openCryptoki-3.23.0-150600.3.14.1<>,40i{qyp9|L):0>Y- nQͲ!uMU CwhnO?IG8!Ib뫲mj͈"9aXkKqH66W;Ekú{k.x8+\/{ƲN ]-R.OGc!xD .Nms WsJ7H0n?Q&<H85.nrM(xGIKR1ng%>V8r" ^C0~9:q>Ip?`d $ qlp| !'  (E<E E PE dE !)E !xE"E#E%Z%E&&%'%*%(+8+=9,=:0U==>? @FG4EHHEI\EXY\E]E^bcd0e5f8l:uLEv`wHEx\Eyp^z\CopenCryptoki3.23.0150600.3.14.1An Implementation of PKCS#11 (Cryptoki) v2.11 for IBM Cryptographic HardwareThe PKCS#11 version 2.11 API implemented for the IBM cryptographic cards. This package includes support for the IBM 4758 cryptographic coprocessor (with the PKCS#11 firmware loaded) and the IBM eServer Cryptographic Accelerator (FC 4960 on pSeries).i{qys390zl35SUSE Linux Enterprise 15SUSE LLC CPL-1.0https://www.suse.com/Productivity/Securityhttps://github.com/opencryptoki/opencryptokilinuxs390x if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in pkcsslotd.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi # autobuild:/work/cd/lib/misc/group # openCryptoki pkcs11:x:64: # openCryptoki pkcsslotd:x:64: getent group pkcs11 2>/dev/null || /usr/sbin/groupadd -g 64 -r pkcs11 2>/dev/null || true getent passwd pkcsslotd 2>/dev/null || /usr/sbin/useradd -g pkcs11 -r pkcsslotd -s /sbin/nologin -d /run/opencryptoki 2>/dev/null || true /usr/sbin/usermod -a -G pkcs11 root# Symlink from /var/lib/opencryptoki to /etc/pkcs11 if [ ! -L /etc/pkcs11 ] ; then if [ -e /etc/pkcs11/pk_config_data ] ; then mv /etc/pkcs11/* /var/lib/opencryptoki cd /etc && rm -rf pkcs11 && \ ln -sf /var/lib/opencryptoki pkcs11 fi fi /sbin/ldconfig [ -z "${TRANSACTIONAL_UPDATE}" -a -x /usr/bin/systemd-tmpfiles ] && /usr/bin/systemd-tmpfiles --create /usr/lib/tmpfiles.d/opencryptoki.conf || : if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in pkcsslotd.service ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable pkcsslotd.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop pkcsslotd.service ) || : fiif [ -L /etc/pkcs11 ] ; then rm /etc/pkcs11 fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in pkcsslotd.service ; do sysv_service="${service%.*}" rm -f "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart pkcsslotd.service ) || : fi fi Vb nX YXِ`X@H@x]b<$<2+#]b!);eyd x]bA큤AAA큤A큤A큤AAAAAAAAAAAAi{qvi{qvi{qvi{qvi{qvi{qvi{qvi{qvi{qvi{qvi{qvi{qwi{qwi{qwi{qwi{qwi{qwi{qwi{qwi{qwi{qwi{qvi{qvi{qvi{qxeeei{queeeeei{q/ei{qseei{qvi{qvi{qvi{qvi{qvi{qvi{qvi{qvi{qvi{qvi{qvi{qvi{qvi{qvi{qvi{qvi{qvi{qvi{qvi{qvi{qvi{qvi{qvi{qvi{qvi{qvi{qvi{qvi{qvi{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-3.23.0-150600.3.14.1.src.rpmconfig(openCryptoki)group(pkcs11)openCryptokiopenCryptoki(s390-64)user(pkcs11) @@@@@@@@@@@@@@@@@@@@@    /bin/sh/bin/sh/bin/sh/bin/sh/usr/sbin/groupadd/usr/sbin/useradd/usr/sbin/usermodconfig(openCryptoki)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.2)(64bit)libc.so.6(GLIBC_2.2.3)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.2)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.33)(64bit)libc.so.6(GLIBC_2.34)(64bit)libc.so.6(GLIBC_2.38)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.7)(64bit)libc.so.6(GLIBC_2.8)(64bit)libc.so.6(GLIBC_2.9)(64bit)libcap.so.2()(64bit)libcrypto.so.3()(64bit)libcrypto.so.3(OPENSSL_3.0.0)(64bit)liblber-2.4.so.2()(64bit)libldap_r-2.4.so.2()(64bit)libudev.so.1()(64bit)libudev.so.1(LIBUDEV_183)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)systemdsystemdsystemdsystemd3.23.0-150600.3.14.13.0.4-14.6.0-14.0-15.2-14.14.3i{Khg+Z@ff@epeem@e 0@dp@cc=@ccc6@bb@b; aqV@a ``Ȗ@`+`` l_"^!@]]ʞ]@]nU\f\&@[[@[_ZZw@ZY.@YX@X@X@X~@X2@W@WE@W@WW^@WEW@V<@VqU@U@U#U#U#Tp@nikolay.gueorguiev@suse.comnikolay.gueorguiev@suse.comtabraham@suse.comnikolay.gueorguiev@suse.comnikolay.gueorguiev@suse.comnikolay.gueorguiev@suse.commeissner@suse.comnikolay.gueorguiev@suse.comnikolay.gueorguiev@suse.comnikolay.gueorguiev@suse.comnikolay.gueorguiev@suse.comnikolay.gueorguiev@suse.comnikolay.gueorguiev@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.comkukuk@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.comjengelh@inai.dempost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.comjjolly@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.comjjolly@suse.comjjolly@suse.comjjolly@suse.comjjolly@suse.comcrrodriguez@opensuse.orgcrrodriguez@opensuse.orgcrrodriguez@opensuse.orgp.drouand@gmail.com- Applied a patch (bsc#1257116, CVE-2026-23893) * openCryptoki-SLE15-SP6-CVE-2026-23893.patch- Applied a patch (bsc#1248002) * ocki-3.23-PKCSSLOTD-Remove-the-use-of-MD5.patch - Added riscv64 to openCryptoki_64bit_arch - Updated the patch * ocki-3.23-remove-make-install-chgrp.patch- improve handling of user/group. use existing user/group if they exist. create user/group if not (bsc#1225876)- Amended the .spec file accorinding to the recommendation in (bsc#1225876)- Updated the .spec file (bsc#1225876, bsc#1227280) * Amended for group %{pkcs_group} and user pkcsslotd * Copying example script files from /usr/share/doc/opencryptoki to /usr/share/opencryptoki (policy-example.conf and strength-example.conf) in case that there is 'rpm.install.excludedocs=yes' set in the zypper.conf(zypp.conf)- Upgrade openCryptoki to version 3.23 (jsc#PED-3360, jsc#PED-3361) * EP11: Add support for FIPS-session mode * Updates to harden against RSA timing attacks (bsc#1219217,CVE-2024-0914) * Bug fixes - Renamed ocki-3.22-remove-make-install-chgrp.patch to ocki-3.23-remove-make-install-chgrp.patch- provide user(pkcs11) and group(pkcs11)- Amended the .spec file for pkcsslotd (jsc#1217703) * Renamed the patch ocki-3.21-remove-make-install-chgrp.patch to ocki-3.22-remove-make-install-chgrp.patch- Upgrade to version 3.22 (jsc#PED-3361) * openCryptoki 3.22 - CCA: Add support for the AES-XTS key type using CPACF protected keys - p11sak: Add support for managing certificate objects - p11sak: Add support for public sessions (no-login option) - p11sak: Add support for logging in as SO (security Officer) - p11sak: Add support for importing/exporting Edwards and Montgomery keys - p11sak: Add support for importing of RSA-PSS keys and certificates - CCA/EP11/Soft/ICA: Ensure that the 2 key parts of an AES-XTS key are different * Bug fixes- Update to version 3.21 (jsc#PED-3360, jsc#PED-3361) * openCryptoki 3.21 - EP11 and CCA: Support concurrent HSM master key changes - CCA: protected-key option - pkcsslotd: no longer run as root user and further hardening - p11sak: Add support for additional key types (DH, DSA, generic secret) - p11sak: Allow wildcards in label filter - p11sak: Allow to specify hex value for CKA_ID attribute - p11sak: Support sorting when listing keys - p11sak: New commands: set-key-attr, copy-key to modify and copy keys - p11sak: New commands: import-key, export-key to import and export keys - Remove support for --disable-locks (transactional memory) - Updates to harden against RSA timing attacks - Bug fixes - Amended a new patch to fit the version 3.21 * ocki-3.21-remove-make-install-chgrp.patch - Removed the old patch for the version 3.20 * ocki-3.20-remove-make-install-chgrp.patch- Updated package to openCryptoki 3.20 (bsc#1207760, jsc#PED-3376, jsc#PED-2870, jsc#PED-2869 ) - Removed the following obsolite patches: * ocki-3.19.0-0001-EP11-Unify-key-pair-generation-functions.patch * ocki-3.19.0-0002-EP11-Do-not-report-DSA-DH-parameter-generation-as-be.patch * ocki-3.19.0-0003-EP11-Do-not-pass-empty-CKA_PUBLIC_KEY_INFO-to-EP11-h.patch * ocki-3.19.0-0004-Mechtable-CKM_IBM_DILITHIUM-can-also-be-used-for-key.patch * ocki-3.19.0-0005-EP11-Remove-DSA-DH-parameter-generation-mechanisms-f.patch * ocki-3.19.0-0006-EP11-Pass-back-chain-code-for-CKM_IBM_BTC_DERIVE.patch * ocki-3.19.0-0007-EP11-Supply-CKA_PUBLIC_KEY_INFO-with-CKM_IBM_BTC_DER.patch * ocki-3.19.0-0008-EP11-Supply-CKA_PUBLIC_KEY_INFO-when-importing-priva.patch * ocki-3.19.0-0009-EP11-Fix-memory-leak-introduced-with-recent-commit.patch * ocki-3.19.0-0010-p11sak-Fix-segfault-when-dilithium-version-is-not-sp.patch * ocki-3.19.0-0011-EP11-remove-dead-code-and-unused-variables.patch * ocki-3.19.0-0012-EP11-Update-EP11-host-library-header-files.patch * ocki-3.19.0-0013-EP11-Support-EP11-host-library-version-4.patch * ocki-3.19.0-0014-EP11-Add-new-control-points.patch * ocki-3.19.0-0015-EP11-Default-unknown-CPs-to-ON.patch * ocki-3.19.0-0016-COMMON-Add-defines-for-Dilithium-round-2-and-3-varia.patch * ocki-3.19.0-0017-COMMON-Add-defines-for-Kyber.patch * ocki-3.19.0-0018-COMMON-Add-post-quantum-algorithm-OIDs.patch * ocki-3.19.0-0019-COMMON-Dilithium-key-BER-encoding-decoding-allow-dif.patch * ocki-3.19.0-0020-COMMON-EP11-Add-CKA_VALUE-holding-SPKI-PKCS-8-of-key.patch * ocki-3.19.0-0021-COMMON-EP11-Allow-to-select-Dilithium-variant-via-mo.patch * ocki-3.19.0-0022-EP11-Query-supported-PQC-variants-and-restrict-usage.patch * ocki-3.19.0-0023-POLICY-Dilithium-strength-and-signature-size-depends.patch * ocki-3.19.0-0024-TESTCASES-Test-Dilithium-variants.patch * ocki-3.19.0-0025-COMMON-EP11-Add-Kyber-key-type-and-mechanism.patch * ocki-3.19.0-0026-EP11-Add-support-for-generating-and-importing-Kyber-.patch * ocki-3.19.0-0027-EP11-Add-support-for-encrypt-decrypt-and-KEM-operati.patch * ocki-3.19.0-0028-POLICY-STATISTICS-Check-for-Kyber-KEM-KDFs-and-count.patch * ocki-3.19.0-0029-TESTCASES-Add-tests-for-CKM_IBM_KYBER.patch * ocki-3.19.0-0030-p11sak-Support-additional-Dilithium-variants.patch * ocki-3.19.0-0031-p11sak-Add-support-for-IBM-Kyber-key-type.patch * ocki-3.19.0-0032-testcase-Enhance-p11sak-testcase-to-generate-IBM-Kyb.patch * ocki-3.19.0-0033-EP11-Supply-CKA_PUBLIC_KEY_INFO-with-CKM_IBM_BTC_DER.patch * ocki-3.19.0-0034-EP11-Fix-setting-unknown-CPs-to-ON.patch * ocki-3.19.0-0035-Fix-compile-error-error-initializer-element-is-not-c.patch - Reworked ocki-3.19-remove-make-install-chgrp.patch to fit the current version of the package and renamed it to ocki-3.20-remove-make-install-chgrp.patch.- Added patch for compile errors * ocki-3.19.0-0035-Fix-compile-error-error-initializer-element-is-not-c.patch -- Changed spec file to use %autosetup instead of %setup.- Updated the package openCryptoki 3.19.0 (jsc#PED-616, bsc#1207760), added the following patches: * ocki-3.19.0-0001-EP11-Unify-key-pair-generation-functions.patch * ocki-3.19.0-0002-EP11-Do-not-report-DSA-DH-parameter-generation-as-be.patch * ocki-3.19.0-0003-EP11-Do-not-pass-empty-CKA_PUBLIC_KEY_INFO-to-EP11-h.patch * ocki-3.19.0-0004-Mechtable-CKM_IBM_DILITHIUM-can-also-be-used-for-key.patch * ocki-3.19.0-0005-EP11-Remove-DSA-DH-parameter-generation-mechanisms-f.patch * ocki-3.19.0-0006-EP11-Pass-back-chain-code-for-CKM_IBM_BTC_DERIVE.patch * ocki-3.19.0-0007-EP11-Supply-CKA_PUBLIC_KEY_INFO-with-CKM_IBM_BTC_DER.patch * ocki-3.19.0-0008-EP11-Supply-CKA_PUBLIC_KEY_INFO-when-importing-priva.patch * ocki-3.19.0-0009-EP11-Fix-memory-leak-introduced-with-recent-commit.patch * ocki-3.19.0-0010-p11sak-Fix-segfault-when-dilithium-version-is-not-sp.patch * ocki-3.19.0-0011-EP11-remove-dead-code-and-unused-variables.patch * ocki-3.19.0-0012-EP11-Update-EP11-host-library-header-files.patch * ocki-3.19.0-0013-EP11-Support-EP11-host-library-version-4.patch * ocki-3.19.0-0014-EP11-Add-new-control-points.patch * ocki-3.19.0-0015-EP11-Default-unknown-CPs-to-ON.patch * ocki-3.19.0-0016-COMMON-Add-defines-for-Dilithium-round-2-and-3-varia.patch * ocki-3.19.0-0017-COMMON-Add-defines-for-Kyber.patch * ocki-3.19.0-0018-COMMON-Add-post-quantum-algorithm-OIDs.patch * ocki-3.19.0-0019-COMMON-Dilithium-key-BER-encoding-decoding-allow-dif.patch * ocki-3.19.0-0020-COMMON-EP11-Add-CKA_VALUE-holding-SPKI-PKCS-8-of-key.patch * ocki-3.19.0-0021-COMMON-EP11-Allow-to-select-Dilithium-variant-via-mo.patch * ocki-3.19.0-0022-EP11-Query-supported-PQC-variants-and-restrict-usage.patch * ocki-3.19.0-0023-POLICY-Dilithium-strength-and-signature-size-depends.patch * ocki-3.19.0-0024-TESTCASES-Test-Dilithium-variants.patch * ocki-3.19.0-0025-COMMON-EP11-Add-Kyber-key-type-and-mechanism.patch * ocki-3.19.0-0026-EP11-Add-support-for-generating-and-importing-Kyber-.patch * ocki-3.19.0-0027-EP11-Add-support-for-encrypt-decrypt-and-KEM-operati.patch * ocki-3.19.0-0028-POLICY-STATISTICS-Check-for-Kyber-KEM-KDFs-and-count.patch * ocki-3.19.0-0029-TESTCASES-Add-tests-for-CKM_IBM_KYBER.patch * ocki-3.19.0-0030-p11sak-Support-additional-Dilithium-variants.patch * ocki-3.19.0-0031-p11sak-Add-support-for-IBM-Kyber-key-type.patch * ocki-3.19.0-0032-testcase-Enhance-p11sak-testcase-to-generate-IBM-Kyb.patch * ocki-3.19.0-0033-EP11-Supply-CKA_PUBLIC_KEY_INFO-with-CKM_IBM_BTC_DER.patch * ocki-3.19.0-0034-EP11-Fix-setting-unknown-CPs-to-ON.patch- Updated spec file to set permissions on /etc/opencryptoki/strength.conf to be owned by root:pkcs11 with permissions of 640. (bsc#1205566)- Upgrade to version 3.19.0 (jsc#PED-616) + openCryptoki 3.19 - CCA: check for expected master key verification patterns at token init - CCA: check master key verification pattern of created keys to be as expected - EP11: check for expected wrapping key verification pattern at token init - EP11: check wrapping key verification pattern of created keys to be as expected - p11sak/pkcsconf: display PKCS#11 URIs - p11sak: add support for IBM specific Dilithium keys - p11sak: allow to list keys filtered by label - common: add support for dual-function cryptographic functions - Add support for C_SessionCancel function (PKCS#11 v3.0) - EP11: add support for schnorr signatures (mechanism CKM_IBM_ECDSA_OTHER) - EP11: add support for Bitcoin key derivation (mechanism CKM_IBM_BTC_DERIVE) - Bug fixes + openCryptoki 3.18 - Default to FIPS compliant token data format (tokversion = 3.12) - Add support for restricting usage of mechanisms and keys via a global policy - Add support for statistics counting of mechanism usage - ICA/EP11: Support libica version 4 - p11sak tool: Allow to set different attributes for public and private keys - Replaced ocki-3.17-remove-make-install-chgrp.patch with an updated version named ocki-3.19-remove-make-install-chgrp.patch to fit the current state of the source. - Removed the following obsolete patches: openCryptoki-sles15-sp4-EP11-Dilithium-Specify-OID-of-key-strength-at-key-ge.patch openCryptoki-sles15-sp4-EP11-Fix-host-library-version-query.patch ocki-3.17-EP11-Fix-C_GetMechanismList-returning-CKR_BUFFER_TOO.patch- Added ocki-3.17-EP11-Fix-C_GetMechanismList-returning-CKR_BUFFER_TOO.patch for bsc#1202106. One test of the gen_purpose test cases fails with C_GetMechanismList #2 rc=CKR_BUFFER_TOO_SMALL" error on the EP11 Token.- Made the following changes for bsc#1199862 "Please install p11sak_defined_attrs.conf." * Replaced ocki-3.11-remove-make-install-chgrp.patch with ocki-3.17-remove-make-install-chgrp.patch to remove the "-g pkcs11" parameter from the install command in the Makefile * Updated the spec file to include /etc/opencryptoki/p11sak_defined_attrs.conf as a %config file with the necessary permissions and group ownership.- Added the following two patches for bac#1197395. The CKM_IBM_DILITHIUM mechanism does not show up as supported by the EP11 token when an upgraded EP11 host library is used. * openCryptoki-sles15-sp4-EP11-Dilithium-Specify-OID-of-key-strength-at-key-ge.patch * openCryptoki-sles15-sp4-EP11-Fix-host-library-version-query.patch- Upgraded to version 3.17.0 (jsc#SLE-18326) + openCryptoki 3.17 - tools: added function to list keys to p11sak - common: added support for OpenSSL 3.0 - common: added support for event notifications - ICA: added SW fallbacks * openCryptoki 3.16 - EP11: protected-key option - EP11: support attribute-bound keys - CCA: import and export of secure key objects - Bug fixes - Removed the following obsolete patches: ocki-3.15.1-Added-error-message-handling-for-p11sak-remove-key-c.patch ocki-3.15.1-Fix-compiling-with-c.patch ocki-3.15.1-A-slot-ID-has-nothing-to-do-with-the-number-of-slots.patch ocki-3.15.1-SOFT-Fix-problem-with-C_Get-SetOperationState-and-di.patch ocki-3.15.1-Added-NULL-pointer-to-avoid-double-free-for-the-list.patch ocki-3.15.1-SOFT-Check-the-EC-Key-on-C_CreateObject-and-C_Derive.patch ocki-3.15.1-Fixed-p11sak-and-corresponding-test-case.patch ocki-3.15.1-p11sak-Fix-CKA_LABEL-handling.patch ocki-3.15.1-pkcstok_migrate-Quote-strings-with-spaces-in-opencry.patch ocki-3.15.1-pkcstok_migrate-Don-t-remove-tokversion-x.y-during-m.patch ocki-3.15.1-pkcstok_migrate-Fix-detection-if-pkcsslotd-is-still-.patch ocki-3.15.1-pkcstok_migrate-Rework-string-quoting-for-opencrypto.patch- Added the following patches for bsc#1188879: * ocki-3.15.1-pkcstok_migrate-Quote-strings-with-spaces-in-opencry.patch When modifying opencryptoki.conf during token migration, put quotes around strings that contain spaces, e.g. for the slot description and manufacturer. * ocki-3.15.1-pkcstok_migrate-Don-t-remove-tokversion-x.y-during-m.patch When migrating a slot the opencryptoki.conf file is modified. If it contains slots that already contain the 'tokversion = x.y' keyword, this is accidentally removed when migrating another slot. * ocki-3.15.1-pkcstok_migrate-Fix-detection-if-pkcsslotd-is-still-.patch Change the code to use the pid file that pkcsslotd creates, and check if the process with the pid contained in the pid file still exists and runs pkcsslotd. * ocki-3.15.1-pkcstok_migrate-Rework-string-quoting-for-opencrypto.patch Always quote the value of 'description' and 'manufacturer'. Quote the value of 'stdll', 'confname', and 'tokname' if it contains spaces, and never quote the value of 'hwversion', 'firmwareversion', and 'tokversion'.- Added the following patches for bsc#1182726 " p11sak list-key segfault" * ocki-3.15.1-Added-NULL-pointer-to-avoid-double-free-for-the-list.patch Added NULL pointer to avoid double free() for the list-key and remove-key commands. * ocki-3.15.1-Fixed-p11sak-and-corresponding-test-case.patch Note that two hunks that were unrelated to fixing the running code were removed from this patch. * ocki-3.15.1-p11sak-Fix-CKA_LABEL-handling.patch- Added ocki-3.15.1-SOFT-Check-the-EC-Key-on-C_CreateObject-and-C_Derive.patch When constructing an OpenSSL EC public or private key from PKCS#11 attributes or ECDH public data, check that the key is valid, i.e. that the point is on the curve. (bsc#1185976)- Added ocki-3.15.1-A-slot-ID-has-nothing-to-do-with-the-number-of-slots.patch (bsc#1182120) Fix pkcscca migration fails with usr/sb2 is not a valid slot ID - Added ocki-3.15.1-SOFT-Fix-problem-with-C_Get-SetOperationState-and-di.patch (bsc#1182190) Fix a segmentation fault of the sess_opstate test on the Soft Token- Added the following patches for bsc#1179319 * Fix compiling with C++: ocki-3.15.1-Fix-compiling-with-c.patch * Added error message handling for p11sak remove-key command. ocki-3.15.1-Added-error-message-handling-for-p11sak-remove-key-c.patch- Don't require pwdutils for build, dropped long ago and not needed- Upgraded to version 3.15.1 (jsc#SLE-13749, jsc#SLE-13666, jsc#SLE-13813, jsc#SLE-13812, jsc#SLE-13723, jsc#SLE-13714, jsc#SLE-13715, jsc#SLE-13710, jsc#SLE-13774, jsc#SLE-13786) * openCryptoki 3.15.1 - Bug fixes * openCryptoki 3.15.0 - common: conform to PKCS 11 3.0 Baseline Provider profile - Introduce new vendor defined interface named "Vendor IBM" - Support C_IBM_ReencryptSingle via "Vendor IBM" interface - CCA: support key wrapping - SOFT: support ECC - p11sak tool: add remove-key command - Bug fixes * openCryptoki 3.14.0 - EP11: Dilitium support stage 2 - Common: Rework on process and thread locking - Common: Rework on btree and object locking - ICSF: minor fixes - TPM, ICA, ICSF: support multiple token instances - new tool p11sak * openCryptoki 3.13.0 - EP11: Dilithium support - EP11: EdDSA support - EP11: support RSA-OAEP with non-SHA1 hash and MGF - Removed obsolete oki-3.12-EP11-Fix-EC-uncompress-buffer-length.patch- Added oki-3.12-EP11-Fix-EC-uncompress-buffer-length.patch (bsc#1159114) The EP11 token may fail to import an ECC public key. Function C_CreateObject returns CKR_BUFFER_TOO_SMALL in this case.- Upgraded to version 3.12.1 (bsc#1157863) * Fix pkcsep11_migrate tool- Upgraded to version 3.12.0 (jsc#SLE-7647, jsc#SLE-7915, jsc#SLE-7918) * Update token pin and data store encryption for soft,ica,cca and ep11 * EP11: Allow importing of compressed EC public keys * EP11: Add support for the CMAC mechanisms * EP11: Add support for the IBM-SHA3 mechanisms * SOFT: Add AES-CMAC and 3DES-CMAC support to the soft token * ICA: Add AES-CMAC and 3DES-CMAC support to the ICA token * EP11: Add config option USE_PRANDOM * CCA: Use Random Number Generate Long for token_specific_rng() * Common rng function: Prefer /dev/prandom over /dev/urandom * ICA: add SHA*_RSA_PKCS_PSS mechanisms * Bug fixes - Removed obsolete ocki-3.11.1-EP11-Support-tolerated-new-crypto-cards.patch- Added ocki-3.11.1-EP11-Support-tolerated-new-crypto-cards.patch (bsc#1152015) Add support for new IBM crypto card.- Upgraded to version 3.11.1 (Fate#327837) Bug fixes. - Dropped obsolete ocki-3.11-Fix-target_list-passing-for-EP11-session.patch- Added ocki-3.11-Fix-target_list-passing-for-EP11-session.patch (bsc#1123988)- Do not ignore errors from groupadd. If groupadd fails, installation ought not to proceed because files would have the wrong ownership.- Don't hide error messages from the groupadd command. To eliminate a potentially common one, check to see if the pkcs11 group is already defined before trying to add it. - Update the summary for the -devel package. - Changed several PreReq entries to Requires(pre) as a result of the output from spec-cleaner. Removed a couple of obsolete lines. - Removed obsolete check for whether systemd is in use or not.- Upgraded to version 3.11.0 (Fate#325685) * opencryptoki 3.11.0 EP11 enhancements A lot of bug fixes - Reworked the ocki-3.1-remove-make-install-chgrp.patch to apply properly to 3.11, and renamed it to ocki-3.11-remove-make-install-chgrp.patch - Removed obsolete patch ocki-3.5-icsf-coverity-memoryleakfix.patch- Upgraded to version 3.10.0 (Fate#325685) * opencryptoki 3.10.0 Add support to ECC on ICA token and to common code. Add SHA224 support to SOFT token. Improve pkcsslotd logging. Fix sha512_hmac_sign and rsa_x509_verify for ICA token. Fix tracing of session id. Fix and improve testcases. Fix spec file permission for log directory. Fix build warnings. * opencryptoki 3.9.0 Fix token reinitialization Fix conditional man pages EP11 enhancements EP11 EC Key import Increase RSA max key length Fix broken links on documentation Define CK_FALSE and CK_TRUE macros Improve build flags - Dropped obsolete patch ocki-3.8.2-Fix-Hardware-Feature-Object-validation-and-tests.patch - Made multiple changes to the spec file based on spec-cleaner output. - Added an rpmlintrc file to squelch warnings about adding ghost entries for files under /var/lock/opencryptoki/- Added ocki-3.8.2-Fix-Hardware-Feature-Object-validation-and-tests.patch (bsc#1086678)- Re-enabled ARM architectures now that gcc6 is in SLE15. (bsc#1084617)- Upgraded to version 3.8.2 (fate#323295, bsc#1066412) * v3.8.2 Update man pages. Improve ock_tests for parallel execution. Fix FindObjectsInit for hidden HW-feature. Fix to allow vendor defined hardware features. Fix unresolved symbols. Fix tracing. Code/project cleanup. * v3.8.1 Fix TPM data-structure reset function. Fix error message when dlsym fails. Update configure.ac Update travis. * v3.8.0 Multi token instance feature. Added possibility to run opencryptoki with transactional memory or locks (--enable-locks on configure step). Updated documentation. Fix segfault on ec_test. Bunch of small fixes.- Removed ARM architectures from the build list until gcc6 becomes available for SLES. (bsc#1039510).- Updated to version 3.7.0 (Fate#321451) (bsc#1036640) - Update example spec file - Performance improvement. Moving from mutexes to transactional memory. - Add ECDSA SHA2 support for EP11 and CCA. - Fix declaration of inline functions. - Fix wrong testcase and ber en/decoding for integers. - Check for 'flex' and 'YACC' on configure. - EP11 config file rework. - Add enable-debug on travis build. - Add testcase for C_GetOperationState/C_SetOperationState. - Upgrade License to CPL-1.0 - Ica token: fix openssh/ibmpkcs11 engine/libica crash. - Fix segfault and logic in hardware feature test. - Fix spelling of documentation and manuals. - Fix the retrieval of p from a generated rsa key. - Coverity scan fixes - incompatible pointer type and unused variables.- Added libica-tools to the BuildRequires due to repackaging of libica.- Modified the spec file - Changed libca3-devel BuildRequires to just libica-devel - Check for systemd in the 32bit postun scriptlet.- Upgraded to version 3.6.2 (fate#321451) - Support OpenSSL-1.1. - Add Travis CI support. - Update autotools scripts and documentation. - Fix SegFault when a invalid session handle is passed in SC_EncryptUpdate and SC_DecryptUpdate. - Updated spec file to use libica3-devel instead of libica2-devel.- Upgraded to version 3.6.1 (fate#321451) - opencryptoki 3.6.1 - Fix SOFT token implementation of digest functions. - Replace deprecated OpenSSL interfaces. - opencryptoki 3.6 - Replace deprecated libica interfaces. - Performance improvement for ICA. - Improvement in documentation on system resources. - Improvement in testcases. - Added support for rc=8, reasoncode=2028 in icsf token. - Fix for session handle not set in session issue. - Multiple fixes for lock and log directories. - Downgraded a syslog error to warning. - Multiple fixes based on coverity scan results. - Added pkcs11 mapping for icsf reason code 72 for return code 8. - opencryptoki 3.5.1 - Fix Illegal Intruction on pkcscca tool. - Removed the following obsolete patches: - ocki-3.5-sanity-checking.patch - ocki-3.5-icsf-reasoncode72-support.patch - ocki-3.5-downgrade-syslogerror.patch - ocki-3.5-icsf-sessionhandle-missing-fix.patch - ocki-3.5-icsf-reasoncode-2028-added.patch - ocki-3.5-added-NULLreturn-check.patch - ocki-3.5-create-missing-tpm-token-lock-directory.patch - ocki-3.5-fix-pkcscca-calls.patch- Removed reference to pkcs1_startup from pkcsslotd (bsc#1007081)- Added ocki-3.5-fix-pkcscca-calls.patch (bsc#996867).- Added %doc FAQ to the spec file (bsc#991168).- Added ocki-3.5-create-missing-tpm-token-lock-directory.patch (bsc#989602).- Added the following patches (bsc#986854) - ocki-3.5-icsf-reasoncode72-support.patch - ocki-3.5-icsf-coverity-memoryleakfix.patch - ocki-3.5-downgrade-syslogerror.patch - ocki-3.5-icsf-sessionhandle-missing-fix.patch - ocki-3.5-icsf-reasoncode-2028-added.patch - ocki-3.5-added-NULLreturn-check.patch- Added ocki-3.5-sanity-checking.patch (bsc#983496). - Added %dir entry for %{_localstatedir}/log/opencryptoki/ (bsc#983990)- Upgraded to openCryptoki 3.5 (bsc#978005). - Full Coverity scan fixes. - Fixes for compiler warnings. - Added support for C_GetObjectSize in icsf token. - Various bug fixes and memory leak fixes. - Removed global read permissions from token files - Added missing PKCS#11v2.2 constants. - Fix for symbol resolution issue seen in Fedora 22 and 23 for ep11 and cca tokens. - Improvements in socket read operation when a token comes up. - Replaced 32 bit CCA API declarations with latest header from version 5.0 libsculcca rpm.- Upgraded to openCryptoki v3.4.1 (Fate#319576, 319585, 319592, 319938). - Changed BuildRequires for libica_2_3_0-devel to libica2-devel. - Changed BuildRequires for openssl-devel to specify >= 1.0 Contrary to what the README says, version 0.9.7 isn't sufficient. - Removed the redundant DESTDIR= parameter from the %make_install - Removed the following obsolete patches opencryptoki-run-lock.patch (/var/lock and run/lock are actually the same place) Also reverted the changed to openCryptoki-tmp.conf to match. ocki-3.1_10_0001-ica-sha-update-empty-msg.patch ocki-3.1-fix-implicit-decl.patch ocki-3.1-fix-init_d-path.patch ocki-3.1-fix-libica-link.patch ocki-3.2_01_fix-return-type-error.patch ocki-3.2_02_ep11-token-incorrectly-copied-the-public-key-object-.patch ocki-3.2_03_ICSF-Token-C_SignUpdate-was-sometimes-segfaulting-an.patch ocki-3.2_04_CKA_EC_POINT-is-not-required-in-the-ECDSA-private-ke.patch ocki-3.2_05_icsf_ldap_handles.patch ocki-3.2_06_icsf_sign_verify.patch - renamed: ocki-3.1-remove-make-install-chgrp-chmod.patch to ocki-3.1-remove-make-install-chgrp.patch- Get a new ldap handle for each session opened in the icsf token, once the user has authenticated. (bsc#953347,LTC#130078) - ocki-3.2_05_icsf_ldap_handles.patch - ocki-3.2_06_icsf_sign_verify.patch- Added /var/lib/opencryptoki/lite/TOK_OBJ token directory (bsc#943070) - Added ocki-3.2_02_ep11-token-incorrectly-copied-the-public-key-object-.patch - Fixed two public key object inclusion in EP11 token (bsc#946808) - Added ocki-3.2_03_ICSF-Token-C_SignUpdate-was-sometimes-segfaulting-an.patch - Fixed GPF when calling C_SignUpdate using ICFS toekn (bsc#946172) - Added ocki-3.2_04_CKA_EC_POINT-is-not-required-in-the-ECDSA-private-ke.patch - Fixed failure to import ECDSA because of lack of attribute (bsc#948114)- Fixed BuildRequires: libica2-devel - Added ocki-3.2_01_fix-return-type-error.patch - Changing doc/README.ep11_stdll to unix-style EOL - Added BuildRequires: dos2unix - Removed globbing in %files and specified libraries to include (bsc#942162)- Updated to openCryptoki v3.2 (FATE#318240) - Removed unnecessary patches: - ocki-3.1_01_ep11_makefile.patch - ocki-3.1_02_ep11_m_init.patch - ocki-3.1_03_ock_obj_mgr.patch - ocki-3.1_04_ep11_opaque2blob_error_handl.patch - ocki-3.1_05_ep11_readme_update.patch - ocki-3.1_06_0001-print_mechanism-ignored-bad-returncodes-from-the-cal.patch - ocki-3.1_06_0002-Fix-failure-when-confname-is-not-given-use-default-e.patch - ocki-3.1_06_0003-Configure-was-checking-for-the-ep11-lib-and-the-m_in.patch - ocki-3.1_06_0004-The-asm-zcrypt.h-header-file-uses-some-std-int-types.patch - ocki-3.1_06_0005-Small-reworks.patch - ocki-3.1_06_0006-The-31-bit-build-on-s390-showed-an-build-error-at-in.patch - ocki-3.1_06_0007-ep11-is-not-building-because-not-setting-with_zcrypt.patch - ocki-3.1_07_0001-Man-page-corrections.patch - ocki-3.1_08_0001-Add-a-pkcscca-tool-to-help-migrate-cca-private-token.patch - ocki-3.1_08_0002-Add-documentation-pkcscca-manpage-and-README.cca_std.patch - ocki-3.1_09_0001-Fix-EOL-encoding-in-README.patch- Also create parent directory /run/lock/opencryptoki in tmpfiles snippet if it does not exists.- spec: do not use -D__USE_BSD, a glibc-internal macro which no longer has any meaning.- spec: use %{_unitdir} %{_tmpfilesdir) - spec: call tmpfiles_create macro, if defined in %post - opencryptoki-run-lock.patch, openCryptoki-tmp.conf: use /run/lock instead of /var/lock.- Update to version 3.2 +New pkcscca tool. Currently it assists in migrating cca private token objects from opencryptoki version 2 to the clear key encryption method used in opencryptoki version 3. Includes a manpage for pkcscca tool. Changes to README.cca_stdll to assist in using the CCA token and migrating the private token objects. + Support for CKM_RSA_PKCS_OAEP and CKM_RSA_PKCS_PSS algorithms. + Various bugfixes. + New testcases for various crypto algorithms. - Only depend on insserv if builded with sysvinit support - Remove obsolete patches; merged on upstream release + ocki-3.1_01_ep11_makefile.patch + ocki-3.1_02_ep11_m_init.patch + ocki-3.1_03_ock_obj_mgr.patch + ocki-3.1_04_ep11_opaque2blob_error_handl.patch + ocki-3.1_05_ep11_readme_update.patch + ocki-3.1_06_0001-print_mechanism-ignored-bad-returncodes-from-the-cal.patch + ocki-3.1_06_0002-Fix-failure-when-confname-is-not-given-use-default-e.patch + ocki-3.1_06_0003-Configure-was-checking-for-the-ep11-lib-and-the-m_in.patch + ocki-3.1_06_0004-The-asm-zcrypt.h-header-file-uses-some-std-int-types.patch + ocki-3.1_06_0005-Small-reworks.patch + ocki-3.1_06_0006-The-31-bit-build-on-s390-showed-an-build-error-at-in.patch + ocki-3.1_06_0007-ep11-is-not-building-because-not-setting-with_zcrypt.patch + ocki-3.1_07_0001-Man-page-corrections.patch + ocki-3.1_08_0001-Add-a-pkcscca-tool-to-help-migrate-cca-private-token.patch + ocki-3.1_08_0002-Add-documentation-pkcscca-manpage-and-README.cca_std.patch + ocki-3.1_09_0001-Fix-EOL-encoding-in-README.patch + ocki-3.1_10_0001-ica-sha-update-empty-msg.patch - Project is now hosted on sourceforge; fix the Url - Remove cvs related stuff; tarball is produced by upstream - Use %configure macro instead of manually defined options - Build with parallel support; use %{?_smp_mflags} macro/bin/sh/bin/sh/bin/sh/bin/shs390zl35 1769697657  !"#$%&'()*+,-./0123456789:;<=>?@ABCDE3.23.0-150600.3.14.13.23.0-150600.3.14.13.23.0-150600.3.14.1 opencryptokiccatok.confep11cpfilter.confep11tok.confopencryptoki.confp11sak_defined_attrs.confstrength.confpkcsslotd.serviceopencryptoki.confopencryptokistdllp11sakpkcsccapkcsconfpkcsep11_migratepkcsep11_sessionpkcsicsfpkcsslotdpkcsstatspkcstok_migratercpkcsslotdopencryptokipolicy-example.confstrength-example.confopenCryptokiFAQREADME.cca_stdllREADME.develREADME.ep11_stdllREADME.icsf_stdllREADME.token_dataREADME.tpm_stdllcoding_style.mddoc.mkopenCryptoki-TFAQ.htmlopencryptoki-howto.mdpolicy-example.confstrength-example.confsystem_resourcesp11sak.1.gzpkcscca.1.gzpkcsconf.1.gzpkcsep11_migrate.1.gzpkcsep11_session.1.gzpkcshsm_mk_change.1.gzpkcsicsf.1.gzpkcsstats.1.gzpkcstok_migrate.1.gzopencryptoki.conf.5.gzp11sak_defined_attrs.conf.5.gzpolicy.conf.5.gzstrength.conf.5.gzopencryptoki.7.gzpkcsslotd.8.gzopencryptokipolicy-example.confstrength-example.confopencryptokiccatokTOK_OBJep11tokTOK_OBJicsfliteTOK_OBJswtokTOK_OBJtpmopencryptoki/etc//etc/opencryptoki//usr/lib/systemd/system//usr/lib/tmpfiles.d//usr/lib64//usr/lib64/opencryptoki//usr/sbin//usr/share/doc//usr/share/doc/opencryptoki//usr/share/doc/packages//usr/share/doc/packages/openCryptoki//usr/share/man/man1//usr/share/man/man5//usr/share/man/man7//usr/share/man/man8//usr/share//usr/share/opencryptoki//var/lib//var/lib/opencryptoki//var/lib/opencryptoki/ccatok//var/lib/opencryptoki/ep11tok//var/lib/opencryptoki/lite//var/lib/opencryptoki/swtok//var/log/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:42499/SUSE_SLE-15-SP6_Update/734b43a78ec51d2cf7ee4aedddb9dbff-openCryptoki.SUSE_SLE-15-SP6_Updatedrpmxz5s390x-suse-linux directoryAlgol 68 source, ASCII textASCII text, with very long linesASCII textELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=8cf0ddb506decf381ac2e30b4b4515fe3bf73dfa, for GNU/Linux 4.3.0, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=17d3d39a1e695ef658ef468b0a544da8d14bb5c3, for GNU/Linux 4.3.0, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=d489d1863598768d6ffc2b50422e299e80e062aa, for GNU/Linux 4.3.0, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=146c48d996ff468398b21771da21512ece34eb5c, for GNU/Linux 4.3.0, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=e1b29f6fdd79224894a4e30faf0ade1b312b698f, for GNU/Linux 4.3.0, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=4abcbb3f26c1f083d213c59d9cfaf3dbf1cae47b, for GNU/Linux 4.3.0, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=5cfe10010ae44c2159fac9db8f48eaebe596719a, for GNU/Linux 4.3.0, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=9d63ee452f33354b9505093c40f11686c1da0ade, for GNU/Linux 4.3.0, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=5dbf1aa639d5ffd1e05372da32b3326e76d6a1b5, for GNU/Linux 4.3.0, strippedHTML document, UTF-8 Unicode texttroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)Algol 68 source, ASCII text (gzip compressed data, max compression, from Unix) !+6BPV  RR RRRRRRR R R RRRR RRRRR RRRRRRRRRRR RRRRR RR RRR RRRR RRR RRRR RRRRRRRRR RRRRRRRRRRRRR RR RRRRRRRR RRRRRRRR RR"mBrsystemd-sysvcompatutf-80efce83df7a9644adca5ac6a9b214e77d6b899a6332a14084383355f02ae673a?p7zXZ !t/]"k%N, V!I?0:B`?=`a QߕUJhÀ]v`U!l\P(=_OE")@)N-#0z/lÊ4 qPVD~*:RmYkp/YD߁id֏HsfsQ]R0ܹr-L 8o Gn|g)w/$i0ї(OjÇ8DF@jGF [rZ¢~ !FJͪvp+gMESwi]&LU\iUo(D $4Moy <āN0zYԱTc|2Lj%fAp0iT݂d~^ u(5;qG͒Hqh5¢ Ms,hja#yr 7k{jO\]>8H@i,]9 )Pm@O]d Ue*J%7q,L2ΏrU3*=^]E)Z0nN'4n\G9GE=K- D#|t x19(|IĖ]r+9/&]D$EѤݿ={)fvj=G$He6UVEsKxX_w?8K)bϙ9cތQ, ۹KMp'W q(=auXWf}M1NgYjq:%Z ҷ%h92M}FΙ r=.@ |nPޒh ;Ŧ6ڢ.ٌ,9>5k%{pr590) Εk {˹s)\(J;-Kp [>C'nSP"XBLVЯ+37Ec׌УHM̫>NI@hTD HK}U@`9|)U?SWK|x1醊)o%aeugZٱJD{h{6tZWS.V.3x?4&婈'h,˩!=lрpma7\h(gS+a UBՋ `7e'7S[!?d4F[9'vFC~_7D>BFqX==6.$^3i|8gF`Vc Plb^<R/_bI3 xGL) %xb]+3~uT+Mx\y5OȂx&}{U}ܤ{3/ֺu fQq tՒ`6c~bsd0. TW ~CA`x)gS+b>,GߊN@񏛿LxJS _;DYM`9DH^w kkw84z)XN{*=YZ~sQ/K;?dU7m-Txo2N"+[U'ϛcUDαr{tږ LԖNU؟V9SJ`jU"?lP9w `f9<&t킀.tbz/O Fw~$: I΍l)!z!Vm o|d"N*R[[mRx d(Ȋ Q%3M.yAgT:^ɒrԆ͠OICcdaȋ9>.i~ Dib^͎<{+e"4 U{WYw%8&'>ξXc l8]_> yye fXbx.*66:`q1PTa}86+dĉί]k5OMk%vTWUsA\}sS);9E73#6l)+BAd7(YSҔ_l׭p-x% uM7++|lP ZB{EgDEn8*1P[n ^;O'}rq֐ҮAb$Y4(4=~ї"wgSœ+<&wWC?1/j=0e3쓘ȩ˜LD8F׸'ۉ( @,wikl/c Ϸ᥈|ΏP*9:@V}-%$Ų}s]n5ihx3H4L El$-l"8cQ3ћ5% $9u.]FTX:H" j'ϒ R.CG|FFϕrz.N_9H|:+r%~[1MZ0qC\"mbl3JibWa?Z9axpۀ?{x O`C-2{|<|Qb M7Gz3bR(gv pQV0uMrvz&U(pqpKOЉrxIԃi`P GGtIqzR VqP7O N׍BJ& P]HhgVͽ[,ϫ̈́C DiGqE+<*C )fU CI(Ul E_5Nsͪ/&E"=_M6B/Zxů]"^,=ccQr NoN)%9"pw||B1܌9O 1K6 $ٺj 2 hyT ;7qr^i- iv:h@+Z$o$B̚2WF&o/ߙ{^ rVPuǿ Gl-< dC{O`JÀ;@K.k,zx;aX0$/{+8s˼ s59̕6n|v HDVjd:Wr_igȗ8&CYilMZ+KP!fC p3JסE Uur%URo]vrЙAɢ40.Ѩ;W]-;BnЧ7'ڞZ1miH~ww\ |T)aJ20ʗ]Q 5`tv d1{pMCݩܾnAgG'z|dsjTi, >_u (#њ&k 2I1bDn?ɀy]7  _|’?%:-m ]slFP[k.qL97s U&zHOUu>@*?Q5p0]0bE0xZʉ#e짅CJMJ+};c^4F8]vYX&^Ȳmpy/2Iݱ RwYF M@J_MԒʈv|lP}'f{x1!@AZ,q ۄg"wb}IL0О'y+T rK^|qL!3-p3?P/3vfy͐O5O!Ɔ!4> `r3E|Xw ksU^PMׄA($>Qs1v V>rHSW&&Q%mcK*7jr+Fw*ĉϱ` M? )ITB^UMOź1KՖKThb {ǣ5+KU;t|^L^.20GH<(\KÊ-N~'@>y7*S *X1sAkNEip&Rr [JsDNaD%S20b ؾ#VMͰbej'r^IP96E1I Vv!9H"7?WVmt.TZ ?| nUW=>!iU7o*baW'2w0j31nXN=yg&v|x2aa:_seUQ4~OsZ@a(Sm&%JnQ +}Qv{_  xQ yfS:RP" ɇ\ěu.< *gHvdk9FkiLsx>(@!\QIm:$YO`Dl&̨0 CʵCbn R(86o%"m+S0 7\sZŁ@*Y0tdSF"9>HJDjq%X"ي#']?k/{|PhdaǫVR  Taf0$~ks3UMJ{{6rBc>u=YW tHñ]{\1N lP혂j{0 q a;Ⱦu7_fvK0?พF8UCLR$皹`shތO6dh<4 q/%*a9Mv NҐ:l MݭXF28A3BF}Iblp;:/(]ϠL jDo\+@Dm8+g5t2ZM] Sݕwu]u%Ӵq{٥)T5^Tmux:t֠phʧ<%ȿ N pspЍRD *l1Ol;6:]z.+7 ?>6" |4ԸIqHV!O(uWe JG@D7u[6rH}W ;I?yCkxK>QYQÅ\|@䞎6D >AR)Q1rڍ kb02RmizzIoT&TZ%95RG3zJI_L)|W2 d=?i6FXNvؤ[gPh1b^N( Z O+_UA6nHi7~U@Ȝt۫==s9VC61ڳx$/[o6IFJtjC=FQ#gVje .q;Gh[gЊ@-w!:P7WR^ 3-k8ɆE7+ Dȹͷ:`D ud Z*+8a%h=I4m*K](ksLw*0*Y ڪEk>ӹ;x_6["$ ȟ1-H*ٷ0LbK o9ڋ*k8CZ}'[o֫^]M~k?V^5blwъjgjGEDchEJ` l'L!u0&Tcloyݤ &Bx:Q2{?0LhQϛ0ԋ'Ƈ[~M3X YЩ۟K0[qco>@uVv-=O?V( # Ù!fJQyAJlڣfA'Lw>&i`\|s!a[':4~3QIK o58}LO>' a WQKq"Q21ZEŷ.OɊ^A&9iYv ¼`u"\9d+ZUeWD:;L?Ng(EL4^6/FCn+Zh`FU~H&DYM)AYl#Z-~^.|)K1Dp}!=(?/& X \ex$zl#)8ns#:#KrhB0 wf@q;VkYH\MO.]?Y\ʑ7/n/;dU?Vg> :or}qiv8rSrq:56A|ʸx„&J^֙q7LS3Ƿ>4GաA$sǙCe(٤'7'4id>!'I6LR[m2P$f0dgQHfh/֮;Ҧd/(B)2ELI ƫM2Q۩fm@%2gXÒ?KhtKjmÀV݃j^0zn7Rt|b076YL]& Ơ~R2^΂ Eߊ3 ֈNwlm2X_va'u-1&&_wkZŁA*L5&iU ٪hDY%n\òG%+ԃ^G\>Nj2Ӝ) ">Z t G<݆2X5&XIUT,/jȈ|t13XCneL޽|ÖߦDJM `Zq7۬PZK@aHDE a(MπD$x0"OJ+{_Xjiz VUˋJZWx=O..,!CʊV, k7в᥶LʮrWMN;eVA=XK]h3@nhA4jb'9}EP Z9p0+IW@Cj'B.lⱋ"um"n 1nZgfa*WIۢ}ֆ6=͉eK|PKTXˬ]fЎKS޼zyt"Єe-*a:YGvm4ؼ{W>AI!kdgLnx@G+WYr1h=S1,t [@m{4%guE_7+qL6@@``K8r7cl.8N׃Jo%ӣ؞(ɹ6)  OHر` U8W" +D'Tt1 y2>: ==;՛4|11[U:;Xθ)2`}GYUTD,*8̰a<&uS>0/N#Vh턗0ѕ ops lŨkH׾Mɣ#7BN>5]$J hًe6e4..ёT`-lMr'X\7 ("SҳW$'GT xB~ jV?}Īv_їV;8d2 at殦S^,֟2FBRܠ HRÅR4"eq"^G*t80pR\` `SUs $5574(=Nr6Tt)EMi uLɽb'ֳJ۾ דE'f8R߲}qO6([ʩa-tD&@3WR S_!Wcx };hTC8g)ySˆ` p<>\sKnIsp8n.ʶ!Dt>&%MT(e]gBKԐ 7C)GFd.j fJKl$O s)y0 ܩ7m"C,ЩQF\$y?8S28/zwK+ l/$ϴT-I $BKI cf(K)?h>vf܎+LܫMVg6&^h\V=1D+gT"hoK 'مA js6D*~ě*c9r$v{6 1wJ_r-a'e(f3op:.JeE-^f6Zǣ&)LD`TIKA_iGU(mc"D_^:|<@ω6B'1;*SX41Og|DɮuFIDYa۷ l|~P2r@;/sP R+,w K܉©qIN$DgbVɓ1C$`(Sg=`݋O=)3Z3;^YHHb.k[GjVJiƃ$Ӄ^h$ī{ڼbكߗhTBAN,0mP$Ũ~.˒npTN8-A\AULp9&GQ6ABG7l?`=ޖHR'HP{T.'lR~°; rYϻh|/ڳ|0"NM(޳T D=yš*QL~CQ舀\e +`¥zecsa^ba \a=mә(k兺&NP$l0i#0GQBC}HO]tF$*N4E_6('E r)ecq{]&ٮ*pOяDu:D4Uqu;:#ڛG_v- )p`meف0IyEPhW^6L踄]?to}EڀW,Y$:11HƤRj/(|9 PqHzzu&!, F~nK ={(Yc # eV8?*w㕥Opċ06V.dqkӋĠnh%@h9e8K}5P;S;NhY\zˏ٨Pxs|v8 ,!AoΚTWҪ@罁=R~ʪ%硷e#(\ "QIC2@'\))V?46Z_8Ndfzcke;)Hf\U7|?; u=K!v9EGrܣЛ%%F~-5bs@&IgOxqcIYl*NL?н;֧/1T0R( J$Fz/iӷ4UUOcy9e O`&<"'be22 ]S?Vq+4֍4l-2+sujUbXM)RI`Uη=%yf>wz::iw1)TC&;T^L.B lJHF+UN9:r7Sw=C:V\ `D=p#yǐ Ugى~|:NJSIFPXx*hLYHehj.&CwOMO᭏"w.>|Uv5x#dPj zT= ]8$J#YŕU.h7ٙpH H&0^"R*uQ>n7ʁȄ&è{cQ#ܨRjwA'V{)Xv;dq|ٗdz-ޣ?2Ex?^ZzI)~C?v{dF)o7{G S!.$Tm' E𜈝pU*jaL_ W~z:||d?׍Qx|Lrˢ^pQkؚQ`C eK1քj_;wzJq?,X h}wČF0Q`̼X iC.q8*tY.*J!e)qɕ˵8 n?<سB~IbԺ`q[ڊޖ~RY6lz5Sbr@:位=CX1VS6(t2g;GE#?P#!d _Lq[q&ɞ7@gIhstGBv_y;'r B&G.ǁ~ 7ZBB sa/WtG87#(=zu)=jUwŖwƋ7oEu#RqlK޹NeoV+nAFmi.ӃyCG/>}?NiQ̇#v!i'n!HI21v9/†EU/7cef_:ƱDШIWDToB„ w%-*M0zBMA ]^n.wQ#z{hͤՉe*Pq::ʓpW@b^3BR`䓸~mp(,jt6qx]ŧVV2;JxO kMH"H)GK }18wd:tHO6Ƒ3V4ʪ=Q0}ډԖUe{"3 yr ^kxM.w2kt[;bq "d%Gi$%mb O7͉9^;ElC! hZ<ئͬcAǙ VsuPXP(ʑi%0D;ydTn/vySPn0G)oFos'K0ut}ɖF{z?mJ[)# ar ,Z ٲjy~fF{3~t941p=@$Z{% 2yX/*]Ms.{<{|>o7h&;am4BDs n < S-GK.11@G#oM+w:X' ,/ynuž{2n%A@Y\?uLcs$YJWl3N7%FC" > nUIIB~O6E-BdR>O]З`]Dї.cVN e1ң/NЙ@3ԖXlEh(:R#A.!5tH!{@oS=tsBH7`{ڍ5tT/w 5'~\s/a-M fT31܋Az-џ|%D,ǝ(z ԟ| + jGFgʷGEfۘN>lF(q=i8G+q`HJE84wm 43\Y6۸+O=k=d*M2w튳a7n~i>kDOoNwL~Z+fxm!抺 L}䚚@6FF^&ufNghowZd-$RKq^Uc$=LCL(|ɣ?,2y}֢jJ!Ԣ3%Ӵ|k!颜x |͋5HoޝsAL[[/]S.C a6=wF c1+\2 K|8],ᛤ|! ʂJ9DEQy&s^r)|((V<D#"R{yKdaxeJp 4a>P`?Q.R~Yg;AL_eΟIaC.a!5$a!>f }ڧ_^Dw M=X1YٝhbnFDMkX'Wbd(fےzBiM$'V^vj&xl~>\>q#o\n3H7]ݥWt):&Co43s|0ۍp@mIGuc3>[t^\Nn!DTZ+c BPYbvsІވAW+%nilxo #C݆,D*iGh&Fz] {9UG 1#''RI7xө!6'({ 4dӎyn4dDr\Xƹ`xOB\ +UQ`uOpcm^-n;q#a gl4h'K,0\|{܎gpD/TcxKxI[q ԧR) *hPiO1ܒ,3Q&$JSc;ѻj Ow#frݚYEU#F K 4P i{czq<(,\:XnJzҚ-47yw|1FOwFU[q%ıh̳<3+`mΎ7Aue3q_5=K˗(O2P^9KHvZfI X4[ydV4DA'WO؟U[4|D\& eC;# `$#Jq._ a#[FrG3x^>Nd8pƛu :y6}Y7ܞvr$ *<ٿ % 7e5}x>4$l2%[^08稞,?)3 rP֫BvU(d1kp?t_(?%:'Ʊ+I3S/+Åzk$g+0/-mg"7 LE ,M,h˲JF9/n־u5F)7ƑzF x,J e5F7eF{3}i/̒B?F=9QFNN5v/;=g  (W_1v0@0rOƒ_:ۭ5,8Cu=n]oڽ3'ȍZAB67Y?%3rFz<_yS%:Rn,YxW& #֝P~IuEYZgd~߁,ܽlL~].>j;r}hlʼ!u+ ⶛AjISYʿN!akvMOPyr8 C*NO7thE6V p/vo 3򯑪VUJU' JZBׂA8.~}7ш -U&^_YB㥔z/cCᜐoFI"fB٬*]hƖ..աz/Ndsht Fj8Ԡ-࿸rS@ x'!7x޿cy[E˴zg-s"5 qk,8P5υhsne.;s! ҃,ά*t@Dߏ06y.=AylSNn=^bQ:! a[p:$~R>i>IG+JW31;|5s==S³7$䠹;[fHw߂yz "s+&=a׏zdz[2320DxNU`X^Nr;g{2m`h 'Oek6#ioa +Y8mO3B/}}q 8\ K]T_6 ȷk+'ä 4-߳8.u TzH2/w@zEڎgK@kW5n&8ՍP8!VU{kMFi9-pcZ%_0*pdloY)>sa_sQOnaz@v>4P?GJUTĔ㪚c7DCjX_#C=[);;mW!o#[u'/>? N"2e7f-:CxD@0hu, ӎȫb2E1ökmS/j+&+qPo^M}2.2fxC{5h$],"VayE$ Sp`KB-?wj/f~E-"C~7"6oܣݿUzaV,yR3x[z~lF ᓂBZüM鋄6؊h ^jqʞ.7'\°sGTvW=z>f6 ߪ_OGœ*ŲvhE+6KzfeLqsIAϙzFQ:\\γBr@H|}9/?>}hEm *a;?o@@F9l8Co:Ves5b@Ş 6ti˿QA2L6>L+\uq/` u)"&)Wϙ9$Z1z"折b93D& %5k}p/rvCʖ-/r"v+vu`>3@7ͼQ7aF_FUg9v:@]C 4 ˛ jPJ}s ЁW?29.<7s8w EFCoKďD3öJEIX!7s(')m5=ā<8C -pjCcy4ZN%a>T&M",]E4\kdAsGZgdr)gDJ=U. ՞ /ߧdp̽)+{+k|w X8q1}x(>#u@0-r[?7rxF0UXT&kx`y+2Zoi2d45ďgkJőN!2`J\Dz.f/f6*iHSF8U,,Fz&xW>hO[S`&4">Mv3a7Hڃ:瑘<)&n &X.P֩x4'gZ9rչC⑞>sX@Y,Am-"cV;*b}\:)z m~[FR}zQto4Ǫ&&̣ r ì(E4gd1Ҡ#>Q&$Hk0s=cfdSW{\nw:O~'t?㘋@FGJ*953Rnv{r}Z]o297G_&fh:Vwm]W#B%>g}s[)k7 q-n\jm dg|C_zbaʘeYMZxcl=KJNP9/]vEErᦝ,Ad3GMu mu3uZK~wM_e2 E(  TƔZ9Pν&Dҭm"x1i#i!îcv+jw'I^ wn²u&u`->#\`U|S;!9Y1O&*Y1U@I 'q8|ŸlKig?^"SЁ$=vbqҤtAD9|;&̕~Rk9@CxX['ĎJ,[{i]\Z IiOyDڇԜ/e3YzY`P:JYŦu)I7lpy؆钇:RfmONj8'xIج ѩ7k(wHݭ=9.~Ӗ}%O<>qЈ5JP6kna^G +cJ.b`jS"L['_Ɲ%H іDm}h ts4b6YmFRr;wY$GՙU?1?8%;Xv:Idmڴ#rs뉾5,;ؤ6d$i-eC.rg8JB(|Ea<,_j\zI r빢u_#kp ֪ȀxTW Y~&e`?yW#ؓ9&h(}[E8#MyY#(Z.3U)(0< +˷V\%* @t- :t.yXoN5}0Uff#W]ʾ:|gE#\`w#l feRۘ .n"Y|u| '׬lXA/q I୧s[RicL<6  \4'1W!ʘsCpG,mC7507R 1;@?2򫛞كgqot znJ~\A+)^'ϬPzY\%}%=$ٳbW \J-y)Q{>΂eSa ѵÔQM1;.o`66uAN@ʤ&h#4G޼(vy矮:՝/#Rnds'mw~4C?"'Qat4\۪*yl8&땉 ' LSq2s=(OWLѴɭޗs!u3c̕5G~ "YmgN*#S kW7$jLŒ] mȵgF|KmA8-9WjL6Rx~2C~ݩ@LT!$j浿IFk Q`B':W_ӑa.qx_Oo QPM%wgˬ}K|؛)~^^!\xE>h{ 5tfɶSvtHW+ydx=cm-uÃL  .lk#8GFɣIMԱ9z$jhG5!rSz@e2jZvP8)?* 06́/{2rDu+!@y"p<ϿE, *$n2{tp`0!;Dձl;W}{{-HRxxM50M4?n5ZFtۍYR[({lVKyN3!H^5,A}z4Ѡ 4>M.+nY}@U?n1 4 E#Đ3rCu>7E$ȅ4nE߃T_+zk) #q  9ytm`ZP=&RI* ]6,0]>H{8r9~9gg]xf`ޤLmBWi1 Uqrm"v[lD`ӂ)9諬}[ nM(]`GA&ݟfp*]1X<1wft(ǻ̴n5@ߥl!:׋&9q.ZDVpz3or[E,M#&· H3 nU*:4 qa^qqEi(.{ax-Ԓ_2?'0DMPsIGbҩ8ǜ0FNց{Z)ȟ) MHp2m+)0ŪAIjn::E+}3\_7#]NmKшrJAl5UlJUҖ). t<"#E{5\$C٦ 9Su/p=lY:S V`_+pa,Bme1;>+8M#e)^08ܨ3@`)70YBI%Whv`n>O-\lX+p˛HA2?@mǜZ@j.7vOCI}T=D.tH^i<4Xݰ:E zƃmU)5ֻX_S Lާ<˼8sVp{֎UW?3U,$ B rqMT)hj?N^ \dge85Jh}4ƈ?_lЊ/]%AgS:Vϔ Ƿ8-2z($*}A=^LD%;s'?``yM ; t,) JB_^ &^H~-Io%ˤm*r@JKޏmРjjnP&gVG<7*!f4{캡c0 q2߀I6x6iG,Z>_+{h!Cn~B_w|D^.#BA},g" aghKoc%9JY\ {Ÿޘ1`P^A]{SXeԨncC{ A e{ai,Pǡ55KzqXMjF})>F*'xtST[Hn'/#AAFqͥ{:7 1>ܨct~L 8NU~gKBՊy.Y/H~M/t~rɣ UΓwfjhB7{osa}y+AZ'_ՋW\؛_y?/M4Y, xm|( Ck1zɧ>|z  y$7A4',(2{p05W5"͠ "(N{03(V=BK'ak:n5UPX&֥򓟧(5L"$ ND,7|DqTb̶Y }9㚓t|L SepS1EPeۼSuG_ds.oXV[[U}EX҇]H(mhh|92E@?UUš`d Fb 0\ D)=9KMJ88V$^@1u1-]\ɼ6b.rVBSZRpҬߗYF |{H d*&DWI1~ 0 .0Z7Zr͎WNՄYUӭ/<|uܐ%9>P*`CY|R?sXஷ~rb>@t=|1225xϘ8wajP|+4; Whj4;^DOҭS m @ SLޫົ _;PC& ~84}Ui[jM&p />*l3YVVUkcTme :sșE t_#+j]>;pyjB pN,A8gQm-SaX$L 0Do>cNbp=g^QA)"WJxy] "}/:nd9HiPgJi;;w7(//]\aDM%!1K7$3]Z2,rD Hl1&8 R(aI^x-h0?pŒ= tXkG,BuPMD[_rrEz$nc..Sš,H@h4J$/{?(Y1vD]B7mqYݎ|ViA5&hJ w gtIdM4OץDxQ*̑jc+y$A,brw`[799ΐ6)Df7(=췴BPR7oP@7vpŽN2:aB+J?( 9!O8I[mJu4abOP(.b\;|PL.!<|<Ihgߕ gXF>P*Z@|ǫݩ+;KF$}yAHex[UBQ9E5(@5w}:,Hv r4' q_ZF) x±2^[f<'Y9ӫs/$}dΗA;d5\@=^R|Lwihc¶CO.O,-<4+%m*װe|YcJW&3|҂H\l0Lom}q)ʦ ,i|ɅFgivspW#J ǥ Nl"qڊPeܷ Yy'|K,Qz(Ġ zi]؊غ{ЯL%r6hB3/윤_" 07ANvT6?j&/PC Y߅Z\[œŤ&g;35eCM*(|p-N*34@y|tcX>v;j yplz&9~`q;>a]/TőW<<~3(&JV1ObVQD+=KS^%%Sgt;U)#O$oP`#3bJ}`Ntu\26Zs;&]S, N(~˯jNRuµr`## ε͝0T= ,4ߺ|"OP OwڲšCvS=Wl]ǯriOu=t1 Y\H!S?μy+ӴTXo0qሴ=iQv#迷6ZѨ $3_Q7Тi#n;Ix}̸ #CWbEBJCjoNO)\Ԃ;n{nS<#\IڞKMHǗ[ný(夁t39̇s&H0ij=Gkڏi18=1\ͮcN-P* Y V8¤CZTsϪ"x'̽nJ +'ȕ;M]WfǛX㶯K2lV(cl:.DBn^_)&_a3ҥ^@3X0@mtɿYΖϤaX%HXZ:' =NZuC= oIP>o3h-rxkF3nCpteg81em%]n,Df>lx>*kdv>0Q#20jKf)yK6M-8+8<:0-꩸oQhҠMaŻ&=&@}a>`m'X\dRLv'H0d/Am@J%ٯ{w7L!)21L):<0WA$w \Am 815a䙕__~QF6:)uhN ]Z؍+ז:ѰR{(W4V%Q1[s wKꜶwLEӁ空Dj2vnj/S*Nw00&Y İr顗y:F%d`j]7Gf18D=PNLz$,WQlZL& 14+( P6m޵{D>XXjsF\CR1%~fUe-X ,9]E n~hՓ{˝@hI`bay#wب3ٽ 踵 xVD&8uǷ!ՅVm* jz"'qq*GBQ()͏ `so難GH AO#ܘkov ryAU" 𑥰z'1 x+m쥃(^``8V|;cp J[ЅJGڭB$fM:ƕ,fOK|ǓZ2&5IrXBઓ"HLNuuI:i.O~'2M rAfFj+u@pb6M(w5^ (ؒ< \1a1~hTv0BduDCS^*MIe":*6>o )rHX]&i mV)u<1{DFhWm7R zi9{ѠόZTV6kɑ FUj1{AW%*WO2;d#FK:\]i$]"+vp0/8!=lEc9N|zqBHhp#iښ_ee@!aFB8w0,5>YTi{ti 񊷅*߿w,o GfR\ -cg.V/%yc5E}s ޜ#HßP#61M[03RX3D"ygѝ¤sb{’ʌj 1e>jq,579䁻c,r'&Dɰr&S: $­r̿P0p{*ҕD&8B8tbtx BQ}5ʌFtն+*f;2}M+|X{GZ|.Ѹ|MY($tp1+fd7[ 7jnN\}gN"'VQ8+N(ղSKWnF=d!/7?h4n M4&^)sSX$AoE۱YAt C5JzJ JƉ70I)FK9٥BV*f([nl杦N |Zb`4HrotPcdmآ}Ň#'a@@% s] ̼:uNQcD$K+:6\e y(=u[n+׏sͭB)R P5gF>:AɱzKHL!GBaXk}i9ֱn<[qbAuO"&yR{TLD͏! {Drom/YQr A;Vik\ijԏ8E 2m=M8jx P{|hxS#sعYjUhZ%tXbs- dI (a y F]5.I2ߟ {@+f"\@ҭL|.?//^LX٠orZ^izRpޞpyB/C}"q'=7-\f]r"\289To˯~+?ΐ8w/1OiA-ЩѰ6bicr+1`%fk,XKeQǙR1|0*3/x[|W$X4y?kZ-0噾zp1Q@ޠ@gm->[bL=LgolGY/ 25*lwRcOc Y>)"O|F퉳D>cx(~kr,ߡE?;"Zva1*ɗz3E| }Th3pLc`۽3d<.R@FdH`fuҵhuo0 @o,ΤJLqpV1ѫ E$?Hy!LƵ|T6ܲ)^0A;mWL7;GZ8l]"&2q0\#v(n>gmtm.*E+QkΨvńQSyBL_JlÿVpAr^'+F>~Exk ǦOy? -byl,GIb?i3DҫS80fɹ='RO! t?#ݚ:"?+zS?ilkqA;pk*#ĿȂTdӁvᣁ'O;{("Bazgݾ,E2`RIL#џ¾?@8V^} 2>;{BQsN(oW:| W-.8XOHvSꝪxNn*8?-CT7@Gȕ' F}scLN+/x&lZSL*ʓHƿa]ʂŎqΡ<ȵ*_2 8 ss|_ծ)nl _0䈛wFoN\ͳx#ڏ7i ʇ97RfRf :"v+k_ ,fzh/gOb6 o 9Aeg /\A˩Հ~dVO^T5?$4Q".dtkmʙ;=nlDfJ0:Ƭ0YڨH}}C7ri!Ot$Yr𽥌}e!޵f9 c=2)G]seܬ"(ZOHpZi.qԻ3P6QҔdǨKt `^!L>!hqBFpƽW9ט ԋZڣ̖ ('9@ܠE, _*,}3(JBg&u gdں:禩|it@)AԷ ,Z~tNp5c'qI0=(֚YO6-ڪL50u=^dMg{pN H7 Dl'd'ts= U?@niHDW}|vp*2/fJZo3 taA.#Ƙ[pM=F)`79rO)%gmգ!<BЌSB< `˥&&i=QgoC~~YL47 nl_y$3 B0xJ׌Hq-]u w QV2[#<|_ iZ|ʶfx֯n0U?ȩ"T? Hd )u$60;tC$њ<.CE3P@ݞd#ʝ͸ Uq)`Jnm<ktX}_j`1ZK6MHCǙ1d ã\|@abK;~Ȋ4pQʀZ[NPmM?uZ@b%9h(v0i;Gͽ4mLةXD=1m+̰ɨ,q=pqF|E⪀cP+%)<;]e-4.vGS4~3T%]'c6"e4rl ܉ФUb1WGIdP+Te8(:Ri |Ğlgz cWfK{'vwa EMJ6tD&X_=B$u2F8,d QhD*(W0a$a0 >@42"粍u9 ҒhS`% bP^Gf: S: BMHL:̨QgdrvS7a~2_n8ێAa5o9ِ@j̡4ܹv,:0n44,ZVHD N!^$=(ɑ`ʼn߃٧ƆPqR?ڹLhݑC(ªC;$z8Gy2떛p8_A zh _\P*9tJMP(T('">Meр񻁁Hq&ݱRj@4JuK JA ZݚiX6*8LRWkP kD=EB5%_Qrj}0BÀܝ"C,2KyBO.=n9-D=sh ;*F[k#}p4B$zфW gtN )|"ƖI+gԍ@1w痗b1R%wJX#MycDRC?ͬF5uB{sܽ:i". 'cH~`,7]dq6צȈV _ s&^s^N 3t(AYAK=sv/r{dՙ>IQgov1•?#NTKuvbu@p7]kKj]ٖyt9bKDQ`#\#jz]w^x!v#ağuvi^`٠M%s[9z=\{g:ݙ<ʴ.Rk"Ip0Q.h^3şEa*d~M38~^- ^LB`%v~'_תwukW3GP~*V!Oź\r%t[aI{Nn7AccnwXi1)H ];~9Ax+B=ӊhhӝkUlս+-=mMJ?(~N(.< ,dAoDb9ڡb,!YB EڸH&`LB-Kcېϲ3%~?꥚Wls=ކO>2Bt"^wqA ~޿FyQg>g‹7;MO;BFNbͨ%Y ':SݶiQedsG#,}C:6'5J-dw7#cVzt|u$ kx)ŭ/X1'H=h.3s '3aZ~|8V8_SGr$!.LXΔ5d_D60;Z:7^$VAdw˥`ēiMyK ʒc~Ԅj]ÃucuHM^ׁs'%"ѦEu'wCn-x.l hgRvdu7DξnB՜l@ 5LCts .V^w و >Jc_DZœGn#"1ܖVg_=.y~s#E%_c4pHytA:JڭOuu+"vZh3=c Xex_;/8ss[8~S,}>$%NüCi67_$\UB irXwPj]*j+NJj (dE>Dj *:灐z56wT7o|*da<٬Bx‰qdDvQ!Aa<9ڸ]:Z&B ]CqO5Cyfu Ry*r{>+$Ngx}2@%b %͝X-gP'VmSN[β7f?› }2myԜ2#=a>6֏oחhT^c+Q;zMc]^ Z@{/+֯oh!yx:Q, s10Qnƛ{놟j9*lFdq4;!ɦd>2ʴPRo2B1<-;m9̈RYrbk&|s<=~(˕Xl!G_o+8D id1Y.# Z aat9 hA6f lT2>Y&̦VN~rB]#QH,>c xZ9W~ gҮ%-^dh itWjvZ[SD_ j2Tlʩ2aNO"X2hfU0AXDqX-B.WsR+Dwpy^e1wáD>9S~MX >*|#DQ<\q~lobN xEBRsR"lz<= Pmi|M󰶼Ac .v?oǀÔwS>ӀPI|Sk·^'AD:{5ǝd% y <dXJzDrU {)Ƞa(BJp4k%/F I txO(A;^f"Ԥ#cl`n-̿[tr{gBoUP[(4NgNoUje2YXў'ҊeX QϷ8 d2t蟑2<BΐkW jlV(}VС}IT1Sf_M{WVKHT5kN}AHO .R?[TIYƣZ] Y1Tzc*/tf DXE4~\kT?05пg$Gד)Ѫ@&]sr' NBs*!р@Amv-YYDݿ"mSeWIFxJh4@Gd.5 !tQڢC,fE+Æ?6G -vо[mW<8P1>!8-w8{BY [{&߫Q-(j.0Y8>/nմj'2uLe9xrl6Eu?Bz[\=sʅ[)NRr )95a`%8!((Q4u.1I,ٻX߭JN wș(,0 uDJ[YD9W;lՍ[v~XvomrȋR0"ڮAfK;D%Wc<^liM=0]ds.?,Izԯү ~cP%l;&A;Q.ų,Wu\5Wyײh3AZ2NLwDcʧi5plTWǩ5DŽwɘpV1X(-*?q#wE* .B+t4E1jB \,$ӂYeL4Gyppro.Sv0K3hL=0"_1h1G*ZSCp|j/8:\Hٜ*!*kTTu kļ9mDگ؆v44bgzVt1Ic,yj 8 g<^Ps6}հS=ĘPF0bJ6Tt4TN@Yq[X7 `]펒St#0R+A~t:.T2Y&fYY|:dr?1gd\=(ΎM׽kgWneiڵ݂iKb7Ut|+ݱuK9KZ т\9x@|_`P684V|HE v w⚟?ooCLoڰr;8OlM?uj6C1Syt-x %~;z]!dPu91#nQ劍mK\)WjM1߮x#B;Sb\5 J_$kKl@=:3stBu惦 -iK GՏN#O!a"j\7]fL h9_r0!2] o&v 89oFռ0bmN -690GOZč2&| .-9;lq&a"8+mf'8]P#ݥ%A) XPAiaP[Ƭ";Чg&3TF`IP _tAlK3#kz9d|>^ejYa+bYkS ܏VdX~pn4X \J?bl xYv]08Cp0F֌n ~(V*Lr½+B= ۯ)//[8IԦӎm]X oyथXJ#o3ߺ_MQpAQ׉&t~t&{骯1d퐏[6K v{?nȦH4Bx> MEcpCb%出O*zl0@3Cr%`h&~)Y]C=uBߝ|h1@@aAi$O3hCtŤlt{&$jX<꠼A,ZPIn=}7 ru7u@o+w#vc$T Mi Ld>8D6kyܮ # ǂOZ1xGsQ熻 T>mVװͦ#PME"dنG' nOt{D~iN7-[̷M$QHAgUzOT1tnyN G vVAȫ8>;{wݵWٙ\Xe {;cevz0^THMIyऍWFA()+\xO6 eLdx'3D}n9=5ok>dEaxvKUo!O7mQ飪4ȞI?6,frW*ӑTϞlbp1[%ٜF5dѣ˷rxc%fC6+4=Csp%aFnￂe:`Y"ҏ R=NXw''r,ch!iBATOqM LQ<C<.R,mj./0Qܬuc\'#oҌ-lc( tJ0c,_W-Rƥ`?wPOc43W]6/Ir'NM2ݬl -c&jãhE4k)?6myշ޴BsijnJ2UצisJɳq"4N#l4$Mbs$RH5NB@in\;g≚D[ZWᆨIcda6^`pfWI[p83x.Q0ձvJs4pZS~s%AZ9ݎ ^]ܞJUnxXH$cR6 bPī|: b@j4+I_y 3#d)Xih@ztBqN8 CR_f'=h%p ن+B#0=gV໼A æ<$B5Y^+s'om[|<~^FB~ߞ_r}@;]ǜS:Z(0}5Z}Pt)04>*Qx7q $wǥ/vgez+rzH @^RRq(d<@ի)ӄ @_zX  ^yM3@rTiy`7 *F;+\rؾh3Vqu9Ag&pEv"-XHL|n L1 ʓ^'4H=y;BJфBn~VF>#w9WcQJ?YV D kzKxոxmsy{6K咖-we ?Ō"B^2-. P*J(3-(ֱSU|OǐXX.bv!ѯڳanXUO9R;"J t@|ЧQhSՑ?ug}Tؾcb*|Ps2̓Ts W9B?Kq7Un vQl!W[sS yDBϹ {/8I gƿ| &r:8!j\/Y@8f(_,- J}u;YE!>s|\(0_MP֭n?dFK8C2:*z3HHQ,db ^V泏Rf&x#]9CBR 1a#$X;}մD̋llk F۫Գ|ydi@-e6t)IŢ8W껮OP,_O0Z[]åm8뿺D2Bc7_y.Ve%Itb[oOfdok$dؙB;|3t~iQ#3eeYV+Q6:k9(gv\I^)yxT|!nR QO hwR盎h3; ^!|N<2Q끔~rzoX-|>b]gP5TLĨ#sا @ަX x%D[[PgeXduS](RU2:/&q7,Nbrtn'_C|:64#"YԀEqxIk&ˊ[ڧ-R,eψe~.TwRJԁƦH@RiQl&)5Di)>Ja ©S?`<GʍqSpC)? 4;E~- //atF `1D/Ӛl7x|TB寥<"O/4iLiIԑuL2ʗ>8@d[GOxUß4ڵ@ @ycSNWMA "sCyL)D*4Cw1 P$ĉA 6n޶]fӔN">=㥰t,;cO9nGhD< UW/d.DdHX6FAUܰ湈 Ɇh#G.v$GՍRvgx/F?mNs?1|VC}y[~\`1NYW#AX&EV{wy+j$P?'EcPvWjETSwp@0$o }V

VT $k&5@'ME*R-(/_Y ܖz`/Tcg?ڰ#71<Ӟ+POK$u=a ώvfԄ;ccW~MP%!rxJG\%߸L,Nz `,zQk_P:4@#3D?sG @Sږ#&)3\5*F;s0!jij5p:~.y=2yWnF!a7o`溸wc_չ8AIȯ%oB9I@vO2o2p)O6 _SR!O R:)o[q#%4e| "&;Uj;г'?ȸ[[id"a!ޞA2q=Ƌ3vz'^N(|VG`p_~b!ٹעmşw;2iB"+(E1D酏y@U`#tImsӸ?Α5򋚹j>q.<×kZt$`RxV݇vpމ@v*$_=uri.0j lF z,p@;lyqGrm0&׽5 %Xe17H1I&(RB\g²3F푸BhP7Je@ifh奩[KLSvΐhUpJY#jdAObG% KZwǖ]񱒃'Rk~P')ͺP۩W$L [<+b⎫&)>;C#CY+O'G 1 (olc[3W[C a6,?8nIO# DrVJY*[~sq7/jW~*]BP:<.0^bc8z7WJkB@C=R҆7x6 ^[@j*Jt@p`*p%}Y3!ۜwvbM+)}5Rs4!;eN[4$,y@.}? +J5ކي0ɖ!0R"o+Q E05/ &fX2)[|[ڠ:P[ *B2>?别mڎ M-]}΀08hБ$MMQC(^GR建txU"#_y*@pwŮ,KHf= ]\0)v۬-tׅiw$"jz~#,QI-y!li<(kZ81Ll/ =K&0&a6tA -pSeWcBqb֋]nWn/N4;#ہ&٘!Sj\#b$i|ALm"-˝8cs_h>cp6#! <)NjV펉Nٴ8ClgZ`X#wu#7XP3E$bk[jvw1蓒7`[r@f/ pK#B;q:t4ɾ3CKSOAT\ OB'Cd``dG L4q`FMDv1~t UFɽ ȵBvp@N._=yOd> AE^ޜ{R_OԖH 7Y#9z<}|&Iߪߐ|$~uV16d{b<NӃy0!LzLL5LP/Jy{@}YEhŸw~f1}~!06ը=NJp/x8Gwiƣ8y<5`U!n\t} 6^aM}aY|",'y ^C5ڀX6wp CTf^Ov#^^) <턺xs2  dJI'V8CG|N">3j,$1gJ5>'@wj})49pO2 )ΥfiNtzܑoo 470݇FtM%(`R_nW$RPY8G` 7]d1$E#<}Șq~(Q g.D6TJ w͜/ ѫf֞^QJjT~0..ڲ-t 6og oPPLt AS+? nAmn >MϒyYH}Po>0[Q<K|6b"q"w<{ۍ]J65^AZt 4vk$|Lpl>8ԗ}$0fOT#ia!b<"(= 6O,a-0"t"tEDl|GwTy~LjgtN1FQ$1̫N5X&AFc$<,LZ2XMVT`RRB?ة %@̊% P8Քh]KBaK$^˗Ursa4wsշ)aZ t'Ȯ?<&׷ּi6ͫzeC(B 6VL;y.9^tRvƬ3/ݩi>-h'}aG +b,Yu? I=DžB\%5 _gln;8Ա #Rn[!xeo%ngf3C'e2=WQi<0E 4{t\DEe6`=fy;lORFlH0h$ہA$Qiֲ@* F+MPRwڴL`2 6fd܎4):K}˼/y-+!P (x "qBta]B E,r՝0-Cm^K4KV_H`8oʼ098a SzЁ{cŅ<șEYru]fӣ౦У4iՏ)bal(\Q^#%c<9˔J ³plhjt=4 dv$?&wri6LpQ2w߄$h`iLv? <ϖY!^m%=C! zpkm*&yS_`xهˊѶ'R@ߊ5pb7H^Xgc_c R%zJ1HZS-ہ䑑Y*BƖ=;t zaJru?ϰ¹"V/Yr \@ǿ$x lxߚ4R&-[twW9L>;*0 )}ɈZ4ak{pMw{'=DV>Kg!/ѣPovbı77Wm`RzN:hUvġ(Ȭ$H \ &0+t 3M^8F{ saN-?~檡m5IKa"+bΔ PE(+Vy"-:vf˟'(Ye-\B?8FM>>:p5QQ/wY3x$jǙhGӨ}NVrR_ #"?ZK{sO6&t y2A6)6ٍBBQrr8G5ܐxӥC[UsMZ D^OFx@/Y8/Uq(,6L@婄G?ÿj@bCv0,|Nw-uj'\ ,E Fsָ SH^)%׵t*n?x@SQ|IB-uꟅwPr;:$?4;֒-)ֺp }P)LkLpgFf`}"d#y~yC-@a=`eE"0Bq?hW#i.{&όz+ʈȬoz%0*ECݷ f'Wtkz%p}v` p~_"U8Rò#ʂW;Zc2Q ٵzoXhA~@IEq`hZe#v2En*6'>J,?:]x;5SD]g0b3)@AKGA"g[t Y"cAR){sC-(l 5|Pa8- RJCVgKө_?[۟ BLUIS{+Jzn>J[ UL'zܐ-N1qāf-n:bкn8N^g&Jϖ+!5QayU"ޙc֫!J>IIf[aCRm dF1MN`yLqpuT&cEеLIe}[#뻘¡,!YWINbcMgZ.#>8 L͌Nbuuh0 yre 1SR}(DQgY iorLeZ{0g@k ;;A$"3غrzyn7K8.̱T<,.]#02 ?z,|/0fw$GM~i1/T.O E4x_n~}{sوȏSxH@k)]A!/VfPAS`ZFa-NSU8Jx҅V`> G|)nF͟I&T <ե+vw k&Cl*H]Yq,l2WS tvr3㈓ J L6T/֞Qud64}xқϨUDs݉%2⪔܌]LyR񳰟,)NAh>9oe<21w/y;3{=R'KCfڪR?,n7c4udL* ~,R6;X>&@Nxe2%&Uj:PDU"] rS3&_^GQ"q7/TxuZ7AXRO~$Pk9`[$`S>&ܟ@*+m%D>7};rN>0"gdi& O"ޑE1+QNvM\xPjv[ݑh]ΚO]|X*+}>7{{GB0ZD?N׉6v=@.9*Z 60 w;rBi"=J$:B1=y_fԨQ _H&\NP&ex)Q<{G^X;ݘ8S˾Iqd]_pVQNK2>@&˟}* 6b=yjN}uzr"ų_'u@Pri͵ŷB]P^YHK='~(5¨A0tx;=L?$pFr^Sar\,pml4d[Ŏ}Z¾X3Ϝ毤vӫf(vJp&]?)GwX.샏ju ˕T_CLJju +'X$Mi'F=h.ĵ]U%/;_ הijۣ]E@6+Q%Og*)~iS [ܤk3: )Je@xX2f؋ rt֎6wZ(ю4N߫n^wl߰g<6|4{INl/ռ!P΍Ff5C,e]GdB!<ƒ}G8qLIwD>؜U˻?+36jd[` I4I"B#^@iM\&t\H=8c,%eJZ3hjdw1ڜK8zR?эb,dd[b.T4iic;RlZ#Ҟ5>~*wRƳ^Yִx]grt1Aķ8%ͯ0/|Ogx|(xJ3Mx &wh:|{0Ƚ%l[oԇFEmiXfMr"k"a (w4jH&uK~`ESyJmZ \{YЍakRaBl0l44X ψkn6 Xf=ԃD;QL6f7 FLmi5N`.rB^o]8<2]7\|yzt^S=W."^hsey-y3GJVso8-8WQWLwh1C=>o`P_̗pjYWޒh[[͠[T'72,HZp'צ =̱::O [`3i̺&:TR}ߋdc^}_EHa{JÉ}ՊڈٷGMQqv-Lp|HS.W RƯpOޕ(zkvycZ9˦V/Uۑ>ߐeJ(g]<H'Eѷ,1:bggdM՗n$\h~{ܒf7 Y.Crw=#OxЃ#"F*)&0nfr,=V۵&Oe+ƏS]wU-^#sJKt,s26P?XSUE\:[:d#ݪY̝g/҉/8Ή6[()%9xmUI&H:O7Ŵkp0G},T 2xtlO﴾X({i;=z+MT5cc;b^=h&<+Fa%S{8[4A)p it=d(| x6YxP9Ump 3:wB4fyRmS4=Cj wxWVR :lKOmxq>odB*?-l>\</v1}vL1W8"%QljW5_5)XC!n@-2A(+uV=L3 )䝱;X9Lhus*ۇVSreV1hf9``exV\#/U]IL @ow%͂L7񞪦I 뷧k/k4M0=g0i `氇,\pҿtCB/e%YUw7M}&\c &;aM!{BS܂0lDAECt>tZ?t4zXÅGi8Pӵ=u &U$3~ aV>0έFy> #d1|~-3y@&2+a3š$YE ~+hpq+ VMsǃ"R,]~fZe ;,_yuz8[BUQ7T#O.β4h/jqנ!l^RSa[Q2Pi1Da1LFk.H׹/wJ#sp'kWhw)!e4 bj3N{k& OVCi3@ Za'K!xwް駿Y?HF)o{z&5I4ov?2Er go_Zew,BDX A/ȬN,}mI)"PnWRQ-}8Ϳ5yW7_ [[fexisۺ0&ٶZ/MHt"&oڊjZjS8Wk' φsÇ-ruܢc@Iҧ޵ |OfX;Pv˂Q8 3"?9 ;0uYDC/hׅ j{p8XvDLr1-R$\<_H8(ðSK~tp~cBUa x=.׃lǺ7s xR+# .2`Lƭxè.qXߨmЖ6rc.*ӫ&b5W7̂6?pWa6,2謝!~?@ 2ۄ焂?*Ȥa;چZ*Ǚs|[G&z3\+QE*$걭;cm}ݣJz6G jhՋ×|&614bpMR($@|I'חݷ^oG(5.jrT{_|rlr"V.6v[z@bc(T0{e:dΌWWw5^6r”n2qqW}ō_v n? ?K K Yx9&z 8 "irәxsƙD'_ `xŗ;=*WD"CƸ,XS=uDD pM(3)r רA o-o[*,XSmqv>2Ftit)׶%t0w߮b@+O0?:iOQVDB^URŏq0]-!)A3"+Jb%tO="USOh}:OFgQ{6:.SV1y PH`J_k䞁B}+ZTQ>/T8򨹌pRbQfu5ΚjLo'F^s7ÌXJɷrA} 0co{jFO ށ/8oLDޏ {f:0?qSX J&M_-A6_fţ?Ƨcʮb`ѠMaQ,6 }&')BP2Zӱv7'8&h ̳ 1oX?bOQ4VJ[vD]IfXcTHEߚZ ? )DJP" 2)Y|u BHdXZ:{4UQCVݍ.'B^W)Sx68+تO@\GmX&atbGykԻ!s \ꎘeq\ n? _|9׬dlo3 M1iǏ$Y1893Yq瀚u-%EY{_̶9թ\sKMRmsɠdX Ӵ*h1p./y&Knڂ/$R/:rjT:k9Y,H~r< oyձ%•dnh.7%S0rvPR)yb]u FS\:A)fߨ[RhduM -.|ӒIb0^ºRY7Yw)]K.KK `Xxl=X+?`]ܨB7xhj^z[l#?q^K0Zk9tȤ<%2uI %x6Sx>Z pWF+psIT+lգ (OҢzMR$1x9^Z]w0.°B0CS>%; f)ٱ3]^rf婶 b7I.F35+$?BpX# N~_X/iiqMZ'M_\~M(X}!bW^rMhΎymr*i쥞dZeQ+0L iS^f=?RX.yv]Emo.ZБo^މaIQ5,kRaUX]zVs>O=]eػΉ9id[@Nߧ B>Qw,*Tr h)O{?[̳tQd $M XQMrN1fÁ~n{7d( S.X!/YG.28^Yg" iH5-#_h>4=L>3k-ZҘ`'](1'9wiHF UWk^T3NFT5-4HeBrF }il6N2U_F֭E6 0%uX  "F?1ٹrHt[#:[h;wt5a䟖/Hע$SW Өsf[(@BA̒+#8 Wg!)X8/h6ܖ!gip$< < Y_2CAawբǨ`܀sg7%zCdP0^1"[t6-x?&7J۠[Oe(a"Xuyߕ)!7U-qhȴ*kѮM)pKՌ(\ )ȿ ȭZ:L/oe~ħݫg*qtQ͕͡5cl1ʄ=6ZrKAbvאk(ʫp\~MLd-KӛcEG(<ܒwMxF,!e`ߓᛅShםŴ$()1%kk\tF"ZdwI-\2˪'J|=&D׍S(Рii("UG? g>&(4]1&XdHB.Dz/=Tv儂8cK/x]d+k1ve+Ta>JJYji.:g)<& =,<7?_1plf2gB?j0|d!l~@X9;4uFa" ۈ},>g4o)6D;wKMSvẝ'q|h3@j"(^r#OaWt? }BOu'M`\[֕^򺬕g&懢>W"m]LFUDŠ|{tv%HR&5;ۅ\QssG5>p]y mZwopscb)zBeL\|4 a8"bQ@oDm )uHQ3@ū-? `knYM-܍?BhN-}Q{bi,6ly. NJOd+:[8IF<`v-OnB;CVཹ]BM7˿oJ.]UN :XJkN--)6J&6mbA(RϤ> ,#?Hxl@'$yz}RDN2ٛlҫGL*{zbػ`$6f@ /~ι''gjh@Qsԡ:7mWk"Vs cW=+o':Q3TLbA32E@KF`H a aRӚ`RQjZju*]s]Um|C7fZerWq6F u-c[>S(*&Jo)kW>)vYYD DM9X AJ˗4143%dR`qvjcmm[sU#˾r‰<0P>7\cG-#^4 nG>BS'#Ec[eR!m@$D7Osӛ_d$x}˞\;e\P.)a.w$;K@[f:cpp+:X"HJ D;p?*e/ SC$֘رerQӽ9d'Gg4e'lm|@^=`BKw|AΫ.  Fhm9)U [XPu݆CMp+Chk:G& "׉[``x;4[{c=Ei'y|Mht'n5dڋ,î蟉_͗)c1hΒ2|_|IAN4g;~ /.pUޭa~͉wP|&jt@nk]닷24>F}.40{|~/J\//#񼍑5SEA}gsFZ`!—R?Ԁ *NTrZ2k6t%K:+(fLNaۂFP%[Bъ7 C4d+IĽLVRBvhE"Fkܼa1}mͦesJA$ųqarh?0t#=j)@Q #b+E0 QEZ~U[vZL6q Q@bc[q‰[ Β(&U墨9|1ʮQJ ;-DF AVMr$d-7mxWb"L'd)NWp9o[#!*a:{g)ZzA=J4ՒIMoo'cw; 4)LTI߆HnԦ;]4; 'M" /U 4'H}^HFKzSe(Vz*[`Y =.F_OhAw ^\02OqwCkMU*h>YW│+`k*p_WH/̚EᣈP)Ό$P1[)Y |/O؀ta萀b 'on x$p R1?z6޹ - vW$S9fݜ1V+*`QO4p1V~6HT$nf`.dƌ Ic \YeC-޶DAh v<=;/$KEXa'kv914NNC{U5ƍ{^Pdr}C)U$O[V uN@i/1C4CE|L,&̮Q>qВZ(HPfG"F pQK=eBSA|9Xxrz~K,?ڇyV\Mm?&(ڤ2q ШXf:'Ch2GU3?{dN}5?nڠ!6ќфP"~R82@L /V$y~v'j_C5mlЌ̤* PB(Ɣ5XZpf`W-HgZXbCm$?Oo}V`_@a)w:7oVĎɖ{7*MFIRܾ%GT^8Ceo L0;.,l48 \])`JQƢ͏暎O2Iø u-meށת,u' }4b&G~b%Wz U;`twmև |3Lјzz6\H%hNJ7_ԃK"rMd'3݋˒۝(\&akQ{r&8;!!>} '˻Tq*C'9ʊ$SLE~yS6UA<WJCny `]'h7-dD)yEzƳhgA@oms'&ahTIH%d. 5 *EYA|5x Α9qmQ0=8fj zv[7 @ӳ}x,KrJAVU*oI&rJU@9~)WU`U_c ^?o#+jfhpdD*BP%щ~OU;\#ͺZh=hϋFDcM:j G2a"xNsG>n;ě\ Z&*TVk"'@WgDZ F?A4Ķr`D޻?Ea)uD ^%& 7LJ)UgeJXlzpvm~CùРML%y'RȻ1~X`%n.@lF[&2E MZk8~, Dxtu! ^+[Wl*-f(V;SEf=M.is.ԧy\UQGp lQu/ qWGJaL7qyp HUd|)1ӿaƗfN$mapsCqmX~owqȻnovTM38we zp8 ݭl@ɇ$VQذX0#`C>MVC B'GPϛWc ebj:,kDA>d?D"&_;awWb6 8|5Gr|}=޵pT|gj rǨ Q{ IISXO556dW[- ѻgLkƉ]W,de\U3;-Nt~f7Ds.In eXƜz7/,&Z-IDk7C犉U1HSC2IT_b}~0ZVG1'^= 'ǫ6lLQ(nbFi\qȟ $}lrCOOaOBP0ee4C5b3M@vwy?g cB/w9X(aHƱWJθB 흤dW5MJ] 1}" e%ht]([ِ:v3I ֳs*w"u@'˓hyϒL4,ᙒ4SqdȿARXy̫֠hQ[GAwyc(sK>ēK&=K؉yw+d? 3H`Өi 5"w"K_\bArYܨyCxlnz%6y/M1T]a)䣨ږs|8oSweo`Aʔ0ǒVT1aQ2.'#o!s:nƾS@Q>5Jt\S@vѦxSQPGjWPBQ@A`"ߢHZD-rL[5zUEٕ)@ +Wq$iY;Tk഍9*_V͐$ȣ5:Qe:v-gbj{'DŽktgaJ!<),:sO9dH_B~cWoJ*:Iפb;3Y>5(+MOA~{_إ:70TTmhw "}4=iIYj@of*` pCI+Wۋ"?R(>зbݾyPqc‰ owbr8K=D: Zh㽺:SI:ʽA R|(g2?3gHr´s;`Ѐy># ٞl2 MPLrF+D>"p6K?T%dm)cJJ<$G+pBOE^}b 5<ėE-ݱ#FBB1D#KwXb3e䗤 qC`#Nrٯ1XgpMZoѓGw͉)M]%#QG\^_NKk=2#d5&G=7OUC`5"vFD8N] A?B±Ε*| T /\Z (TMsKؼ`` <; ?}qenaiǖ3ģ&RX1<"z,& +4D,%Ww]Tm#[)(?[qHi>qȐ ? FjkoT_jx\P$9g &2vAQ? H AW\J ɤP3I~^%Pzp)tEulu?9y..h}91TiEWq8_.usX֣xi.w"o=coy &NwuWQ l!li syv./*tb*kAmG)o1 *Ge-TTͿK]n4D740 1 ^%:6y i8O\)ld1U GĒoDIEucts+]nD}&0lEA6t}KNE4 ʴEwXdSfjc*n#4*%~ǝSkIf9^$M|#)4Mfʟ#8HB=TaDjAЃ3_EɤG; ^V =>_2jB+c;:43w:DTcl/4)i%CfAQK36+_;F=kCyU>Z3N06(KafCbwh,}`k/AdU8 p& $ϟߡ*4+uW?=HD5qj5|-'Ķm9X-r mB[;B!M[WT".Ox-q`Pz+%lڬ$_6Cr 'FkEήTUT,p# vd]jn<`&J/E29_Pdcp&;l)/} vvբޢf(#&m_pDQ(*.oP;ghcYFT64.FZ-, ,MɟCMz8|i78Fhp1R W rڀH<ּ8^9PL=ʆ<"jC>}f?DR"2Hՠ-lhO_F8ln#5y}\!C 5uR$id?3T?aIGł$̦|*H4ҴFW .Y PD1 w۬-&BxdgT>\|)lEdqP?Ek[7 Nr忩+fLg-3 M%kR 2GdyS(W5k+aRрiv8P* C9ɸH9ث!wSxЌJZkN@7 RA(Cj}H@U?BsWj-D&%ϖ&EAƃF8 l~KSDJGNŋe: -MCVBn[AL/L$0p6 ڭ"+O[TciOG L_Yê_T5"3'3R}F^?.FuwOlld MXG.acm1 _bƗ}˂JIECAZHGY> Ӿ!Xen`>/;A=k_c=|~'ҖE$n/mP@_2IM8^8~Xx*GQ^?:s_s ӹ=vO| ōjx=j\Sʒ&|/TПO<0btg"/w+gpcՑF>}hx.6 %7-0y}hD&7QAb*zr9ag`S\T_c?wڥߪӖ&B(iٸo\P5UρvR)u* gv# 5akrnDzS(>$X.qD,!V;Hm @0fT(I G?e%2htCKM=1F?O%;?;T_^45pb%"I2kNa1-媼et~ PܾJ2օMFTX#[6R9S;oibf?hsX%©#{`1_ɨ@r|Q xٸҘEL{Mz&q K8+k/7} &Ks2(=HJq:FMQ2+Z"|hʇx] dVbx> )0q <+sb1q OL:E̞M6n#JExb"` (V%,P7%  6iyupD-梕y88z?/'3foXjGu".4yA/%AhؐJ:. tK-|cGa=,n!BAA9rf%Pu&CS-Z-1oB1 W!>BNM<]rxS+RG3^U-1}9 6ڽF)ťX%TrOk/!a ވȡtvu>LvwͺVHf's%1?Pڏ v^wA?D֯t# x%.o1kQ4̱ˑ-J5"*yGn٥Ed[ڻH~R+eOD9S6$̋Ӕ4imU !)8[=cֶ8Q %OWa>ͧd땑w )b`PPyoG+IxxZzx)8ea:a1Ʌ5/B֫VD|'9c]<;}X^Ų/.@$L<DD\-e8”Kwr_ąP&𦠆 vZ}T4O;'YSYJ%zPoUl-*đX ɸ|Eu-QnB$=3tU@㝏~SCN,6.鞝&ۭVz_ ?. >[ܥj,6DkKSU WkjO"LC; VwZ âF<`n>!۸48[{#ئWԞMn) ^.چ>`bHoT7 gH?f$?:껤7ۊ픍DP7R5$GprnWQN$<+'QahcvTIzpogMb3czNⰃ^[Tbcn˃0$|yiVēX!-BEPZgyu2@ث,{!)t}L\A5O7+7h9*O^&FyFՙ8jo',H6JER-*C/g*҄6r?P6dEZ$Xlq̓uԿcjKWpt/$TdJO{6BP z8ѶI}yVxߠqhWe QWaq/tu3!-cBيr*[RDK :s0|}-P:dJn f3^<_6>K>РRzF%|~QYM(B]\IΖ=F^$N9BnS}8SXl+{''bS ض xʝyKP],8XҤ7gU)=_A7h~~VU(UQHlLAn5̮E*ax48x D#,HSQ)hS̓D3$eW%RfZjQ;*7ѳ'ڪJ7:iT0kЀ6߽e䠳UžcGY`QX3>Ke+AD˳zO1p:cR,(gjӨ?eePjm:>a9U{s nmSU\sSnY|x7׵k=K`{M7;MgλHƈ l`1n%8unT=e>xF*U̐&KZU'b1?/ykL N9~ܠ"g^Rv~w #>HŖ}y`/+7s|n7ZBxRÍ@dՁ_ge,G`D}kk/Q`Yms4JJoۉ&zX`ᢇG䤤ilNHCEe5>s!ɯлmR}S:;}8üR h9me.ḏfK dƃx*Z5/+(K/ (-5zjq"G*]iPfW@< C ^`̀xQ/mTʡB5N?Sd hIW՚J4R"()@ԗel+XE4d}<V>'o/lSKH)%}\Bw:8uy#yꋜ69+xעjFYf|]P<xQo6M/tC;)Bq7NyWJ-gdr5dbOdsX u<6?ICn a EI&D|%?TK1Tk)AjEh Hl=5x0_eOĵ{C:z}}1:ūZ)RnӤ.myfD':HojgkZ:ư\/k5V9iI~@e24ʰK#7ȁdR\ڽ!I xxA(CƗND~I 6NprF#!^iJA1 mPuSƂ yk )ŀFaorKr9>DowDvP$,:-arWX "N!1nYD\+XDqοwzC~5== }:9.vAs ]qRa_;8DzZ\ c'mn߮THn~> ʃ*Wׅcc=0 y\=^lN?K{'$B×,?,O#g th 3#,gV])5kOI:0CT1WVh=r@[^*۽hbet.e=l cqYLJ 8* $ȅȖ0BR;Yh;*  LP& C۽YtږF.cǾ 8ߵD~@ 3~첝Em> ORs?QT] - wNpi*^}BredVWu YS/u[[Wky, K U#V4"5Yв|]8n9Y <[iWlfP_!ol3G'p(2Vu^*$o!'.AN)92hHfNjnQ0ڊpZ;ޛq; Z [}<*6*z*xt+Py|Ԙ/3AC~8-OwL0GyuJPTwM6n{xz3A.2 .I; bwq{sRN혯SAr䱳xkD ;fֱuEb^,&E JdJԣWCY7"LQ ^pc<@kT>@F>iȹכvpu`3 o|2Tg6#,:Y -v20y#Z>u5KrC0{8ϤJᨺor\]WjOdVU=haШlndx؏6@@s9^kBG3 ]Ƙk:Ĵ zPz\7`m>҈qXX^Hݦ#d(cpF[=6Fob.2᥹1ΰ"&"F)եT]b#X0. ÕFvI՞_S@Ŏsr e&s4ē),ɧ Qg9JS7eVQt4B'6|"Ni-޼sc.[eK.lt%{,mC) eU\1Ӯqj^ l֝˩5`3kVί[%ː!.Cu2LEDKK*keUl~VOz Yl0='L"JS"ϑ )ؕ]9tYT`eQ_o^%n{%)FgG-( έb 2 Cw8HT˫3%B/^Kg"~>Fa. 3@OObe,aS¨1*^Vu"_hNNFi,y8SO<#})YI%]3:-eqZ$2 1h( =P$ػ8h~0z`7>^Wxcy;5&f&:TKwz2 jmNR}@zB݆gFl{6\ߛEUGGz?PnI=/G08_a'=o,7iQB]-/bI2'8iW] *HPZ4meA˗jWF+nQUQIVJQ} { Lԍ|ՈtVW[`3M׀IqJva?x/Ai<?XlH E}g2Xi N_7FPy¡6,Λ#V=c^jw/Y$ e,PrFIZع|2"/_YRk;)YL|1 WP D4E{:c qB1kߠkEpG|~0-ɾkIKCAُ8/\=H\>d܍A6wI#ĕ/v# /.ġ&HJm) aԛϒ9FOf`pAPa߱ր֢YmzCDudXG$_bSpCD,A!9[5Z6fp8+l85w]ԇ13|KM5oVϦzlEmx.~WizԪ֥)`%h Z +@#]3պen=}f_et9Wȝr- WMV(GnjQ &]յ)ҵCH2PxEc bPR_*8Uo߶N_~+\Wr@-P*: 筒;w:;*w;{{hP}Sm|ڟ}uSd吟TkR;F ٛ-(]C~?P/:x6a(* vֈ-B|%}u> !֛2!r%KlU ;Z%LIYY¢yӵwCV#dʲ#܆ܔ` 5h#==ن]a*A̰#;4̺rkv'bu(1;fvt/^- ɒK? 8̷0_?U?)T_n+X|MWL19$ti'(tfooթT:̠1)hJX`5*Ţw9iogCuӂZ#}AS*IMyGxkm:GVK|wQ TP o{"!.J'6(HǶi;HMAljb̲cH"WaENb*2k>lPE\fvEC9U yC Rb5l;" nH$u*21Z'?3%<5&P!HqeL͋&8X.VJ}'=-惱%I4Nwy)?Ÿ {ě઱$^h5^=/:?7-O 2 ?!oGSx99 BK=*1CO3yٺ\JZ_v5] ?Yfܻ\; BP潱.k1b{oM=_Tv!ZI{2S P3]L9jIΓ) cуINy9.??޵<_845sM 83;k @̰2q]OMzb°rO,[h7n;XO)]ԹGsgT=&ɂGI oWX_ae>L:/Vg.0Ό_"3 AzI5! &"ž֪ͪ g[m (R͜+wn:leMdu  ~e,, az|Mŵ?E=*dY.Խ^P@ Ѭ f22q {tu ^NCΫ;(i~*T%dY,IûQm$5eGkMApN7*VK[ż~%|~RSQ~SjRѴCmX^7}@YK!ɂՒ;G /!1ot7L394 Q99)0/HJNBvӒJF܉ώ8n14=xAq~n>z y$hL1kh#`~q?^3l6=#[rJYD :Ҩa'rtjV K}|WQM(ױO}G!DŤprD{OlmrNʂ6 \ٹ54⤶])5sJRJĀW pG kq!+Ge^W647rgb%%ڠV1X=tM0 _u"U#/zֳQWEjćP 70DNV`3t݊@ɽUy#E'2xTPC1]T.Q!t39u3el;.ov $6X[Óc%xsJ {{69ZCe|A՜ 9ѥLqxܖ>, ~֫݃3\9V% _ذĹ 8yT$E>˛ P&g\+ms5G!|#,  `̍r ;̼l]ɐd)` wFWJ2z]d)5kqhsu`J$ͪ%]#JQE;aC\`Ar7PThfa߻g:Imdyo_җw-IKi``=WUԋpxݘCT|4"q?ʂRhˍWŦWO0aHeTt x'Dd*M d  t|-oUw FA< &T>i8TLC0Q+f|PBIN]yve}Q4\}܀ tQ@?TF\LMu|NU [vNAW׺j=}9uSsɞY+JLioUl 18^1Ss1Z+8I 26No wv. f5^?S $YV %O9ZXXE*OblEjf@bO_lʰI+6A\ Ӂ/EeY1C<`c S2ô}I"ݝ Y \>0}D+HٓL?zG0\jλ<*6b%'ƙTew񰷏ZB;~lBtwT٠tDJ Gε$sҦp A^'d7_\Bk! ||YLOPܚ*6%XÚhEܦ?Ct?0l3 ݃Plȸ6tQWAum63" ?,[ӏ Hx!%"&L.#؍S,6U 7]p}o&"ZEf!mK7||Il]FY;<6JI9{oZ|߬.Cgix5la5!nD_ $y{wkBgxyq̾lSmVY\,QN =eի^2`i@RĤrF銩")\w}ԊV䩋{eح@Hsnͣf;8pK;-TKwLcNh}Cx1Nj^]?~J`| c !9X|RDmiXZQRfnR?5a$?s '[5.es<X_bstsE܇bYzΡ#zY{/oڐ_ͅ;Qlsf&062\* y&O:cƯm0Ȯu~?Yى;0kJKT;zNG">Ph3@Â~seT ÌAFʍk;+VsgЋM.iNBd`vHƚZa(fVsiv>O7@؇vfl/{mM5Uk{uoKS6+JߒQnNjwȎ^6"FJ^@Yџ̋|K`9 lpD^N-'.6?ÿ+LC1`lԱ"YæDw}nh"C(8w[P෱ꍓR" n;uf#2^0.mnpKqёr;|. VkR/5<t3= :Ov[U فpP{E"&Ev|#aߩ/2"1ư/ -0H]U T#G⭎ z }v?4Rr!SuElu [!&_Y71>dLM`RNѴ"i@Zs1ˢ =iІvВ}]?.O_Z1ev*U1 $t..B 9R&j}q A@eJқzU6EZҊHTRV>70`aҦ8PZv_@`p &yP::MRTb287]K(o"уFp}iRQJ'tPם )T:?wFM /0:)\575 ~7e}mUSE(#Ą=ָvCxIH_$hdw$GQWkusbufO ;Y&=z N#RfwowcEC Y(I3繆)x9NAǰE4뜭hۮaUH>wN0$!~^P2RK;ܶD_O@hMM$Vȯx-2Z;ֹ8y|O_ZL&W6`Sșcgeڝlnw,7;f 1Ae|DL;=O׸KݰzkkiSd(hSyaN󁪁'Faݵ]݅p6>*m+ė⋡%-FƷ8. Dԫ'@u}>3I6ǢU`.f9u\A_x̱ngQf-L13j=e^ڮA\/<iDžԚ q$>g%\R;7r~3E49RvЩj.Lc&5495qcbz MޙpWdXJ , 6NNVmXfÂ$Cjr`cb'ܪagmDX:}U?C:3H(R]:}8H7rK=DsUB}Xn RfCWF+$e_7]ޅ'],ٔ;s,]e(:M0FhUa q5Nt#4T]AS$Z`cIi!_[3񭙬).JI:G1UoM^:_@G\T"i:MA1eR%#6+frg(nmI֠nb0tZIR;̙uۏ]NX?V]].a&~(%ej,dJUoybБ؉ӶfoӤYr8lx5wj{_>)9C^7ŏ;A)>:׫vŚTH>;E] iقßLk&K>0/ָiԥqg?1b?٘šf$aKO %alDF.iHB.טdzݏؕiZ#k̥%MϊP=H]eȝ Bk 1P1iezΥFAnD4rh#kl7CƷcO_ߺ@6_yqkg ,98MC)X7jw MT"PW ng-MہI;ʤz iv+P&J M,YNp]3.V-:>{3IXMHM0QY(s|q8?x;jpZ7f a]YאDL*^Bn202 B!'a\IS,rfqBAP[6W6gnEHkQYX;<$b#Wc],ذh5{h%5ꋣT2Vu*=4!W *\1BO%w4RGM4Gz.{8]jG[ O:ӈ<0ZV ״3٪Ig\T|:=צUְ 80Ut"%<_@MpKt胎=dƺAy_%rn K' r~ʹ;C!ȡzg[W榢 % 6|B rT/#D"C4UҦm#S KguA9 \ƪPs2īB !u$;ڝA@!;UUKOV{+0m:գOR=@_<M)x7/Zs@$K ,8|Ywc.QS wLQBlb'ӘMwvFq Yx,L.v'Y%lC(Q~1k#0oj3~ ͅݽ*{V*}G .r@.)k |I CH6|qʲ%9S lFPr pK#??үˊ?5EEh$Oc~W Aa%8'u5j֯mdcmGwn bqqqAZvrSx+OmD]Ō0%'E\Y A$^NNq:/Ddw[wsgA?Jf= O{ڛ 8_wĦ#|Ȼ 22Ѿٮsg`'o&L`:@xnI܎ׅH5v ?߇o,wDAu:w=Uo] 􆟞nSdjfT^ýjWoP'aF4<2.+)vT}SKG#E#ϕ{3)j/b4TNWX' ̖^`fD΅bmr bZH8U[GAٱN?|16.2B+R"\d۹_. p'Q:^E㮵f AL(j'F3Ĉ {F!N $"k/vz*@mTBjHA [)pDbe dKWhZ3hsB@Ӌ^i/M;# `eQ?t mk%GJTt`ǼQ-mܹxGL9iM90'>=r{֊,ubU> Eоp&%^ mG]ϪNz9j|Q4b|yGH8?ܥp\7!|e6~[#4D er&of. >) w0SЊJ%i.n#&z0Dvg_)y{Z"7:zN0cmQ6U~Ƈx;R?&}Ϣn>\)h,&D(w/ϓ#"AFUY\%>j1FӍ6ܜ** Pug]|3na`d Mx],y ya!E}VGsx 4R {Nf!e EH#uZ*1*e5DspO#GK4Kd{a#SX WDPL ߮.wꎏoi >ٽ= )+4- #C8 `F:iĻƱuL %AI" _1?$gl+b/|Fԓ?R0)JMOhÂGUUau[[ X*=̆h)->w?.|ui)& 8iՓh(,o>[StL'踿DRzw P{J%jktY׀~3sOxP4HQb=xf(WuqJ`&P#]1lPȧmdP灱`xA25^bz㏃%8$}-HPKUp `pII"ajpXf]Q9}@˹> SIy$N$\#yVn C֓RJbco銞[}qgN E(PX1֖q& B,jI:.8:$Z$|{i*@B2}Ng(K5Hݞ|в 嬦gKfʇl 2q`ZԸP~;K@ QwNv(</>) 8`uV6Hc1o B5 4+.3Js "U^K\?/$RwQmڲ 萮&{bX8(܅qv>df?}gwO)Meam 3mW{`g=KkDmgZC?,av26C(, X4Frgڱ \a E6F$8JFE>s"jp\*mͨzjT,S=8HVG>[פłN,B.=)J,cde,ih?t ěUZjA0>9>%>XIyX}23Ygq&΄Uu0/T1T8um#|$;q5s_2#-N@^˦WXľ 2]1?DZsW1.4قpu H#bXRT.vNhϢ]:!S> 84 |)S~KD]N:v|_@u Q%q@pLהjU/ª@暜P-eݚpĵYLFE٩{BFB<[C~;d^0m̳y&n E۪{۬AXafj,ϧ~ͣ^D1L{=UQ0" "]Dvb!*Sx>Y*~!n Pρfz@+Vuܧc$"نZ MPWanQ/L | 1_Ȍ07x;+g@tY٬y`5̢"?x׊֜džwΨe=;K3Wl|tG.,K^`]Vӑy4_)쬺 &HT SCmv|ׅ߲$*A-+R nzhC;YW$؊` ͍qL33/:e,4νTƞ}'cPG+1|'!',{P L+eB=|hHM|킊O=ā!;sUk@IAJ£s+{=Ÿ W=0lh7K1\0ָYX;o[I,S!,dz'zASpSxlDz{˂u2/{ 3j]6 0yt?W[8^d) lu*d͠fhx7D k>y)Vs-!f* pv7nǂyEGc kX#|ҪF!} oŬ5z/"Q6Y` =^=9}zCf?K]n. 9ܣ@G)] $͕c&"'Sש%u0g8`ְ1ɣA_a9=ph荽`)2͎CcgIbj&X&3&=Ӵ S#v?m?K 9^ YZ