\yu{̺wI.BɵM{`#c3tdO=DsܘET]A 8(/cӾ7G$KE;7> SrBI[HC:*nX{PʧT!?Np i'KՅϻ;^"<'CVw*hMi[\yuֿY*}rUPaSJvxleS{/M D_ɳu$4\b!?O1%)qz^dq@R +Sμ&@0P'4tPnFS f.}-Z{\Y4#>RF\?W׊^;d{$pZ Wa}0/D45Ð8Gp'| W[ngpvk&L7(00(ݚtNJò/yqMez_NRxC9!~GWB|%`8~C g3<mX)>)3^!v!r2v*j~YS¬ ՝ @@tEUh-$d |,Fqh7sOn~kf$d 'b MP3UByd#N7vcM!h7G}fp]f!I~θ횆Oyǂ}zYz#4:KjX15`:MmM[$Bf*>YZYTZ|!:8f"ٰP?R,zۍ!*^eœ:oaRY6(rDݷ f kFV[/{C1e.@u 5aVz<T-\I ŸY5RH 6$ E=~xa׫팷,D`p*|_[w"\ `<\vRhDgX7h j;%l! @}/kBt .B&b+;,`,w$Gx,k<X;{hEMyڒ_gXv`4!in y$92* ^A__ {Ђ!XR-rnT?6v>/<`=U|9/$}i8.~Sr`h`tL(Zf=y-bjb2F36ػgvhS sk;<:öD!޻bk9eWDiFwP?äpqsxӞSoF}d,?DGjؗ@}Yȱit E1W:4ۯ,tض R|Xز `MT I%1QJPеTX \(7+};^JUSqk+:]ʫ_:u J1o%i︓FY˜s_O7)xq kf)8[uqBdD_PM8:J/0Vjv5h?hw)TW&ir"INH6AgrxcAQBUMbarb?W˳C+.!]'p&&Ԃu~ht\tOFD .8ͪL47Y6wjhL5EL'/QNg<#^7vPFųi_ U>xl/ =og:E=DP]߂ ꔥD wId?HN!xݓ+l}$""r"#4CK&,9DZ"R8h]t8@Ng$,0'lױY=O{[DQyMe"cTW,⧍f ïhgsoLqe7.YoCeQY$ʖ;6<`ʻ|N>N۫]]n$ck)UXFvd8~M!T; 2/aY茶}`;({шF9D?}/UŇaYxpo;sb>]:㱨|h3pFYek%HǑ?ݰAAK4c c)VmgG ^ۇ,Fͼ6Z:"|Ѱ`?e7_.RK<)$$cC'6'\®3Z(T8QŬpM}ν9uq}zA0ӡA9&|Q7%/ u3$BY ;ˮ$D 0o#=UN42%5K!J%8L~ L`tkEBއ}3S#;"K70R3)"E~54-TaE]ԙ &U0O;Fky8͖=uj T䣽gM^ RkϒVb*Q{]L['(ҦZ_QK4g)jhR[z_Nŷ4% BsIS$Iq>J,=YjBd Z6xq?Ca$y|-m?& ؏YBt *{<(8u77I7&99/cqݯӉ͐k24bS#7Ydr ?]N:#VЮ&u'[&">z5D?bIl T0N>ΣwzҖ*a[ADr3 /c. EYVM`& ۲\niɀ}/X^bo9{q)zbz=C'qbgaCO33m\zƗg>×DUT/߫FZ 35|9>)˷9hMbH/0S41hBcW Si#r'M?er|_@|Mj}(,>OW$i8|~q΋0rA@#ƃuk^3L&A+$?@4v&TŴnm^t xEծC14T lt&ov6X-c+~ ^w5*'PvFlj >4TCLzRp@CI^X[zHH$|HW4j7>E)^-v!Ia/]2 %M;;TOn=]S=Z|.[b6PsA8K*˚\*jﺀ"tJ:PshZ>p> xsƠc X&wvh nI` upx ǽ"/K6~{ CCxu.YOynyVmʱ#KmIݾApݬBkL>,9t~N\Zg2Վ^CS@y(裤i2qY#Gb6U<&-j?] `}pRF,yUoWwV89_.& *N/e B1Q3:?0JCa4+eP w0ܾ4MJ3S_+"__ Lfd6Z9Ϩw[9δp8-lr,tXNrbiQL Wk;ّ0n%{\~ 4gȰ]bל-]gGVV䙤';y?Sͺk1 wÝCn)-wL3y4=ѐl$%fC9Gzt|#7ϿGmrǾkU G䵎uej?ٱ ,{d:6|6 #G5DmIWWKo:D "ƪ%Ip˔ kB]ODϓQŖ-/J%(q.jt\\m;|:oK=_~˜cqT0&8趡>8^Zuhl0)LjMa:X+"Z>O7ٓ& S3~a $ ]A|y-ItyH{qr&su)-R+Z{WvrJG,ٓNLH_o~A6 /o_ k8cOɫ[g"tc`j?OE宮e $XȂ)c,U%:Yl)#7e+?ī3Ұڙu8OxZzLz4Bva=SW5Oi؝ۢ \`߹K@a܂m8D7~܄ b:#@zcE3s6Uy/j/fyX/䁽(InNgWLB/YK&iB}mdk\=X/9"atuˍRee˲B8l<qyJ\\bw1!ϑ ݟN^۬p#IEa'JC{}ӆ5-ضPO #lx *L~D I=AKj AUcN`ހH8L+χW>r^$Hk>y9Iu66eF-[T,եQNP|A3TJYi5 kFZ·k991[\0<\qѥAryPpk rYV 8A?L&=aSIkjbfU:o^GT0uV>\F+qBrYY_n#-Ad`\TAޅ'C"ȫPҮAF3YpRv526u$+veoQw׍&O.*nSRЈq ,@?E tD3%N*л-#7h#<0iiD)LSg:bǹH~ t|>c΃7KZ'?&o?+ pd݃ j}8NN'9$ܜG[%qKDk0Dʿ7NZUSIivd39wUg+IJ 0$-p5ckgׇ]=',˼E7ڟ҃hsl"YUdMV_=;;P'F/iʌf4uw~+$jͬ`<J׳ ]rP`YsJ VwC4g(7Tģ2_W0sL6X$ _cK;OK;qGU.W|񶹡>]iymk7u.XïuS='Ȧ:KFrzzyw)Ǫ(2fjTTتkj2Pkbo_S~) V=%*r7"$N ZO|.rprɠ+Y .3q)fT71Tz0'ȓ  4` c:ã[@}3,5|U~g!R*fYћegYћe+fYf sFթ<ܰuY'M U^DV5%vK6R5pe;D&Xة`2|OFwk~uSOT M'=KMԪ ђl ̲_-Ej3sJ+DĴGM91Xseft+'"VҟӫGusr||\|? ϦXϴ"/QGtP$AKec'`g_j/M'R?\zL:5XN<높Za-}A,Ch=2C*0dqdphOIĨX3Hm/Yŋ>@!n"dٞӵI'l=*70Jx Nk2!KL $my7qo|*(P:^6qxLd*=SsA (cPp8k<7(s2nvlf{tCuZ*|v`쐐Umޟ;,䪏Iv?4p|ϤHPuY]l''؟PpӸdA\\7ʢ˭rIg;ײ.A4~(_ɛ,8;{U/Pk0 v3פym:#Ep8{P௉Uijb{Uqo+*ꥫxeXf^FF厕J%HӀїcw:Y";#krHzګt?ߟ{}gK(p$㰤#SqVM{ӭ)ѹU|4ƕo]raӣ/Km|ܥ~C}/IT~ FI. *MY,n/38Q6l0lfɩ4JGaґ/u6"L/go#)1[Z@I FLTt8^g7 nHl'yp Rbky~0mљNŐRġ%}{AA%"B-Qlb‚iӚxl˶3]:SnX[5Qsdgs{J[:tV6_+S "7ժ$G) BLƿCiRWl^y˵i9i/K XX7z+T}43-HA]ZĈFָ=Ty\BKr%޲=֨u)[P7]+"vOᰬ$YBUlQQb9dMI&,̈́Lj ]ߤ 龤$€\(cR- *a}eW.=n2$D]ӡ=Ys9ka܆(l}/%zsh>Hf{Z.h^C+JdQ6Hx飌GG1/wEg FS,?W)^yLRX%~_]qⳟϟ eq 4^9LⰪzL4׋/֚4cK=4'SBjbS~r➊`VI=uwBC)vI⊏wǧDӯ?VH|v(-OHfa~U ZOOC$?'ARߨhۘU:'vs!ڏkslPijc.rT&O'& Hӹ"2J,itu#'.Hd8#H9 B2p,I;؀TYmhh@ݻ>3P耕#AQ4z3m=sD% 8橿e|&m$y0[i6$^(\J7*DꓠDž=Oш+%es"7@vvM8  ̀8gΏNwHRf#ӆ^[ H)w+IhyGk̢l. Z#=+XҶP|D=Zdq݋r* _SMk.-[DY1:Bhv.c Zn}(3.D*UaErؖD5E@UZSTC" z=%4ցK_֗uUPf//ckrotPtfz&ѕi]D͙)7h̛EY/-D^61e^So4+x?lk0r2K8:@6z$ԭ$\|}871o7qC8}mRlM?Y W/GF|om̄![c]6-8ZUJSǸ7ڊWW-gV9/|{v'H"3;yo׫բ=ٹ u}1Ύi'q|kK/eu#7*0tNWRhkͦ_C"-e|/:n, 5{R7k&:q zh@b ddV/=OK*Yj݉B\>fPԾI1dSR ;:wTp=:+Sm%Y=q"%"_SCNU1\IZ<9heŒ9 ˉT1RXo&$|Qr6ݢ^NK|67&6k pF1^1)vI ?D^E$=0/w_Dju=.O9,LeGtkdQUX!KdO>=iM֤0Yǁd~)mD9Φ'Q{'=-s%ŊsJ(2Ki" G Qv[m'-`,tv?l۫5\6DRV ,q@|/ xϠlKV zij{4 /u~3FʸS޾jAX0Y_zso ]/aye4ghq̂S0Ƌ\3V<:&삺8,d|=/m&K/xŇWozԇ[۔Z.bJq>.VSL=R țLI҈J2nb9C%` Pfgseh W:JlR N{;޸.܁gࠟv)rsl/{皇 oEM{ A.zksS[pީnV$ v;65ʋ)o$9q8[MGUD)h8.b+/U'e=Z|{:W~nL@܃N9^H>O ׺T~1iLpl4շ8Jt4Y_qqQR}8M[YۖyTlB"XΑ|?΂;#__df}KbW]7DS8`a H%A&z7>[, ݧ,^Zl;ǐ ]&[.ӨlgTb"?ixrv:vrgQ#Zh^b 4! jTƫO0Ƿ_ 1oWKOSB{ϛt>Z''l5"DYxmu=no}Nq:K!7vU_vdG;xDka l\ ľ /pȒ0$Z=IʦD?)Ϩj@PRLjcp46XRPŬ\AlK+śUq=N}Ro;QHlԧ,cIdD78鰢0j"0xP\) tbupFkRz6/o'KCٝjBv6v/[d5]CveZe[ITj5ۓR|6?H3caGJ(wU2% wEܤ}ŪjV˪ [ig獜QFҺ (cad[Tb@{fVbRߔ3QC\ZAJ]䫍:@o9Td`oB;VfqrӒH&r@k"Xg^ JC~*,K~nT-uNm#,&D'(};ۖ#£/S mA \% iq~W,ES^ /:iEZK8ҕO#Sq$WiVo@QKf[V2nz+vz C>?D"iE#gn4J8SdĩNO=fuv׏C pھd$tRfRͲK&3)jD I5Lkh+ &[p$szc7o q j2$\|b?%![ӿY͵G5.LZ.B=&Stl\kʍ yX.xiizܰk3-ՀBgLuGXe0Z4z+iY~I~$[5)?K?g?:Էq]ۓ]{, Wc_x϶Mg\B NTb$NzNT"S dEW1Hi޴F48xm ӂ ,xReѼ4ݱjMY@:zV5O7Ez|G~2yvYguyӬEsxe6$[+J-hogPk}>tQXT`/X'v0I7d p$@G:'~;Y/CkG˜9:ȹ EZE4|@MF} y24/*#hqM411oϽx$ػlr3o ).3DSeN Y $tԥĒoZm!`~3.C TI@Õϧ4aT Nĸ QfVrWvEBkٸ%v줐?NnLL%`i,k%¯m#>48ҡj՝0<@q0ZHVݗð^m <TGC s i8 7g8DBeVj& /5rf? ύ1NgZui%|o_e=8 [؈(G bv,׳W6J=1;[fp$Q.>wF$m'kIt j@=9bN>u4 MѲZ!~sW~ěTt(6G$j#;I+cnBh\h. +%H2prU4c_\~d7W^D+E24+4J^"=!YN1J 4 rqr/sU-J %vҠ"xSi.n~XР5.lr7E k)^6gҙO񿛄m7fL_8bD|jlgC ~$` l\>ƑݺLh0%l*Y'}x.)|Û/rAU0tH,͛ uNDpn1(B`0.dv6PȌ7쏟n@Pl²@ZK=eހ >@Ww{n~c1jELa#콙gl&5a"*KyXaD֫'ⶒmGI@Fp\j"mU)cۗ\e>UqTO@(.`IU23NNbEi nDN&!qr-ԵIX-ɳmUAm'$_*w jarBGg32hC6͇\a:|jYGG tGQyOvrCj%A̫N&zc֫8E$+y"Ґq@q ̚!t۵klX{;ua~;amm;r뢁QHUIyB{KM"RXݒmBNm@ioWP^q.Tk$֐n#R9PvWOi3ED!ޛgϣ3xn7 ep);^v[(NoY3a:o;cO j|f h2D_뿯pd])]DȲ5ȈzeZgY۶,I^@<ZVIx['\ySY`d$ {c.f)6&KiQv -fԑGի#ؐ S&G7Ͱ A_kU7mG+h*ljpvL>7!m{\3:]-L&8 FLӛsK.`kUCg03^NMxʓ,@1JUw0pLGvp|S_0A8Йj=~bߤ))7)z YfJYZ{dUXm>*5}-Z8|Ŏ_U )F؅uCUy\2Z}C\2UtIZQYb ,g q5 Tԍi`.dl+LJ/ȣ{ērrϞ}_OyG"z1C шXUR` I: SJ;ƶw5?%X wqƝ鰤 u=!A)$g! 7uh n_X$F7UݭZOWD7۽%fLfAWh?Vb`oTlqŕS59(V$SD[yqM׉%)x;ybǝJ"w^nQ7XI}:"xV]{<o9aЛpG6oFp<: G<WHhqHBFWx(DvhE t-zOtzQ>Ts1ӒuPBc޽νYoisSMw<5}ewĚЉcw.pKPju,6SbrMո8X|ivT3Bб tSz yTP@/HM.>E9Sb$!gq<`inGtve%fålɿ y\dj0II3TRWk˦Y%R}Q^;)71=_j|)fjl$t]蓩0#^d?mm.t8E,G A ڦۙahaYb! jWMN8',d_99|}ȨByfƶYH'=RT Yg_\;~36 + (dub Vޒ L='[Ov>vusLjCEe7 m*@G$ c;e۷Q|vNws/?|_|z/|/?z@ Wfi & Q AY] wfRzS2}d DVη>Dޙ0mՑIYz|fw-f%ݳL2ܹ`P2_s$Ƌ\|,o\Mn-&ܘ13jP0i/aT]M5{^hN\ oO}}*GKOߟU𧇍.yMZ8*NaGH4@V#mX_[U݇|uCQ XF@n3'{˦z^me v̩uI%Z $]6-M_msVU t1WA8v[0o%?7k@Tv4LL|dU'+lqK.-(K‚̝ԑ243!:fƾRT'm11JV~l3m'\ˌėQy[ ymxTbaRQ:_9׺^#u yNᧀ:[*mܕ\rZ7)^']J\ߌtnfh:T#`9M[DvLF}xbLLm1?„wn;q答'n-#A#= 驮E'˕\r !]%fy4[ָYƛZ7ar&pHA "&Q*K.L2]9[/x]JؒP-ıqpRfLT*e8_+ u-x׼U+'8K@S)-vFHj$D[0kZ1mQE!oP! ujT7#v>5Gq<$P'z?0;ע;2S,Otn6Ƭ{ n){ێ}Tclq!}*b4p6PѨR6Knsء4FaXl\0HH1(nrNZpVI_T S5L+qsƻ>DQK,}땵[ mDvk_:ƻ!:cTQ]7=!Z`"JHM\*4W!Sj.4ˏ84co>ǚ5kVNUmNrVqi_U5Xm!NS1k/+=V+(k!u'.t\ ޫ*/C Vr\tuz=Br<4T"椌 9 n}k7ˊCeIJy-d(5| E ,U{xw?+9 KT4)⃉ӅO#yH -p8mg#Wq<"'F)ٔioCĸ^:)6%}AC_Ϳ,d-cy^Q 8N-*])-*k zP 8&K I|*Gv[i׾}Z&*.zB_. ƢR.6>=@th &>/Eo7hJ:z-i]R7GG_Wn?VGߟI~1mNw53NWS\%i]7t]ǚ-ÑKuRv:ia=LJ2TS8ڸxB0KŢW{6CewAQ%>X#^Mdh{Έ2.|'vϙfH-tPJu3A}>j+@Ҵq ʹv*FкW)]uϿZp:7]!Iܨg/ʶA`H7'e*y]^Q(у _@#7h{=`wlg )|5Vqf:G9gm# *6n=ŏlL[_P#dV J9{J=Kܒ t~1bfv30<͸6HRuz9̯2g4VL8!7uv[HI>DvΖO]f:yyW ě,8B9ҒS+tG/oZ.V4p^,/'cXHڼyMF@6m2zY[|xr'UGF[H4xA@BX?)s6vd@՛*V^ҺQ(\wB: ?ģn=< {=*iVt5]Mum`;6aaVa* 1F]WK{LLL>ZVffufI\$%25VepTqܒ@pb2Z%(л]@pBxح+YtwbFS5hS%)Lg깂{= B%c;f!aZq%yb}f)q5erӉO ?qHaqQmA &#5s3!ufk3x.R1gk3pp^SD{Đۜe!>D34 Ԁ* q6G[Ebzh8P9kH8AǢ#(_ø8 LPO.x 3ߧO7z.UC4af-41J Ĵb8eSԾn3ԸÑWL\p8B-G‡١KZׯ_rvKċ_sEX9cTU{<*<KA Ż+W*y g 4ؒ_uLih/|-fRNhQ(M8OHN4'Þ"m«c5g>Hl&҈zt>dnu351q 2b>Ⴎq8jPIۓm^iDD8̍\QQpGfV8EtΙ ˰v#JJ+7]ҭ#|6te@g}3twl9TWѱaⓝ.Rp%d.V %&ġ]CjZ^ y;o}5_sew'c%'Xe1D7ӰXoL5TvPטZ&d*=teݶh\.v49:*}fEL#ӈ&-A=U3q>C~w,8RG^ 9nFchTSA@Mj P0U?W5V\8oɂ8#e6-)N߳Ct:3e8SH>P$*QTd cB90L݊R~VeEB^eS8yij~yTƿS;=c8DjY;oQ og.#V+\qy?/_>~Upx}7''o^gE@gX}&r8P82a!A+lԚy\ctr$ a^7w(f~E2F(3AXBT<4bß;8EEp^  U1`>v^*uRƐl, Lmdc2*E¯R}S6#2:TKPJ1.ɦffS!":\ fߝÓW/Ϳ"e蟺ʯΦD9(r!y%$Bڭ8؊$ |ƽkx4&2d7sp=|h&]`sw?x_~'ϋ!www?9}/{Ow[6:z%OlM8심g׋w1AÅٶQJqmGVK{\HF,vaOm%tdZ薻u+^;D^h fْWM鱔[/AАlDyMqXp>1aN]eHE.E_i hghd:x>Y X61i^n2`(Оdדgē|ꓟ>>:~wN؞cnuKwA5kHK,JB /Rn/НcR`8kt[Ѣ_ƺIKs\WfMг&L'ZұeWA\=΀rŒ ,Jxz+0@#1J7&?P<S4ԦsE:2&ϛ_̶zcS۱qɺ48bUv5p[tO.F̾4cq({HܠM5If>`StV~L9]m^JF /۶ \}to0;vGE('A6O(3~f 2<Š@L0ٱH?RUis(J籥'V)AO* D^(]PݬgvA;$)F"%UH]%1>==lQ/Uö'l )\co#KW!㚾tM˛< 2YMrM+ܴj8lSjCjfUe|F}vn3pةڒ٧[ңva8:5UF0$X.%@Ѷ[bỉ 1 'x4,e2!7oTy߽/A'^k Odθ(+fbWY=Ȑ]%eL@ę{FN=^צbwkʅye/SJ RS,R$%[+GyBE$P  6|Wʣ'lK.ŵ"k b󌟖|- QL>/~>W6kqBa> cvrzQfAd8j>66LJ-5Z@=m\( XH|Mrʄ;LR"ko^pDib#H]YF>`6DZҜԳ=KHus6U\.hIw/$Qɫ0TF#i$$| QZ FP\7]yyCuya*քLG#֎Vb6m,Vl&.j3-r =45iT hw0İĝ!yr,AĤůI3nOjfV7GКg,gltI,WjM.$1;0.Y|Jq][qΉԱlE_T xQf6|R.L¼qQ\ ,f5hM3 %zLˋF#)z#'kFUhr1sn>ls JOQ\uv-fo!):P?(REQ@wrxSlw[<~dN ߴJkBv'V)g%"a }*{ _){(g֢'e&88C%NʊK R;^–GJaI҇pE;l(V= 'lA%}/)=~Q23c趬F +ȊNM׍Cډ.kDR@h<$iɸVfٛD$}(JّnD+ \ z6K>7=F2ٯ_s\#o%!drD9A-~#&liQyuH1F;T͛u0, :P[,ȇ$8VwH 1I=YR"h=h|HߒߘήC cczOޭlJ!$(2$k)ʶ)%>g@q:7vB{LN=N;@9štց Fpth*Ā_ ǽߙ^"=bୡ'-/>EƵfIIL}3 NZj@! ^P4dsddBDO vC]UYyR+y<1i+N6Ph#3m߾`8< 5QJ15O39Oe܄t.ڻ\Vbj[6JRXp&>3 ;Wr+!%UaVZڨSZ<6V^ ~ *(؝$g9Ck Sd(LFu0ٓ=%.J"=?Ki Ð}_KCwawXITwcߵ^| wxq)cPav>%|75BGc9} O=z(v aozOo;SZI>5'nU/y'޳53D&a<71E>;wr:iTr)qwK<6y=tZC<&)OWn[\R"cxF Sf1o=u.Ufsip~wxvnO t Y`)BE#P61׿GOeל\Mr}[xzb Lwo> ԠAh^h]/ DQymIȑE׵,8; 5ьx z_&& ,zCkΉ\KR=T<\ "O>Alu5\R?P:SkpRdh^;/J/TvPR*ZMtw7ULٕbfhjKلs+v;[īkQɽM'#a:{; Sf@J \qeŊ帅SjО}G`MIYl*e6;qߣ`/bycE̴oz{mڊnVo)/*o.IJ ݳ3!eёS@ .ꥄH j_MuV&OvZ֭E)dVէ:@4K ޢ,ieO?KP@2k*YsB>XrG\P0>% G8ڭ \JxԜJXtrs6XLv ᮣ- ip# k<,eiIuUX Y6O_Q9N} 3ļlؔ& p/vm`%4Pɻ Uji3xxhFi&&Y}SC_{% 51uߝc'~` 2)#ZLfӃ4xk, {~x̔4_5)z.A;^-۬nEjL| TWƵާ|dR}vnji,niai1u#:eI-_@P7d4敎 irɍ6nP>j5Gz26L72H7hzMZN ;r#Gi~KE[yMӷ.(C5RԀ;ozO"jVfyʍsRSj.>gPTp+/r`MLl)AQaY3q[)-Ү8OT=*(EXȂ+DM~D͚Π=%fqm( V@2h'7];ہ']%Ԫ#9'2xؗ `2KVڿ9I/jAtOIx'O4:9",MgT5Y<[ |]+#1: UoS\fFg>a~x6tm1kȳ%;1| 6^b.cT?>. |VӪ'h(U]ۓipO#kSN%ʤNR$>l%!9g㸸+kEDis6??1TmY [D,ю8w([B/~ osqeVHKfl DR4t%t࣐ZPK^ dq zx'm-e!'bvc`5J' %'.b!8qGnMuq&9b@+[ x>=[4tq`47bR9z|W.G\bblʤ,+g{<6 q5l'ךT!?w?jO+i碾Δ;W73E۝'Xx\X(S UyUQXWZ%D!fNDǿlnC91d Hx5m\4?iW϶@ŗp }̙C6Gdƣҫœpc,w|gwls9M(}ym5'&G7.-uQM+c E*~ $n @7=U0Y.ЂY.1%g#ԃCxq7E#ƪF(m-2&z OaPm_N_! S|D)LQNO~w\ϸJዳjR,  J}pF) M6 Jf@ir0Ͷg4 8i3"I'.ZV.v B;,_E [f`0Jt'D TmwUI!Xga ǍB0灊4娉p"M+HHxNx<&$,>Z'iبC m]%D$Ti #CV _l' rjC,r6/'r͆.uqS3umRZ(߭>xY.L+B&z_r]Mq )"o fS3'ゕy:;rTfJNzAA<~lA/bSOrEEy#1\yRJulqVR3&Fbä[S,068ciuZRăht 839JxeADo@|=ўi˧Ȱ{0LwR'L9eKZb1F1ܪ ~♉Yi)Y2&5+?VWY(C33A@jn5G-AMKɐñ]1U2vB]֥vMremԏ5.[ucfbpj7ǟMO^"}5B2}{$uʠ<੽[)԰~:egd!'7{4Y殢Smb!zš+\Sx  a-ۄ'އ6t-)h7Pѵca|X p+cPSel쪪0u`7_FDۮo*Ul!$) OzV؅'^^& y\|+M^V>UZF=3 ݓ[KF{εϾQ~𠵛 5)P #.L.^<|4|E!D^oWD)uE9;g8Ӄ{&=rPd` $YQHj+M =Log`=v;8)$)Kh`vHN3bU%۾%خ\O̧Z ![ ҍmYfQ ؤbj gk!j"p*#;)B0j4(۸2!lb+|I|5ZRrR[{#YR(G`*o3\e/ymMJKyP5oGfRE3Lqƣ Řx??vR wʴ0WL!xoHzKԬde k9EzȰ2Kr(XuaAoEB/`"uT3b.!RȮO+J{s/j\$@^4ZeL,220@`[&}eJJ9(TRLȷOࡩinwlyt@F]Z_I=?x4.Ãz |\'d_tw?fCxN>ȍ29k< yS|AWU}5{pu_I]@l59Gts\jw5Q͛ebl{ΝSG@#0s9Hؔ9i )oH\a]R6kRU^+3S;?@{)_ Yъ^.rgV%OKuae@̻\3:ߥ“dkM\>Eࢬ ret ;Z&CW'I }=%)7j9C$=t]J nw?vx mt1uElE.a'ow_ ?`Q.bgX_GレGG.D+ns^v$yq5#Ow\_Q.nKIq8=$$PQͬrnt T oeB饛ww7&M)yTve򙤡Ai~ԇqеSi{t7ԵIQjP)PjGX&/85RPkˢ),Qf Ja>q2P;Zz+L*ƪԼ=K=;L楍E<#x$bO?St%n)t[pƸ#Ne4 ^F1ekK3FDotCâ{sK]^6LٴF)zDzL!iN,u1 ה!7 lB'@Įp6s7!l}!Nq'>]wQcV@G NYj S}3lNDNDy~7-6eDJf)_r*mYq%ǸE޿t ,j,djR w;(园-J̮VAF"âz!¾B*Uz5 á8Xka[x7mܰ^N)\rqSu1~Lm#K謲^zla%毟s(o~<K|V]I -D^PX@r!scBWt؊w'ћPXFhU6_í+պ" ^}њ[<`sO?ӡ8'LGv`y;9 ܞxѸ8UYabP{8t .M9%#I8,:)ԕȬ) bw1/,=ookwaO㠮#uǽdcoEt"zRXF+>)(k"G'yll<& ̚'b$AMfgomCliӛ%\WS3Y0w_z5{\$RLDZ,L=t >]m&hf$>QQ@GМ`q-^1%ʒZ-ndZCn#JkhD'_M1xF$7ˇmqJy` .* @+\9`@ql^,s 1ÿp3ֆ3AeVs4c<,5:;.GtneCL?n9.@jbɮͪ*ie_A],Qu_uC"OaU) Dra´%d+{'`:dZMv*"+q^yK\j"FЕ~% L^Dfm%lɒyl_Ѓ$qމ268펿{ouyEɺw ; +1tshGb<2_R4k Џ7 eGϾ;aqob2Q`Vp{y2o0Y"tw*"7gy_MTN5}^$قڄ%Ϭyڢ$*5) lyW.穑ͨq^\!3EZ2}\VbZ (" Z*^01&OtgR`  hWWJMذ38Ud/;5љLɜ&KO^3GE0e+|̮9D!,jRuGii;y5c Ţ!I{f4p^,[ϛ{R0z&Pifh,I65 |ar+™+r3#n-55tãN0cGvG_Φu̸5PZ 5i@/0yC{6o3ulBvfޝQ9l C`NHU'p$4NV߅ZEG/1) 8l(k^]5B (񨠤e/T'gOwLo)8z\VGDN"gRm,W/ Jn^&QWLA0 m(m~5i9$Ƈ*踠|STO8_+uy(IPT0sY$y_5CU`WcPHi^ҁs7jE\Ãټڶ FHĭţ=6>WM پ)@\ӒsiZKF)fzj,&bDZn&i⪄rW ]Z>=cS^laq Tۧhsh 1x ` hCk2;{{- &rm8w5k27L] /ɼḦR9U\ +=υ\EDuh&a>f{kᝫ[?o?xKlh>B/ h˾+Nl~r_&Wy ʷ^RR ]@W!v M Յ eN]{+=>QmKJWKVG)wuoq<A6&YXz#!Q |E/4wwwviy{T@ȹ&r4_5Px%~r~"jt_̲U_,f@v$\wq٦~p4.+b4;cEi5n=b`~+o] KO(m-taAq@ D"תmqKhrJiȢ-bX̿*ם/O^@h>&Xkm5+PdcB(!UBA. )}qnxGVƚbY۹( wѮf{JZ&_L/173£&٥ZtU^ L]@ ([ eu}| srJq"EÄL4 o`&:2)[S>e]?p>bL@"|_1z_WAwrݿIt\x劭8F f q컚u[Ntrр3z >xqHϘ_U˓7<{&[Ut<߻(-zv:K`l9pHLỬ}9`xz$6LW)[k-S7D''e9<~ cNbM6nF+n&˦AP^ e3Ч8K$d$:P! =)Qa,LwZ):|D66Z>Brș†}M^D!FAĥd -^~T,?dd vd NܓmRSi$EPuei𽮀ܛfyu@Y(3Ì zOY_Ww]oFý[ٗ=7?FQC^.r:eJO\R/I1Zypv|AEb!AoJ"V.L#U:]+Gǧ,X N\|]B>r c/MNJNl=eLl[xK,D3r:ͮFSW (XTUZz^C&3!$b&]3km=`iCP53YXĻ!tn, J72k 0E nBkiS2J&)OĄB%fZ =)O,= XTfMb^x-:,)S>>.r_Q ͒GR7R^|.p6`Obx i]<ݕhW न'E`t 7LPT5t ӛw/ 0p5_Wyl$vqnQ:H;=jH٤Ҙϼz3ۏlJ >ԕHeD+t0b\xu3$nw{\; ԵtD (b2SD+1R:)"in`'>@fK{6Eh&0z֏B\{Μ̾n}[am;=p 0Nh+k_.K,RzTo+(WpsQbl u&KL/+.YiYe1VC뵘bo LIH.$+GN <5%6ɜIfuuڎ*Z0v)/;n/8 p\3L 2(,r# 2/nP,`{ uWkjɘ sѝ@d| %34t;!MA^wCA˲,/~7b9"r>֧v\0]oWjdTԴ?kG0z@*ҹ"]lA}TP֖!T^զɤ% ؚ^m3KV;Yz,e:\1JR4xϰ"]ڀxiDMN#,.GqnY; N!Q^yba4\a`K}W%tpƨ!%&T'a\1^{!oY@i (Ln_ ͈_{hbB {} IUcy96ڒ[֚MMQYU:kՖOtNp;3cu)%!A +6 ';aʛȼSF̆$tYN*ZhJ;p&$DpyOX8}+A=OjD''f@bO%Y^~.Zs>\'ͥtfȃ驏H;BlDeb:k9FkFћѰC4]V!2,d\uIhcsxDH~$)oĉ h_dHXꢦs/36X|>, Fu_Ht=`p~GCERb{ZqpfE=[ ew,o3Ztt(hI"Xz}Og;ϲL/9`3"{vbiٯٯxn?z! c~4Rn诉YT"uҼ>~D"YPH#}i=`jjDN7˫iGL>9 vU>5k Y,~Y||sv{iwlq[Ww 0}Uo-z oufΧݍ[TG]( vR3۟=\h~Dgr$׼zʲcMyUFS|?GȨk ))oϩN"O&ڹ݉Kԃ?m|n>-P|@?a=''X>?73 dz AN5D;H'l> 3S}c{o\wp/<^M`p2d-6q4E17~)9h%HEL${zE-}6|Ie)ߺ*MH,a c:8<<2vŚ \hifq[v]c!A'\a~vbzUYLqې4koh-w.:GرPljc$O;zgu&|Û7:ۨη5EVbڅJ PL D44=Ԅ%(jB m9_ q1)A#\L&b{ic*@8)K(&7\'N58nV,Gh$ vV]g N)lRˉ/9#@X&".?-m yڀ{Ku$\YDŽ!o3l cG&wѯYbHP&לےE"8n o7X⹭ qjV0߿T``(t(i5pdRv=[DbsTdQyb%vL5PrcVs#˹x>/NXgT)Q7Mbֳ(V7 :Зɚ1>ZC+R`~͒ @ իQPi'6[b9{d11G*)SdoNf="9c"һ)lH#O葯QO DHRz).%į HMZ;Lg 3{ jIa-MVA/Kae1XW^(W`W6Do|3E'ĨUt MJEz,IYX>.lf}4H9XE1K)t{Wu?|wÇO^ IVAVKҎ܃ =7#DB`ijhFd# ;uA}TKB6dmfD>Ӌɯg5?:3kFC#&AFbo'}༖NRp1ԌqdpnFb&}eM$.W:D N7Rd#!fF-%y6kz/wmfm./͜%ٱڎMl |$WWTbfܐm`B~_׀áJ>"ՠd[#X\XRh*x{pX3Y V&v{f݉O(^}ZuT)ZRdHR~Ҵr Ft0UM~AŬ L6*o=3cnh|yǝ嶪H$K=om\ê9.WOF x(Ju[gȧ%I*;(L?g s\ ر$GowuUܵ$N̾Hˬv5<3צ.>g+ `liOs*n׳y4@'0dgj+s"6.^S\-:]~aܧR$ ЦJF8JY9i}'eK iW{6z[am hw8(oƋgfMJ^e,Chy[|,hOz=qͯSc =#7tKQ {rBND0` k;ȃlг51&GSoCΪ37g$aVދ ;f=BQ0\h]J?$LOH[%(oJ\ų37Oٖk?G*)XfKNjNxv0B<>6D[k%N=Y@zT0P>'5rm얉䌈F2%EWjݦB@=)Uړ$M$%^`9s|W:#IZ\YPڝ=)bm&S <ZAq+$9yo٦>GaJ'>zZzZ9caD #~=ϗ@ [Ky vvqGaGomm rdJv{ #ckο@ ۹ȫ#We4$FFG\1dA^Fa6^z[˵,Ia.k. |&$@p$f|v/Y^=Sբei?;t℆B}Md7DjLOU! NY"B3Y>c0CfQ((|,*0xYR %68lhuX{lZ5b0tGL2Xt0sQmBOtŽ܄fZa#LY3+$ێCgvmYM('2L{0FYQ=Gv E@:ʍWwdae.}A8\dJa9r ;R9 P},JAWu s붚3 rYvZ%Civxݥ&*M$Nb6u\LSKx1^<^f`ي/=b"mc!_-7o÷/?WŞYd/w{q?]LռI6!> ZYS ,ѝV\юj:ӑL%ѡI䠨W!!ʘ&kQ1iȷ'Cp8N@WM3bC_ c#@B!,ܖ5c{G9UkU+ڦ\A/ m` .]3T;9YP-ukxUɁk؍V&A^o)#" ֞u<--@I(m쏟jT$LgEԸ ݇} =%<1I?&lBoN_TRL$RmKߗnwzF"xnj9\͕gƁھ " ӷǯđd}QumD LjnǙ/|8W'A Wg.pmTķ#*o^+1 F_IN*w=^/dp}\5sdە'(;3n9ֻis:_Rjek2ۚηrڷDQ3똼ZQY]ɰFy(%: @w׍ Rb)wF맚ՈUJ(oSfsk&2\sc9Zh$\Q26M, 2gndO'4I%K0(2'u\Y)ZTC/1-+j,$5w'зwhV(7+QRZ$^Ňw'/%G_B`dUL/("_c40W`iU TQET:xy"-S#>򾵻{:;|$wk=(JX"ik"Y# Hўq#"3@RR;9=nWdf48_ ݧǐ@ 2h ɋ"hcIƏwlSJl+FM/ m *_%+0ѓɦVQЖpс܁SBS-MGȅ{uQ(Z,GC|2>23pX#!2DIL6I[F! pLEд td(As %T%THqɅ"s rNo11RjȣmnvWbQJ/ b~Uql D9;䥟1tY)tn8p=c2dWkoٔXւ*D3.\Sy)#C2pr\QZW&&=̎}E6j^#MRjd +IJ6 {3Ԑ[t(9nP\^FVKϬsMIBB nMm q78ʣ/(h5a74p75W#oOjXYkW|'ҐMj9+;Bj'%՜ ;iI23O r;´̋].!"MȺ7r%H786T \Wџߡ({uNlw'PrQOM1F_&Y@~e϶(l(^ŃpyyRTq 9:.(h* ~ X0v3Gbr@I}wABg̭,GVߎkj[D^IB9+!-{xd7| z(bά @4r'w9!SVL#[\G!cbQZf0#k/oMlRfh=fLZ 6SQ ZӍ$@ыKVn a.Shl?y´) @c#;"}00;l(du9AR8Of;51xƜ;|EQaTK-.XW_HiSG2 ( m˅:q` .&3jAh)L63%`_ lt́aHT:rvP#@h!T>?_QAϔ)s# 8ce쁿G>/،%TDqC/6耥.g4sc[? ީ;C| Bf+CJ1: ⿌ ;\Uuk3ă`x3 Vu߽c@iCe@[b4K\`%DLР:jֈɚ1TE8RYJ)C+4 `N_7ck9!+?aI6Χ /'Ӽ$Բ{؟QIN1{`."FTQ" Hr( \:R qnV;rB2עdXUF7Gbl~3͇Qw@c խr;!]4Pm*&"DS.jq< R.$I"8+S/c% ޔ. ̷Nf |RDi\ Hw,3qf 3JC]qΫPV:^ӳF''oӝucکm}Az0jnhsd-*"IXPᄆ<9XQULTbG9?ykcrH H=[lç<2 %0<(4f<:2\jErtR@6[0Mom3Jh3f(D'U@Hd#=i\̑)N8g  SU\%j%fGeRR638VX& :#HaV&Lj7!`5SKϚ9\5qRJ;.Lbg@՝PS`m\!wַl]>NkVQ89 >219o1 U1!{̉ZY!!1}KHS7: ʭ},'% kEH:jvgI>bˉ2!8PKo'eG,X\EX#_lUW4M<7D'Je&"12\ JI8p8^ #}@}Cpė戲gwFU3ㆎ&ֹ.'+cxCЪhpTCr\ )6~,㫏?O+Ԕ~}u^}pK_4UP*s-gsuY'KE} ,ow[$U4W㹩A>1A}:EHv*ץyYyw?vOHy-|ՉnA(Բ8)eC(ZNb.`;-S.rIl_;xx͍̭n7۹!lș5k); '|rr“0m;m3U&=YJvH͘Ũ$gMI xޖL}Sz%Ug}٬ҿ@D3+&<{G΋?K |3_7O"J_5C^ҐLBAABz9k8 Ͼ3;afW`\7%s^Ӑ`Vs&ڪ{h 狖_^ VF]6vѶaxr[i:2bޚ殓~q]o֯Rk 4_}yB9OF=dݝ}w|Gx0# P-l5< -zqvUiiL1ő@ިk8Î^[])x}׍Os&繁YE1.Vlr!Gjw*I, pn '[%8S*d'E˝%סq=T*l[k|^W-uvhu]U, 8°FI37`'I[? qE9I-9VC/!r؊ʴ4_vŶ6nnEH+ |J Ybd@,yN v ?5IjwF׶)% pʣ3'm!1QC`">>xwl`v{% R8 =|]E>P)84t:o*0E9N u,!l}ṛ"~gbLiq'!n!>|5X]"li }w3 WEj~i54-b4YCf=yƪ2r8D|<-fXxy?J`+KwGc94\+#Ҳo#a#(Q3Ȳ6KI;)BԠƦ\RH/\@fwCrR T8 9'ۀ4HA o8 ti³;?.NX2z8tDVHuɦ?]5]*N߇3gYaQ-Qo\%rRÊuF JS5;b)=Z{Ե +żrJ^[ե\y3.K6 (ghK-Z#F(`EdȾ?tp"GUP@07[Dri3n u3n&;̭*?Lo#_oӳ_ǻr|zn>nOT8hHւ;{?MYhpVRyߵ P@]\k)a󀼯^`ˉU" a/6>&bQ9QlmT5rB5R%mO2FZ}ïw|Aͪr о @3aI"NN+^PtvzyO a$L)c085(ZܑW͗3)JB Bp4x=* F*OJOؑ4by@WO{ݣyNW&s[Yw.4Fl)EhۏГ42e>U#KOʔv$'ڢJE^ʺfѢ% @b . Ii!K[mMO[G*NcB&dJdK/f਺$H)!w i_~T΋ȎKߓGU ] `0>S~qQEk<|OOakr/Z9Y--Lc? ơ~|SRJA'Tg˛ :o0er hިs >ئUq' jUPQAd8޲9~"竀)(OTI5).qm8;Sgg*B7">V3cs`YjkCN8Q2 w_knr ^U6#ՑR͍h*A,U=<^_Ƿh6@F+$ٴ l%ܪ{ޮ#?" ս 5/hBvą  #aEG@UhSє*-/R1bĊ8GJ$j 7pg14>Y1_bmr f蝜k̗^(& H~/GHd3\"\0u,Ci ]rovy_x М:lDͨ1'lLV mAU l|'q'@,4O5As߾qR0$qg^&MP; (bF))4j*_Pc%څ~43T{oqtYGx+ ^5Eм5ŠUFߐp`tU %ƞIC,H4_@Y:2 9(osr}x,a%vd Nk\R2@>ClDÅe t.JA4GQBq=!h+l\$٤щ sMr>D0ժ&g41RdG:Է&@bB_dhRHV7LIƌ<r9ƈ'Zhzl9G͕6YVT/&G?߉7i!)8oyi}Xp]0c>֚1%PWCC3)|AA,B) 1Aԝ\J?6C͍gGf}1Qm+qݛ$TjP/>2֥ JQD+33ߋW!r%V.`nF\ [ YIV]?۳oYҿ;ʘN'uĊ5":מ ZU?l]|r%o\ 7DqF,P-5{ЎOgFT> *(<>5g|Q](sNઘX=iVKX5/\H!r[rTdC6&Ҧ6%4j;NV(D W $favPKhN=B7bR) ;>&'sJ l-k|2/aPNgQ}dVq!5!ltX!Mѳ!,FbpY]h#O+d/VZ0EI lEX\IS=ijt@;ɣs* *t셷 (SmGP1}~>rdtKekۘp;Ȫㅫ;  #J% w~LRxQ^^V5 VwI{{6ߕ޴Ĭ;c>c$GÏ)*iv4xq;_NSL)zH lHﶥ~MB L|Bg:[eĐg^ŠkCE&XTD(+ƪ S* g- (~#@^k:d"JN]$2a K *i.I''E Po@/+ /8a,fg/bZ|즘'mmNy$NxoxBpݽ/7ڥGZng8*V mW`^T7&?{OOvUC]9j6B\:W_W<{z${C({fGِI|2 x)d6o5Ȟpɾ%9^;˛mx'ր/;Ť_Jd;p=ٻ÷OϘ` sqV@f R92*A$+%1/ !Y1%>OJC.QR`S?ǤΒ6D+#jJ g,)1?,CЍxhתX(`.@=!\謾:%ƕ됒u:8ue7r* (|d@o z \Y2$c=8Ġz#=PPLL.ޠ-a7H$BwN&5Ak-I|Dҫuu`σ;˫綂kz,sHea((Giu!vJoǂSiVZ#[yOŅٟ8E͟Qr|e¡y+YvT4&YL<t,EH-!#Vl}"E!TM|)W垬pK!8AF"^UH|H7ȼY㼥ᦤ(ǨIr*8vw8] 1lp޳'#0{N]dfP{԰!4bxYUAp7a369ݳx(}̾84@Ew]U0Kmr$> ~Ok/m>}k v:qj@ΐkPnDAryA¿9 @0N &*"U"zՆ`q#-pnqI1`GRRgyu}4Zq4ӻAwEdôNx}*XTt2ȷD[!yHo/Š(ؽbA D (Gch/,z5ѷsZxZ`]Jg2`o09 b~WehUT`.-Q'(U$nڎ ޠ%҉ Kt8]ptsP}z[E-?fZs6iMCn[oڛ[삎j_(ķ%W3T1A ]9Px-oi[!ds斘1rR2A><r1:S5Đs*4XN;DC2=S*1w P}mb ǫj9vӝ/n"Kי!:U +ͬY {Vb@vC(dF-(9&DZF9Tf9d(~A!QP)0ݮw$.u i6.g#dt .I*`CjM6oEw.;HbY\,$y+?C߬iVu-VQ?4q i{Ipl1dFxs[)|T?TVL!`]%`Bqԫ`RsJ_+F)[=aJxڐ8w wzT%~,8(vUJt\ [l@:G8?QG]V_(d t]&6:0(Qٌ1xߨȈ4v/k:+p!W?4ve<P _$ا+^l _$1-hYsDA =Z&<)Uͩ8L.l m~|1_/~|ޘ<@FzM~˛5p#˖ߛ)fsVcn2ѩByI(67cS5i=u$E[I}QZI'!Әj5-g$BطHi_RS  ȩ٥T뎏\'iT+-%C5%U 5Gy`c*<ߜv:vUKr"oͻI[s$yذu<\xLLcS'!ƿA/_x W~M%hB+˅,,C1"/nO nU^[1IGb>0$EҬJcFU) BEeqfwvc⦑I,״GWi\B@Rm~^2HS r#PFg䊏Nھ\ӍϱOFp/% (=/JЄ &?jI>b)x?l-kg(Bک!vJPk yȁF [vDmM $40_ydBZ[䒲;xP3,k5ElUOXHtΐѓT'M~v/*NDpTc)a~ Nc?x3`}=:׉Q%#Y#>"yE !Or{mUIL_̛F[]ן(y1h'Gjmy> @Gy1Z]ޛFWSؽ2&4i3D<"_7BZ%\WTrH66 :O ?d& qVL`g:ЧOwC?v\ +]hYwR6ԶэdQxO0Ξns`l@ 8TYZ<,@Zh 9Ù9dTpmH## $2mܟ\O~&^RQpl9F0lyS$߉/?B\sLH/x4hP%\ތ @ =*[Kmd.EbGpW3 ^,կ{Ev&Ju :g[#(dTJ6UK 8`.QW gr _%_RNӾ.Lt.lNjA ԟiCY+OeHL%`}w0u|2%:e ^$l7BSHllv .k&(Dgu,q?SȬNPۅHˠ闔ba.)HWٻw'og'G'grs)Tcqwߝk GPVP, ݧ*9֤ sro%N/)$ Ȕe\L)iuZR,nݺM)ͳ㓓`?B7ejaW2HmN%U,iKunQM7m989>>,c-DL4-6hQfqa5:l%n72-sk&v`d? KVW5ZѯGfghj|tW n e 3&|*$+nsv Hw~hIãl5dYG#洯Aʹjg};_'~(5`4s#MKQQL/KMšO󕸛%R33{ d2E~9+"xُ" 17'ND(uS!73a< _Um!R}e/P>G (~}#it3/rWƬ ClH ߧ:P!TmE7(R)@(Ë6͘B/ޣR3H'W fG*I :I@eʨ`}Kއݑ4!Pn 62Ҿ4U V-$` %7Y?XH;[7(Aa'H`"٤?gq)IvT !ңGLJi8˱U?sv$ByBQ[/>x3QoGZoC>3^L >?$\zEEnO?&)CLQؽ$i}ugWg 0KwU O%GUP>܎Oݡ6:㏴޿A ߳×GǙ _? ?gy+[xA8e]~ ~b9 x#sYwH! yFBmSfIC!_ʴ6T,gG/_99d)WѴRCEȄqlҖMj!#6Rd@L7A%M+@.#ظI<9 =%$s"v:NiTC 턊m|w#S8mBѨGM7+u$hT:u& jR.T&>: do:st|z˅I^^.6Ջ*| 2/K@)?wz:y~b 7W\m$ϓxTx1ц}d?`$%nPTP)rT.s^!Y^\\ʫj2p~y$}<ч9wLeSqz#^FCVvhV#bx̪nQd(XpUN^֙e T4C J `愉7^#Ųrt2謗w3X$Wy^bR S1>{Nre&XKf|*?!Τ%z{N H# C׃*07070100000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000b00000000TRAILER!!!,Lo;V4 ҌsKc3)qIKh! ҈ Ծ YZ