ipa-common-4.5.4-10.el7.centos.3>t  DH`p[;$ƨ1P4/Ȃ dlΌkbzbKNT?nGn YWoC7/BM{50ڪϋɪ9]W ⢐I:EO?HUez8!^P6>!sڿ,ĄhIV@Dz{><Zt)ZȧC67pYJs=+:NJNJk9A. =Z#&6Qtr,U,(J`%WeP`w48zWb1MoDs *!SDP);nj1m!;Ehh`ai>tQK_Y DQU3ř[DJ=Ŋ sBX+5`}8oa6xw i7QyHm*KH9D#ֹQa&sh8۾!D'N OdcJQwY-[]"^atpc3c5e8ab75bc8ddb8ba1b824682c04cef4e9fff0 1[;$ƨ?~ չ/L3[+~X4F" (@5 8 ;^A < \' mjo,&hG –S"|cf8]Ga{Wݿ:n -VI(MS: n#ޟ@y!߹Q" fr?X"!T|<Paa%A?TZK™xfP4>`P%l!d}&Op5RM AtjѬ)f#!Q ٌ*gi)y߳ԋNSb aUCblX (Ε3CWHaY u>V%T 9XK I7ܠ.i[P373K96<()趍B& PYyRuyҬ#!br{O.1xih$sН5f.`Lt6s'gC=<?System Environment/Librarieshttp://www.freeipa.org/linuxnoarch : {K!!(&Dzy )X \=YA큤A큤[3YYYY[3YY[3[3[3[3[3[3[3[3[3[3[3[3[3[3[3[3[3[3[3[3[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-4.5.4-10.el7.centos.3.src.rpmfreeipa-commonipa-common    rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-1ipa-pythonfreeipa-commonfreeipa-python4.2.914.5.44.11.3[2*[d@ZZ̧@Zz@Z\ZV@Z1@Z%8ZYZ@Y@Y+@Y@YX@YY@Y@Y{'@Yf@YRHYJ_YBvYA%@Y7Y7Y%uYYYY @Y.XXQ@XX@XۡXP@XX,X@X|@X|@XS@XOXOXN@XX2@WW@W@WiWQW@W@WWE@W W@W~Wv[@Wj}Wj}WEWDB@WDB@W>@W@V@VVZV@U@UYU@Uݪ@Uݪ@Uݪ@UoUU(UK@Ub@UJ@UU @U hTE@T T}TTZ@TZ@Tp@T5T@TuTto@TsTl@Td@Ta@T[bTG@TG@TFJT)IT%U@T$TSS:@S2@S1oS!S!S L@S L@Sc@SS @Rb@R@R@RUR@RRx@RR=RʚRƦ@RkRv@RG@RiRz/@RxRsRo@Ro@R^RW@RNR@-@R/ R-@R(r@R7RZ@R R R@R@R@R@R@R6QQQ'@Q@QvwQu&@Qm=@QZ@QVQ(@Q@PPPPPx@Px@PnPj@P\VPG>P@@P4P.2@PP @M6@M.@M.@M.@M-M M@L!LfLNLdLLLzLe3La?@LD>@L#HL#HL@K/KՀ@KK@KKs@Kie@K`*KK@K @JJ@J@J@JJB@J{IIIm@I1Iq@IKIFFI9I1.Ih@IIP@H@HXHO@H-w@H HHH@G߮GGgGs@G@G@G@G}G}G}GG@GC@GkGDG<4G)G(n@G3G@GJF@FS@FFuF@CentOS Sources - 4.5.4-10.el7.centos.3Rob Crittenden - 4.5.4-10.el7.3Florence Blanc-Renaud - 4.5.4-10.el7.2Florence Blanc-Renaud - 4.5.4-10.el7.1Florence Blanc-Renaud - 4.5.4-10.el7Florence Blanc-Renaud - 4.5.4-9.el7Florence Blanc-Renaud - 4.5.4-8.el7Florence Blanc-Renaud - 4.5.4-7.el7Alexander Bokovoy - 4.5.4-6.el7Alexander Bokovoy - 4.5.4-5.el7Pavel Vomacka - 4.5.4-4.el7Rob Crittenden - 4.5.4-3.el7Felipe Barreto - 4.5.4-2.el7Pavel Vomacka - 4.5.4-1.el7Felipe Barreto - 4.5.0-21.el7.2.2Felipe Barreto - 4.5.0-21.el7.2Pavel Vomacka - 4.5.0-21.el7.1.2Pavel Vomacka - 4.5.0-21.el7.1.1Pavel Vomacka - 4.5.0-21.el7.1Pavel Vomacka - 4.5.0-21.el7Pavel Vomacka - 4.5.0-20.el7Pavel Vomacka - 4.5.0-19.el7Pavel Vomacka - 4.5.0-18.el7Pavel Vomacka - 4.5.0-17.el7Pavel Vomacka - 4.5.0-16.el7Pavel Vomacka - 4.5.0-15.el7Pavel Vomacka - 4.5.0-14.el7Pavel Vomacka - 4.5.0-13.el7Pavel Vomacka - 4.5.0-12.el7Jan Cholasta - 4.5.0-11.el7Jan Cholasta - 4.5.0-10.el7Jan Cholasta - 4.5.0-9.el7Jan Cholasta - 4.5.0-8.el7Jan Cholasta - 4.5.0-7.el7Pavel Vomacka - 4.5.0-6.el7Jan Cholasta - 4.5.0-5.el7Jan Cholasta - 4.5.0-4.el7Jan Cholasta - 4.5.0-3.el7Jan Cholasta - 4.5.0-2.el7Jan Cholasta - 4.5.0-1.el7Jan Cholasta - 4.4.0-14.7Jan Cholasta - 4.4.0-14.6Jan Cholasta - 4.4.0-14.5Jan Cholasta - 4.4.0-14.4Jan Cholasta - 4.4.0-14.3Jan Cholasta - 4.4.0-14.2Jan Cholasta - 4.4.0-14.1Jan Cholasta - 4.4.0-14Jan Cholasta - 4.4.0-13Petr Vobornik - 4.4.0-12Jan Cholasta - 4.4.0-11Jan Cholasta - 4.4.0-10Jan Cholasta - 4.4.0-9Jan Cholasta - 4.4.0-8Jan Cholasta - 4.4.0-7Jan Cholasta - 4.4.0-6Jan Cholasta - 4.4.0-5Jan Cholasta - 4.4.0-4Jan Cholasta - 4.4.0-3Petr Vobornik - 4.4.0-2.1Petr Vobornik - 4.4.0-2Jan Cholasta - 4.4.0-1Jan Cholasta - 4.4.0-0.2.alpha1Jan Cholasta - 4.4.0-0.1.alpha1Jan Cholasta - 4.3.1-0.201605241723GIT1b427d3.1Jan Cholasta - 4.3.1-0.201605241723GIT1b427d3Jan Cholasta - 4.3.1-0.201605191449GITf8edf37.1Jan Cholasta - 4.3.1-0.201605191449GITf8edf37Jan Cholasta - 4.2.0-16Jan Cholasta - 4.2.0-15Jan Cholasta - 4.2.0-14Jan Cholasta - 4.2.0-13Jan Cholasta - 4.2.0-12Jan Cholasta - 4.2.0-11Jan Cholasta - 4.2.0-10Jan Cholasta - 4.2.0-9Jan Cholasta - 4.2.0-8Jan Cholasta - 4.2.0-7Jan Cholasta - 4.2.0-6Jan Cholasta - 4.2.0-5Jan Cholasta - 4.2.0-4Jan Cholasta - 4.2.0-3Jan Cholasta - 4.2.0-2Jan Cholasta - 4.2.0-1Jan Cholasta - 4.2.0-0.2.alpha1Jan Cholasta - 4.2.0-0.1.alpha1Jan Cholasta - 4.1.0-18.3Alexander Bokovoy - 4.1.0-18.2Jan Cholasta - 4.1.0-18.1Martin Kosek - 4.1.0-18Jan Cholasta - 4.1.0-17Jan Cholasta - 4.1.0-16Jan Cholasta - 4.1.0-15Jan Cholasta - 4.1.0-14Jan Cholasta - 4.1.0-13Jan Cholasta - 4.1.0-12Jan Cholasta - 4.1.0-11Jan Cholasta - 4.1.0-10Jan Cholasta - 4.1.0-9Jan Cholasta - 4.1.0-8Jan Cholasta - 4.1.0-7Jan Cholasta - 4.1.0-6Jan Cholasta - 4.1.0-5Jan Cholasta - 4.1.0-4Jan Cholasta - 4.1.0-3Jan Cholasta - 4.1.0-2Jan Cholasta - 4.1.0-1Jan Cholasta - 4.1.0-0.1.alpha1Petr Vobornik - 4.0.3-3Jan Cholasta - 4.0.3-2Jan Cholasta - 4.0.3-1Martin Kosek - 3.3.3-29Martin Kosek - 3.3.3-28Martin Kosek - 3.3.3-27Martin Kosek - 3.3.3-26Martin Kosek - 3.3.3-25Martin Kosek - 3.3.3-24Martin Kosek - 3.3.3-23Martin Kosek - 3.3.3-22Martin Kosek - 3.3.3-21Martin Kosek - 3.3.3-20Martin Kosek - 3.3.3-19Martin Kosek - 3.3.3-18Martin Kosek - 3.3.3-17Martin Kosek - 3.3.3-16Daniel Mach - 3.3.3-15Martin Kosek - 3.3.3-14Martin Kosek - 3.3.3-13Martin Kosek - 3.3.3-12Martin Kosek - 3.3.3-11Martin Kosek - 3.3.3-10Martin Kosek - 3.3.3-9Martin Kosek - 3.3.3-8Daniel Mach - 3.3.3-7Martin Kosek - 3.3.3-6Martin Kosek - 3.3.3-5Martin Kosek - 3.3.3-4Martin Kosek - 3.3.3-3Martin Kosek - 3.3.3-2Martin Kosek - 3.3.3-1Martin Kosek - 3.3.2-5Martin Kosek - 3.3.2-4Martin Kosek - 3.3.2-3Martin Kosek - 3.3.2-2Martin Kosek - 3.3.2-1Martin Kosek - 3.3.1-5Martin Kosek - 3.3.1-4Martin Kosek - 3.3.1-3Martin Kosek - 3.3.1-2Rob Crittenden - 3.3.1-1Rob Crittenden - 3.3.0-7Martin Kosek - 3.3.0-6Martin Kosek - 3.3.0-5Martin Kosek - 3.3.0-4Martin Kosek - 3.3.0-3Martin Kosek - 3.3.0-2Martin Kosek - 3.3.0-1Martin Kosek - 3.3.0-0.2.beta2Martin Kosek - 3.3.0-0.1.beta2Martin Kosek - 3.2.2-1Martin Kosek - 3.2.1-1Rob Crittenden - 3.2.0-2Rob Crittenden - 3.2.0-1Rob Crittenden - 3.2.0-0.4.beta1Rob Crittenden - 3.2.0-0.3.beta1Rob Crittenden - 3.2.0-0.2.beta1Martin Kosek - 3.2.0-0.1.pre1Kevin Fenzi 3.1.2-4Kevin Fenzi - 3.1.2-3Fedora Release Engineering - 3.1.2-2Rob Crittenden - 3.1.2-1Martin Kosek - 3.1.0-2Rob Crittenden - 3.1.0-1Martin Kosek - 3.0.0-3Rob Crittenden - 3.0.0-2Rob Crittenden - 3.0.0-1Rob Crittenden - 3.0.0-0.10Martin Kosek - 3.0.0-0.9Rob Crittenden - 3.0.0-0.8Rob Crittenden - 3.0.0-0.7Rob Crittenden - 3.0.0-0.6Alexander Bokovoy - 3.0.0-0.5Rob Crittenden - 3.0.0-0.4Martin Kosek - 3.0.0-0.3Alexander Bokovoy - 3.0.0-0.2Rob Crittenden - 3.0.0-0.1Rob Crittenden - 2.2.0-1Rob Crittenden - 2.1.90-0.2Rob Crittenden - 2.1.90-0.1Alexander Bokovoy - 2.1.4-5Martin Kosek - 2.1.4-4Alexander Bokovoy - 2.1.4-3Alexander Bokovoy - 2.1.4-2Rob Crittenden - 2.1.4-1Rob Crittenden - 2.1.3-8Alexander Bokovoy - 2.1.3-7Alexander Bokovoy - 2.1.3-6Fedora Release Engineering - 2.1.3-5Alexander Bokovoy - 2.1.3-4Alexander Bokovoy - 2.1.3-3Alexander Bokovoy - 2.1.3-2Alexander Bokovoy - 2.1.3-1Alexander Bokovoy - 2.1.2-1Rob Crittenden - 2.1.0-1Simo Sorce - 2.0.1-2Rob Crittenden - 2.0.1-1Rob Crittenden - 2.0.0-1Rob Crittenden - 2.0.0-0.4.rc2Rob Crittenden - 2.0.0-0.3.rc1Rob Crittenden - 2.0.0-0.1.rc1Fedora Release Engineering - 2.0.0-0.2.beta2Rob Crittenden - 2.0.0-0.1.beta2Rob Crittenden - 2.0.0-0.2.beta.git80e87e7Rob Crittenden - 2.0.0-0.1.beta.git80e87e7Rob Crittenden - 1.99-41Adam Young - 1.99-40Simo Sorce - 1.99-39Simo Sorce - 1.99-38Rob Crittenden - 1.99-37Rob Crittenden - 1.99-36Rob Crittenden - 1.99-35Jr Aquino - 1.99-34Simo Sorce - 1.99-33Rob Crittenden - 1.99-32Rob Crittenden - 1.99-31Rob Crittenden - 1.99-30Rob Crittenden - 1.99-29Rob Crittenden - 1.99-28Rob Crittenden - 1.99-27Rob Crittenden - 1.99-26Rob Crittenden - 1.99-25Adam Young - 1.99-24Rob Crittenden - 1.99-23Rob Crittenden - 1.99-22Rob Crittenden - 1.99-21Rob Crittenden - 1.99-20Rob Crittenden - 1.99-19Jason Gerard DeRose - 1.99-18Jason Gerard DeRose - 1.99-17Jason Gerard DeRose - 1.99-16Rob Crittenden - 1.99-15Jason Gerard DeRose - 1.99-14Rob Crittenden - 1.99-13Rob Crittenden - 1.99-12Rob Crittenden - 1.99-11Rob Crittenden - 1.99-10Rob Crittenden - 1.99-9Jason Gerard DeRose - 1.99-8Rob Crittenden - 1.99-7Rob Crittenden - 1.99-6Rob Crittenden - 1.99-5Rob Crittenden - 1.99-4Rob Crittenden - 1.99-3Rob Crittenden - 1.99-2Rob Crittenden - 1.99-1Tomas Mraz - 1.2.1-3Dan Walsh - 1.2.1-2Simo Sorce - 1.2.1-1Simo Sorce - 1.2.1-0Ignacio Vazquez-Abrams - 1.2.0-4Simo Sorce - 1.2.0-3Simo Sorce - 1.2.0-2Rob Crittenden - 1.2.0-1Simo Sorce - 1.1.0-3Rob Crittenden - 1.1.0-2Rob Crittenden - 1.1.0-1Rob Crittenden - 1.0.0-5Rob Crittenden - 1.0.0-4Rob Crittenden - 1.0.0-3Rob Crittenden - 1.0.0-2Rob Crittenden - 1.0.0-1Rob Crittenden 0.99-12Rob Crittenden 0.99-11Rob Crittenden 0.99-10Rob Crittenden 0.99-9Rob Crittenden 0.99-8Rob Crittenden 0.99-7Rob Crittenden 0.99-6Rob Crittenden 0.99-5Rob Crittenden 0.99-4Rob Crittenden 0.99-3Rob Crittenden 0.99-2Rob Crittenden 0.99-1Rob Crittenden - 0.6.0-2Karl MacMillan - 0.6.0-1Karl MacMillan - 0.5.0-1Rob Crittenden - 0.4.1-2Karl MacMillan - 0.4.1-1Karl MacMillan - 0.4.0-6Rob Crittenden - 0.4.0-5Rob Crittenden - 0.4.0-4Karl MacMillan - 0.4.0-3Karl MacMillan - 0.4.0-2Karl MacMillan - 0.2.0-1Rob Crittenden - 0.1.0-3Rob Crittenden - 0.1.0-2Karl MacMillan - 0.1.0-1- Roll in CentOS Branding- Resolves: #1579190 Improve Custodia client and key distribution handling - Use single Custodia instance in installers- Resolves: #1579189 nsds5ReplicaReleaseTimeout should be set by default - Add nsds5ReplicaReleaseTimeout to replica config - Fix upgrade (update_replica_config) in single master mode - Resolves: #1579190 Improve Custodia client and key distribution handling - Use single Custodia instance in installers - Resolves: #1579203 4.5.0 -> 4.5.4 upgrade breaks in ipa-server-upgrade: No such file or directory: '/var/lib/pki/pki-tomcat/conf/ca/CS.cfg' - Don't try to backup CS.cfg during upgrade if CA is not configured- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1) - Add a notice to restart ipa services after certs are installed - Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode - Fix OTP validation in FIPS mode - Increase the default token key size - Revert "Don't allow OTP or RADIUS in FIPS mode" - Log errors from NSS during FIPS OTP key import - Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type - ipa-replica-install: make sure that certmonger picks the right master - Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface - replica-install: pass --ip-address to client install- Resolves: #1540361 ipa-advise for smartcards is out-of-date - ipa-advise for smartcards updated- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page - Add --force-join into ipa-replica-install manpage - Resolves: #1457876 ipa-backup fails silently - Changed ownership of ldiffile to DS_USER - Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running - Checks if Dir Server is installed and running before IPA installation - Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values - WebUI: Add positive number validator - WebUI: change validator of page size settings - WebUI: fix jslint error- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object - WebUI: make keytab tables on service and host pages writable - Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option - Idviews: fix objectclass violation on idview-add - Resolves: #1451576 ipa cert-request failed to generate certificate from csr - Fixing the cert-request comparing whole email address case-sensitively.- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received - adtrust: filter out subdomains when defining our topology to AD - Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled - Don't allow OTP or RADIUS in FIPS mode - Resolves: #1494226 IPA User Details not being displayed in WebUI - Fix cert-find for CA-less installations - Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid - Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal - ipa-getkeytab man page: add more details about the -r option - Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None) - ipaserver/plugins/trust.py; fix some indenting issues - trust: detect and error out when non-AD trust with IPA domain name exists - ipaserver/plugins/trust.py: pep8 compliance - Resolves: #1511019 ipa-restore broken with python2 - Fix ipa-restore (python2) - Resolves: #1511607 ipa-backup does not backup Custodia keys and files - Backup ipa-custodia conf and keys - Resolves: #1512482 kra install fails after ipa cert renewed - Don't use admin cert during KRA installation - Prevent set_directive from clobbering other keys - pep8: reduce line lengths in CAInstance.__enable_crl_publish - installutils: refactor set_directive - Add tests for installutils.set_directive - Add safe DirectiveSetter context manager - Old pylint doesn't support bad python3 option - Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode - Fix ca less IPA install on fips mode- Resolves: #1520279 - rebuild against samba 4.7- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads - Resolves: #1378892 host-find slowness caused by missing host attributes in index- Resolves: #1388135 [RFE] limit the retro changelog to dns subtree. - ldap: limit the retro changelog to dns subtree - Resolves: #1427798 Use X509v3 Basic Constraints "CA:TRUE" instead of "CA:FALSE" IPA CA CSR - Include the CA basic constraint in CSRs when renewing a CA - Resolves: #1493145 ipa-replica-install might fail because of an already existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX - Checks if replica-s4u2proxy.ldif should be applied - Resolves: #1493150 [RFE] set nsslapd-ignore-time-skew: on by default - ds: ignore time skew during initial replication step - ipa-replica-manage: implicitly ignore initial time skew in force-sync - Resolves: #1500218 Replica installation at domain-level 0 fails against upgraded ipa-server - Fix ipa-replica-conncheck when called with --principal - Resolves: #1506188 server-del doesn't remove dns-server configuration from ldap- Drop workaround for building on AArch64 (#1482244) - Temporarily reduce Requires on python-netaddr to 0.7.5-7 (#1506485)- Resolves: #1461177 ipa-otptoken-import - XML file is missing PBKDF2 parameters! - Resolves: #1464205 NULL LDAP context in call to ldap_search_ext_s during search in cn=ad, cn=trusts,dc=example,dc=com - Resolves: #1467887 iommu platform support for ipxe - Resolves: #1477178 [ipa-replica-install] - 406 Client Error: Failed to validate message: Incorrect number of results (0) searching forpublic key for host - Resolves: #1478251 IPA WebUI does not work after upgrade from IPA 4.4 to 4.5 - Resolves: #1480102 ipa-server-upgrade failes with "This entry already exists" - Resolves: #1482802 Unable to set ca renewal master on replica - Resolves: #1484428 Updating from RHEL 7.3 fails with Server-Cert not found (ipa-server-upgrade) - Resolves: #1484826 FreeIPA/IdM installations which were upgraded from versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and thus startup of Web UI fails - Resolves: #1486283 TypeError in renew_ca_cert prevents from swiching back to self-signed CA - Resolves: #1469246 Replica install fails to configure IPA-specific temporary files/directories - Resolves: #1469480 bind package is not automatically updated during ipa-server upgrade process - Resolves: #1475238 Use CommonNameToSANDefault in default profile (new installs only) - Resolves: #1477703 IPA upgrade fails for latest ipa package- Use OpenJDK 8 to bootstrap on AArch64 until RH1482244 is resolved in buildroot - Resolves: #1470177 - Rebase IPA to latest 4.5.x version - Resolves: #1398594 ipa topologysuffix-verify should only warn about maximum number of replication agreements. - Resolves: #1404236 Web UI: Change "Host Based" and "Role Based" to "Host-Based" and "Role-Based" - Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running - Resolves: #1451576 ipa cert-request failed to generate certificate from csr - Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values - Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page - Resolves: #1463186 IPA shouldn't allow objectclass if not all in lower case - Resolves: #1478322 user-show command fails when sizelimit is configured to number <= number of entity which is user member of - Resolves: #1496775 Enterprise principals should be able to trigger a refresh of the trusted domain data in the KDC - Resolves: #1502533 Changing cert-find to go through the proxy instead of using the port 8080 - Resolves: #1502663 pkinit-status command fails after an upgrade from a pre-4.5 IPA - Resolves: #1498168 Error when trying to modify a PTR record - Resolves: #1457876 ipa-backup fails silently - Resolves: #1493531 In case full PKINIT configuration is failing during server/replica install the error message should be more meaningful. - Resolves: #1449985 Suggest CA installation command in KRA installation warning- Resolves: #1477367 ipa-server-upgrade timeouts on wait_for_open ports expecting IPA services listening on IPv6 ports - Make sure upgrade also checks for IPv6 stack - control logging of host_port_open from caller - log progress of wait_for_open_ports - Resolves: #1477243 ipa help command returns traceback when no cache is present - Store help in Schema before writing to disk - Disable pylint in get_help function because of type confusion.- Resolves: #1477178 - [ipa-replica-install] - 406 Client Error: Failed to validate message: Incorrect number of results (0) searching forpublic key for host - Always check peer has keys before connecting - Resolves: #1482802 - Unable to set ca renewal master on replica - Fix ipa config-mod --ca-renewal-master - Resolves: #1486283 - TypeError in renew_ca_cert prevents from swiching back to self-signed CA - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca) - Resolves: #1480102 - ipa-server-upgrade failes with "This entry already exists" - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists - Resolves: #1484826 - FreeIPA/IdM installations which were upgraded from versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and thus startup of Web UI fails - Adds whoami DS plugin in case that plugin is missing - Resolves: #1478251 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5 - Fixing how sssd.conf is updated when promoting a client to replica - Resolves: #1461177 - ipa-otptoken-import - XML file is missing PBKDF2 parameters! - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace - Resolves: #1484428 - Updating from RHEL 7.3 fails with Server-Cert not found (ipa-server-upgrade) - Backport 4-5: Fix ipa-server-upgrade with server cert tracking- Resolves: #1477703 IPA upgrade fails for latest ipa package - Restore old version of caIPAserviceCert for upgrade only- Resolves: #1475238 Use CommonNameToSANDefault in default profile (new installs only) - Restore old version of caIPAserviceCert for upgrade only- Resolves: #1455946 Provide a tooling automating the configuration of Smart Card authentication on a FreeIPA master - smart-card advises: configure systemwide NSS DB also on master - smart-card advises: add steps to store smart card signing CA cert - Allow to pass in multiple CA cert paths to the smart card advises - add a class that tracks the indentation in the generated advises - delegate the indentation handling in advises to dedicated class - advise: add an infrastructure for formatting Bash compound statements - delegate formatting of compound Bash statements to dedicated classes - Fix indentation of statements in Smart card advises - Use the compound statement formatting API for configuring PKINIT - smart card advises: use a wrapper around Bash `for` loops - smart card advise: use password when changing trust flags on HTTP cert - smart-card-advises: ensure that krb5-pkinit is installed on client - Resolves: #1475238 Use CommonNameToSANDefault in default profile (new installs only) - Add CommonNameToSANDefault to default cert profile - Resolves: #1464205 NULL LDAP context in call to ldap_search_ext_s during search in cn=ad,cn=trusts,dc=example,dc=com - NULL LDAP context in call to ldap_search_ext_s during search- Resolves: #1469246 Replica install fails to configure IPA-specific temporary files/directories - replica install: drop-in IPA specific config to tmpfiles.d - Resolves: #1469480 bind package is not automatically updated during ipa-server upgrade process - Bumped Required version of bind-dyndb-ldap and bind package- Resolves: #1452216 Replica installation grants HTTP principal access in WebUI - Make sure we check ccaches in all rpcserver paths- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL internal error, assertion failed: Digest MD4 forbidden in FIPS mode! - ipa-sam: replace encode_nt_key() with E_md4hash() - ipa_pwd_extop: do not generate NT hashes in FIPS mode - Resolves: #1377973 ipa-server-install fails when the provided or resolved IP address is not found on local interfaces - Fix local IP address validation - ipa-dns-install: remove check for local ip address - refactor CheckedIPAddress class - CheckedIPAddress: remove match_local param - Remove ip_netmask from option parser - replica install: add missing check for non-local IP address - Remove network and broadcast address warnings- Resolves: #1449189 ipa-kra-install timeouts on replica - kra: promote: Get ticket before calling custodia- Resolve: #1455946 Provide a tooling automating the configuration of Smart Card authentication on a FreeIPA master - server certinstall: update KDC master entry - pkinit manage: introduce ipa-pkinit-manage - server upgrade: do not enable PKINIT by default - Extend the advice printing code by some useful abstractions - Prepare advise plugin for smart card auth configuration - Resolve: #1461053 allow to modify list of UPNs of a trusted forest - trust-mod: allow modifying list of UPNs of a trusted forest - WebUI: add support for changing trust UPN suffixes- Resolves: #1377973 ipa-server-install fails when the provided or resolved IP address is not found on local interfaces - Only warn when specified server IP addresses don't match intf - Resolves: #1438016 gssapi errors after IPA server upgrade - Bump version of python-gssapi - Resolves: #1457942 certauth: use canonical principal for lookups - ipa-kdb: use canonical principal in certauth plugin - Resolves: #1459153 Do not send Max-Age in ipa_session cookie to avoid breaking older clients - Add code to be able to set default kinit lifetime - Revert setting sessionMaxAge for old clients- Resolves: #1442233 IPA client commands fail when pointing to replica - httpinstance: wait until the service entry is replicated - Resolves: #1456769 ipaAnchorUUID index incorrectly configured and then not indexed - Fix index definition for ipaAnchorUUID - Resolves: #1438016 gssapi errors after IPA server upgrade - Avoid possible endless recursion in RPC call - rpc: preparations for recursion fix - rpc: avoid possible recursion in create_connection - Resolves: #1446087 services entries missing krbCanonicalName attribute. - Changing cert-find to do not use only primary key to search in LDAP. - Resolves: #1452763 ipa certmaprule change not reflected in krb5kdc workers - ipa-kdb: reload certificate mapping rules periodically - Resolves: #1455541 after upgrade login from web ui breaks - kdc.key should not be visible to all - Resolves: #1435606 Add pkinit_indicator option to KDC configuration - ipa-kdb: add pkinit authentication indicator in case of a successful certauth - Resolves: #1455945 Enabling OCSP checks in mod_nss breaks certificate issuance when ipa-ca records are not resolvable - Turn off OCSP check - Resolves: #1454483 rhel73 ipa ui - cannot del server - IPA Error 903 - server_del - TypeError: 'NoneType' object is not iterable - fix incorrect suffix handling in topology checks- Resolves: #1438731 Extend ipa-server-certinstall and ipa-certupdate to handle PKINIT certificates/anchors - certdb: add named trust flag constants - certdb, certs: make trust flags argument mandatory - certdb: use custom object for trust flags - install: trust IPA CA for PKINIT - client install: fix client PKINIT configuration - install: introduce generic Kerberos Augeas lens - server install: fix KDC PKINIT configuration - ipapython.ipautil.run: Add option to set umask before executing command - certs: do not export keys world-readable in install_key_from_p12 - certs: do not export CA certs in install_pem_from_p12 - server install: fix KDC certificate validation in CA-less - replica install: respect --pkinit-cert-file - cacert manage: support PKINIT - server certinstall: support PKINIT - Resolves: #1444432 CA-less pkinit not installable with --pkinit-cert-file option - certs: do not export CA certs in install_pem_from_p12 - server install: fix KDC certificate validation in CA-less - Resolves: #1451228 ipa-kra-install fails when primary KRA server has been decommissioned - ipa-kra-install: fix pkispawn setting for pki_security_domain_hostname - Resolves: #1451712 KRA installation fails on server that was originally installed as CA-less - ipa-ca-install: append CA cert chain into /etc/ipa/ca.crt - Resolves: #1441499 ipa cert-show does not raise error if no file name specified - ca/cert-show: check certificate_out in options - Resolves: #1449522 Deprecate `ipa pkinit-anonymous` command in FreeIPA 4.5+ - Remove pkinit-anonymous command - Resolves: #1449523 Provide an API command to retrieve PKINIT status in the FreeIPA topology - Allow for multivalued server attributes - Refactor the role/attribute member reporting code - Add an attribute reporting client PKINIT-capable servers - Add the list of PKINIT servers as a virtual attribute to global config - Add `pkinit-status` command - test_serverroles: Get rid of MockLDAP and use ldap2 instead - Resolves: #1452216 Replica installation grants HTTP principal access in WebUI - Fix rare race condition with missing ccache file - Resolves: #1455045 Simple service uninstallers must be able to handle missing service files gracefully - only stop/disable simple service if it is installed - Resolves: #1455541 after upgrade login from web ui breaks - krb5: make sure KDC certificate is readable - Resolves: #1455862 "ipa: ERROR: an internal error has occurred" on executing command "ipa cert-request --add" after upgrade - Change python-cryptography to python2-cryptography- Resolves: #1451804 "AttributeError: 'tuple' object has no attribute 'append'" error observed during ipa upgrade with latest package. - ipa-server-install: fix uninstall - Resolves: #1445390 ipa-[ca|kra]-install with invalid DM password break replica - ca install: merge duplicated code for DM password - installutils: add DM password validator - ca, kra install: validate DM password- Resolves: #1447284 Upgrade from ipa-4.1 fails when enabling KDC proxy - python2-ipalib: add missing python dependency - installer service: fix typo in service entry - upgrade: add missing suffix to http instance - Resolves: #1444791 Update man page of ipa-kra-install - ipa-kra-install manpage: document domain-level 1 - Resolves: #1441493 ipa cert-show raises stack traces when --certificate-out=/tmp - cert-show: writable files does not mean dirs - Resolves: #1441192 Add the name of URL parameter which will be check for username during cert login - Bump version of ipa.conf file - Resolves: #1378797 Web UI must check OCSP and CRL during smartcard login - Turn on NSSOCSP check in mod_nss conf - Resolves: #1322963 Errors from AD when trying to sign ipa.csr, conflicting template on - renew agent: respect CA renewal master setting - server upgrade: always fix certmonger tracking request - cainstance: use correct profile for lightweight CA certificates - renew agent: allow reusing existing certs - renew agent: always export CSR on IPA CA certificate renewal - renew agent: get rid of virtual profiles - ipa-cacert-manage: add --external-ca-type - Resolves: #1441593 error adding authenticator indicators to host - Fixing adding authenticator indicators to host - Resolves: #1449525 Set directory ownership in spec file - Added plugins directory to ipaclient subpackages - ipaclient: fix missing RPM ownership - Resolves: #1451279 otptoken-add-yubikey KeyError: 'ipatokenotpdigits' - otptoken-add-yubikey: When --digits not provided use default value- Resolves: #1449189 ipa-kra-install timeouts on replica - ipa-kra-install: fix check_host_keys- Resolves: #1438833 [ipa-replica-install] - 406 Client Error: Failed to validate message: Incorrect number of results (0) searching forpublic key for host - Make sure remote hosts have our keys - Resolves: #1442815 Replica install fails during migration from older IPA master - Refresh Dogtag RestClient.ca_host property - Remove the cachedproperty class - Resolves: #1444787 Update warning message when KRA installation fails - kra install: update installation failure message - Resolves: #1444896 ipa-server-install with external-ca fails in FIPS mode - ipa-server-install with external CA: fix pkinit cert issuance - Resolves: #1445397 GET in KerberosSession.finalize_kerberos_acquisition() must use FreeIPA CA - kerberos session: use CA cert with full cert chain for obtaining cookie - Resolves: #1447375 ipa-client-install: extra space in pkinit_anchors definition - ipa-client-install: remove extra space in pkinit_anchors definition - Resolves: #1447703 Fix SELinux contex of http.keytab during upgrade - Use proper SELinux context with http.keytab- Resolves: #1200767 [RFE] Allow Kerberos authentication for users with certificates on smart cards (pkinit) - spec file: bump krb5 Requires for certauth fixes - Resolves: #1438729 Configure local PKINIT on DL0 or when '--no-pkinit' option is used - separate function to set ipaConfigString values on service entry - Allow for configuration of all three PKINIT variants when deploying KDC - API for retrieval of master's PKINIT status and publishing it in LDAP - Use only anonymous PKINIT to fetch armor ccache - Stop requesting anonymous keytab and purge all references of it - Use local anchor when armoring password requests - Upgrade: configure local/full PKINIT depending on the master status - Do not test anonymous PKINIT after install/upgrade - Resolves: #1442427 ipa.ipaserver.install.plugins.adtrust. update_tdo_gidnumber: ERROR Default SMB Group not found - upgrade: adtrust update_tdo_gidnumber plugin must check if adtrust is installed - Resolves: #1442932 ipa restore fails to restore IPA user - restore: restart/reload gssproxy after restore - Resolves: #1444896 ipa-server-install with external-ca fails in FIPS mode - Fix CA/server cert validation in FIPS - Resolves: #1444947 Deadlock between topology and schema-compat plugins - compat-manage: behave the same for all users - Move the compat plugin setup at the end of install - compat: ignore cn=topology,cn=ipa,cn=etc subtree - Resolves: #1445358 ipa vault-add raises TypeError - vault: piped input for ipa vault-add fails - Resolves: #1445382 ipa vault-retrieve fails to retrieve data from vault - Vault: Explicitly default to 3DES CBC - Resolves: #1445432 uninstall ipa client automount failed with RuntimeWarning - automount install: fix checking of SSSD functionality on uninstall - Resolves: #1446137 pki_client_database_password is shown in ipaserver-install.log - Hide PKI Client database password in log file- Resolves: #1443869 Command "openssl pkcs12 ..." failed during IPA upgrade - Fix CAInstance.import_ra_cert for empty passwords- Resolves: #1431520 ipa cert-find runs a large number of searches, so IPA WebUI is slow to display user details page - cert: defer cert-find result post-processing - Resolves: #1435611 Tracebacks seen from dogtag-ipa-ca-renew-agent-submit helper when installing replica - server-install: No double Kerberos install - Resolves: #1437502 ipa-replica-install fails with requirement to use --force-join that is a client install option. - Add the force-join option to replica install - replicainstall: better client install exception handling - Resolves: #1437953 Server CA-less impossible option check - server-install: remove broken no-pkinit check - Resolves: #1441160 FreeIPA client <= 4.4 fail to parse 4.5 cookies - Add debug log in case cookie retrieval went wrong - Resolves: #1441548 ipa server install fails with --external-ca option - ext. CA: correctly write the cert chain - Resolves: #1441718 Conversion of CA-less server to CA fails on CA instance spawn - Fix CA-less to CA-full upgrade - Resolves: #1442133 Do not link libkrad, liblber, libldap_r and libsss_nss_idmap to every binary in IPA - configure: fix AC_CHECK_LIB usage - Resolves: #1442815 Replica install fails during migration from older IPA master - Fix RA cert import during DL0 replication - Related: #1442004 Building IdM/FreeIPA internally on all architectures - filtering unsupported packages - Build all subpackages on all architectures- Resolves: #1382053 Need to have validation for idrange names - idrange-add: properly handle empty --dom-name option - Resolves: #1435611 Tracebacks seen from dogtag-ipa-ca-renew-agent-submit helper when installing replica - dsinstance: reconnect ldap2 after DS is restarted by certmonger - httpinstance: avoid httpd restart during certificate request - dsinstance, httpinstance: consolidate certificate request code - install: request service certs after host keytab is set up - renew agent: revert to host keytab authentication - renew agent, restart scripts: connect to LDAP after kinit - Resolves: #1436987 ipasam: gidNumber attribute is not created in the trusted domain entry - ipa-sam: create the gidNumber attribute in the trusted domain entry - Upgrade: add gidnumber to trusted domain entry - Resolves: #1438679 [ipa-replica-install] - IncorrectPasswordException: Incorrect client security database password - Add pki_pin only when needed - Resolves: #1438348 Console output message while adding trust should be mapped with texts changed in Samba. - ipaserver/dcerpc: unify error processing - Resolves: #1438366 ipa trust-fetch-domains: ValidationError: invalid 'Credentials': Missing credentials for cross-forest communication - trust: always use oddjobd helper for fetching trust information - Resolves: #1441192 Add the name of URL parameter which will be check for username during cert login - WebUI: cert login: Configure name of parameter used to pass username - Resolves: #1437879 [copr] Replica install failing - Create system users for FreeIPA services during package installation - Resolves: #1441316 WebUI cert auth fails after ipa-adtrust-install - Fix s4u2self with adtrust- Resolves: #1318186 Misleading error message during external-ca IPA master install - httpinstance: make sure NSS database is backed up - Resolves: #1331443 Re-installing ipa-server after uninstall fails with "ERROR CA certificate chain in ... incomplete" - httpinstance: make sure NSS database is backed up - Resolves: #1393726 Enumerate all available request type options in ipa cert-request help - Hide request_type doc string in cert-request help - Resolves: #1402959 [RFE] Universal Smart Card to Identity mapping - spec file: bump libsss_nss_idmap-devel BuildRequires - server: make sure we test for sss_nss_getlistbycert - Resolves: #1437378 ipa-adtrust-install produced an error and failed on starting smb when hostname is not FQDN - adtrust: make sure that runtime hostname result is consistent with the configuration - Resolves: #1437555 ipa-replica-install with DL0 fails to get annonymous keytab - Always check and create anonymous principal during KDC install - Remove duplicate functionality in upgrade - Resolves: #1437946 Upgrade to FreeIPA 4.5.0 does not configure anonymous principal for PKINIT - Upgrade: configure PKINIT after adding anonymous principal - Remove unused variable from failed anonymous PKINIT handling - Split out anonymous PKINIT test to a separate method - Ensure KDC is propery configured after upgrade - Resolves: #1437951 Remove pkinit-related options from server/replica-install on DL0 - Fix the order of cert-files check - Don't allow setting pkinit-related options on DL0 - replica-prepare man: remove pkinit option refs - Remove redundant option check for cert files - Resolves: #1438490 CA-less installation fails on publishing CA certificate - Get correct CA cert nickname in CA-less - Remove publish_ca_cert() method from NSSDatabase - Resolves: #1438838 Avoid arch-specific path in /etc/krb5.conf.d/ipa-certmap - IPA-KDB: use relative path in ipa-certmap config snippet - Resolves: #1439038 Allow erasing ipaDomainResolutionOrder attribute - Allow erasing ipaDomainResolutionOrder attribute- Resolves: #1434032 Run ipa-custodia with custom SELinux context - Require correct custodia version- Resolves: #800545 [RFE] Support SUDO command rename - Reworked the renaming mechanism - Allow renaming of the sudorule objects - Resolves: #872671 IPA WebUI login for AD Trusted User fails - WebUI: check principals in lowercase - WebUI: add method for disabling item in user dropdown menu - WebUI: Add support for login for AD users - Resolves: #1200767 [RFE] Allow Kerberos authentication for users with certificates on smart cards (pkinit) - ipa-kdb: add ipadb_fetch_principals_with_extra_filter() - IPA certauth plugin - ipa-kdb: do not depend on certauth_plugin.h - spec file: bump krb5-devel BuildRequires for certauth - Resolves: #1264370 RFE: disable last successful authentication by default in ipa. - Set "KDC:Disable Last Success" by default - Resolves: #1318186 Misleading error message during external-ca IPA master install - certs: do not implicitly create DS pin.txt - httpinstance: clean up /etc/httpd/alias on uninstall - Resolves: #1331443 Re-installing ipa-server after uninstall fails with "ERROR CA certificate chain in ... incomplete" - certs: do not implicitly create DS pin.txt - httpinstance: clean up /etc/httpd/alias on uninstall - Resolves: #1366572 [RFE] Web UI: allow Smart Card authentication - configure: fix --disable-server with certauth plugin - rpcserver.login_x509: Actually return reply from __call__ method - spec file: Bump requires to make Certificate Login in WebUI work - Resolves: #1402959 [RFE] Universal Smart Card to Identity mapping - extdom: do reverse search for domain separator - extdom: improve cert request - Resolves: #1430363 [RFE] HBAC rule names command rename - Reworked the renaming mechanism - Allow renaming of the HBAC rule objects - Resolves: #1433082 systemctl daemon-reload needs to be called after httpd.service.d/ipa.conf is manipulated - tasks: run `systemctl daemon-reload` after httpd.service.d updates - Resolves: #1434032 Run ipa-custodia with custom SELinux context - Use Custodia 0.3.1 features - Resolves: #1434384 RPC client should use HTTP persistent connection - Use connection keep-alive - Add debug logging for keep-alive - Increase Apache HTTPD's default keep alive timeout - Resolves: #1434729 man ipa-cacert-manage install needs clarification - man ipa-cacert-manage install needs clarification - Resolves: #1434910 replica install against IPA v3 master fails with ACIError - Fixing replica install: fix ldap connection in domlvl 0 - Resolves: #1435394 Ipa-kra-install fails with weird output when backspace is used during typing Directory Manager password - ipapython.ipautil.nolog_replace: Do not replace empty value - Resolves: #1435397 ipa-replica-install can't install replica file produced by ipa-replica-prepare on 4.5 - replica prepare: fix wrong IPA CA nickname in replica file - Resolves: #1435599 WebUI: in self-service Vault menu item is shown even if KRA is not installed - WebUI: Fix showing vault in selfservice view - Resolves: #1435718 As a ID user I cannot call a command with --rights option - ldap2: use LDAP whoami operation to retrieve bind DN for current connection - Resolves: #1436319 "Truncated search results" pop-up appears in user details in WebUI - WebUI: Add support for suppressing warnings - WebUI: suppress truncation warning in select widget - Resolves: #1436333 Uninstall fails with No such file or directory: '/var/run/ipa/services.list' - Create temporaty directories at the begining of uninstall - Resolves: #1436334 WebUI: Adding certificate mapping data using certificate fails - WebUI: Allow to add certs to certmapping with CERT LINES around - Resolves: #1436338 CLI doesn't work after ipa-restore - Backup ipa-specific httpd unit-file - Backup CA cert from kerberos folder - Resolves: #1436342 Bump samba version, required for FIPS mode and privilege separation - Bump samba version for FIPS and priv. separation - Resolves: #1436642 [ipalib/rpc.py] - "maximum recursion depth exceeded" with ipa vault commands - Avoid growing FILE ccaches unnecessarily - Handle failed authentication via cookie - Work around issues fetching session data - Prevent churn on ccaches - Resolves: #1436657 Add workaround for pki_pin for FIPS - Generate PIN for PKI to help Dogtag in FIPS - Resolves: #1436714 [vault] cache KRA transport cert - Simplify KRA transport cert cache - Resolves: #1436723 cert-find does not find all certificates without sizelimit=0 - cert: do not limit internal searches in cert-find - Resolves: #1436724 Renewal of IPA RA fails on replica - dogtag-ipa-ca-renew-agent-submit: fix the is_replicated() function - Resolves: #1436753 Master tree fails to install - httpinstance.disable_system_trust: Don't fail if module 'Root Certs' is not available- Resolves: #1432630 python2-jinja2 needed for python2-ipaclient - Remove csrgen - Resolves: #1432903 Set GssProxy options to enable caching of ldap tickets - Add options to allow ticket caching- Resolves: #828866 [RFE] enhance --subject option for ipa-server-install - Resolves: #1160555 ipa-server-install: Cannot handle double hyphen "--" in hostname - Resolves: #1286288 Insufficient 'write' privilege to the 'ipaExternalMember' attribute - Resolves: #1321652 ipa-server-install fails when using external certificates that encapsulate RDN components in double quotes - Resolves: #1327207 ipa cert-revoke --help doesn't provide enough info on revocation reasons - Resolves: #1340880 ipa-server-install: improve prompt on interactive installation - Resolves: #1353841 ipa-replica-install fails to install when resolv.conf incomplete entries - Resolves: #1356104 cert-show command does not display Subject Alternative Names - Resolves: #1357511 Traceback message seen when ipa is provided with invalid configuration file name - Resolves: #1358752 ipa-ca-install fails on replica when IPA server is converted from CA-less to CA-full - Resolves: #1366572 [RFE] Web UI: allow Smart Card authentication - Resolves: #1367572 improve error message in ipa migrate-ds: mention ipa config-mod --enable-migration=TRUE - Resolves: #1367868 Add options to retrieve lightweight CA certificate/chain - Resolves: #1371927 Implement ca-enable/disable commands. - Resolves: #1372202 Add Users into User Group editors fails to show Full names - Resolves: #1373091 Adding an auth indicator from the CLI creates an extra check box in the UI - Resolves: #1375596 Ipa-server WebUI - long user/group name show wrong error message - Resolves: #1375905 "Normal" group type in the UI is confusing - Resolves: #1376040 IPA client ipv6 - invalid --ip-address shows traceback - Resolves: #1376630 IDM admin password gets written to /root/.dogtag/pki-tomcat/ca/pkcs12_password.conf - Resolves: #1376729 ipa-server-install script option --no_hbac_allow should match other options - Resolves: #1378461 IPA Allows Password Reuse with History value defined when admin resets the password. - Resolves: #1379029 conncheck failing intermittently during single step replica installs - Resolves: #1379858 [RFE] better debugging for ipa-replica-conncheck - Resolves: #1384310 ipa dnsrecord-add fails with Keyerror stack trace - Resolves: #1392778 Update man page for ipa-adtrust-install by removing --no-msdcs option - Resolves: #1392858 Rebase to FreeIPA 4.5+ - Rebase to 4.5.0 - Resolves: #1399133 Delete option shouldn't be available for hosts applied to view. - Resolves: #1399190 [RFE] Certificates issued by externally signed IdM CA should contain full trust chain - Resolves: #1400416 RFE: Provide option to take backup of IPA server before uninstalling IPA server - Resolves: #1400529 cert-request is not aware of Kerberos principal aliases - Resolves: #1401526 IPA WebUI certificates are grayed out on overview page but not on details page - Resolves: #1402959 [RFE] Universal Smart Card to Identity mapping - Resolves: #1404750 ipa-client-install fails to get CA cert via LDAP when non-FQDN name of IPA server is first in /etc/hosts - Resolves: #1409628 [RFE] Semi-automatic integration with external DNS using nsupdate - Resolves: #1413742 Backport request for bug/issue Change IP address validation errors to warnings - Resolves: #1415652 IPA replica install log shows password in plain text - Resolves: #1427897 different behavior regarding system wide certs in master and replica. - Resolves: #1430314 The ipa-managed-entries command failed, exception: AttributeError: ldap2- Resolves: #1419735 ipa-replica-install fails promotecustodia.create_replica with cert errors (untrusted) - added ssl verification using IPA trust anchor - Resolves: #1428472 batch param compatibility is incorrect - compat: fix `Any` params in `batch` and `dnsrecord` - Renamed patches 1011 and 1012 to 0159 and 0157, as they were merged upstream- Resolves: #1416454 replication race condition prevents IPA to install - wait_for_entry: use only DN as parameter - Wait until HTTPS principal entry is replicated to replica - Use proper logging for error messages- Resolves: #1365858 ipa-ca-install fails on replica when IPA Master is installed without CA - Set up DS TLS on replica in CA-less topology - Resolves: #1398600 IPA replica install fails with dirsrv errors. - Do not configure PKI ajp redirection to use "::1" - Resolves: #1413137 CVE-2017-2590 ipa: Insufficient permission check for ca-del, ca-disable and ca-enable commands - ca: correctly authorise ca-del, ca-enable and ca-disable- Resolves: #1370493 CVE-2016-7030 ipa: DoS attack against kerberized services by abusing password policy - ipa-kdb: search for password policies globally - Renamed patches 1011 and 1012 to 0151 and 0150, as they were merged upstream- Resolves: #1398670 Check IdM Topology for broken record caused by replication conflict before upgrading it - Check for conflict entries before raising domain level- Resolves: #1382812 Creation of replica for disconnected environment is failing with CA issuance errors; Need good steps. - gracefully handle setting replica bind dn group on old masters - Resolves: #1397439 ipa-ca-install on promoted replica hangs on creating a temporary CA admin - replication: ensure bind DN group check interval is set on replica config - add missing attribute to ipaca replica during CA topology update - Resolves: #1401088 IPA upgrade of replica without DNS fails during restart of named-pkcs11 - bindinstance: use data in named.conf to determine configuration status- Resolves: #1370493 CVE-2016-7030 ipa: DoS attack against kerberized services by abusing password policy - password policy: Add explicit default password policy for hosts and services - Resolves: #1395311 CVE-2016-9575 ipa: Insufficient permission check in certprofile-mod - certprofile-mod: correctly authorise config update- Resolves: #1378353 Replica install fails with old IPA master sometimes during replication process - spec file: bump minimal required version of 389-ds-base - Resolves: #1387779 Make httpd publish CA certificate on Domain Level 1 - Fix missing file that fails DL1 replica installation - Resolves: #1387782 WebUI: Services are not displayed correctly after upgrade - WebUI: services without canonical name are shown correctly - Resolves: #1389709 Traceback seen in error_log when trustdomain-del is run - trustdomain-del: fix the way how subdomain is searched- Resolves: #1318616 CA fails to start after doing ipa-ca-install --external-ca - Keep NSS trust flags of existing certificates - Resolves: #1360813 ipa-server-certinstall does not update all certificate stores and doesn't set proper trust permissions - Add cert checks in ipa-server-certinstall - Resolves: #1371479 cert-find --all does not show information about revocation - cert: add revocation reason back to cert-find output - Resolves: #1375133 WinSync users who have First.Last casing creates users who can have their password set - ipa passwd: use correct normalizer for user principals - Resolves: #1377858 Users with 2FA tokens are not able to login to IPA servers - Properly handle LDAP socket closures in ipa-otpd - Resolves: #1387779 Make httpd publish CA certificate on Domain Level 1 - Make httpd publish its CA certificate on DL1- Resolves: #1373910 IPA server upgrade fails with DNS timed out errors. - Resolves: #1375269 ipa trust-fetch-domains throws internal error- Resolves: #1373359 ipa-certupdate fails with "CA is not configured" - Fix regression introduced in ipa-certupdate- Resolves: #1355753 adding two way non transitive(external) trust displays internal error on the console - Always fetch forest info from root DCs when establishing two-way trust - factor out `populate_remote_domain` method into module-level function - Always fetch forest info from root DCs when establishing one-way trust - Resolves: #1356101 Lightweight sub-CA certs are not tracked by certmonger after `ipa-replica-install` - Track lightweight CAs on replica installation - Resolves: #1357488 ipa command stuck forever on higher versioned client with lower versioned server - compat: Save server's API version in for pre-schema servers - compat: Fix ping command call - schema cache: Store and check info for pre-schema servers - Resolves: #1363905 man page for ipa-replica-manage has a typo in -c flag - Fix man page ipa-replica-manage: remove duplicate -c option from --no-lookup - Resolves: #1367865 webui: cert_revoke should use --cacn to set correct CA when revoking certificate - cert: include CA name in cert command output - WebUI add support for sub-CAs while revoking certificates - Resolves: #1368424 Unable to view certificates issued by Sub CA in Web UI - Add support for additional options taken from table facet - WebUI: Fix showing certificates issued by sub-CA - Resolves: #1368557 dnsrecord-add does not prompt for missing record parts internactively - dns: normalize record type read interactively in dnsrecord_add - dns: prompt for missing record parts in CLI - dns: fix crash in interactive mode against old servers - Resolves: #1370519 Certificate revocation in service-del and host-del isn't aware of Sub CAs - cert: fix cert-find --certificate when the cert is not in LDAP - Make host/service cert revocation aware of lightweight CAs - Resolves: #1371901 Use OAEP padding with custodia - Use RSA-OAEP instead of RSA PKCS#1 v1.5 - Resolves: #1371915 When establishing external two-way trust, forest root Administrator account is used to fetch domain info - do not use trusted forest name to construct domain admin principal - Resolves: #1372597 Incorrect CA ACL evaluation of SAN DNS names in certificate request - Fix CA ACL Check on SubjectAltNames - Resolves: #1373272 CLI always sends default command version - cli: use full name when executing a command - Resolves: #1373359 ipa-certupdate fails with "CA is not configured" - Fix ipa-certupdate for CA-less installation - Resolves: #1373540 client-install with IPv6 address fails on link-local address (always) - Fix parse errors with link-local addresses- Resolves: #1081561 CA not start during ipa server install in pure IPv6 env - Fix ipa-server-install in pure IPv6 environment - Resolves: #1318169 Tree-root domains in a trusted AD forest aren't marked as reachable via the forest root - trust: make sure ID range is created for the child domain even if it exists - ipa-kdb: simplify trusted domain parent search - Resolves: #1335567 Update Warning in IdM Web UI API browser - WebUI: add API browser is tech preview warning - Resolves: #1348560 Mulitple domain Active Directory Trust conflict - ipaserver/dcerpc: reformat to make the code closer to pep8 - trust: automatically resolve DNS trust conflicts for triangle trusts - Resolves: #1351593 CVE-2016-5404 ipa: Insufficient privileges check in certificate revocation - cert-revoke: fix permission check bypass (CVE-2016-5404) - Resolves: #1353936 custodia.conf and server.keys file is world-readable. - Remove Custodia server keys from LDAP - Secure permissions of Custodia server.keys - Resolves: #1358752 ipa-ca-install fails on replica when IPA server is converted from CA-less to CA-full - custodia: include known CA certs in the PKCS#12 file for Dogtag - custodia: force reconnect before retrieving CA certs from LDAP - Resolves: #1362333 ipa vault container owner cannot add vault - Fix: container owner should be able to add vault - Resolves: #1365546 External trust with root domain is transitive - trust: make sure external trust topology is correctly rendered - Resolves: #1365572 IPA server broken after upgrade - Require pki-core-10.3.3-7 - Resolves: #1367864 Server assumes latest version of command instead of version 1 for old / 3rd party clients - rpcserver: assume version 1 for unversioned command calls - rpcserver: fix crash in XML-RPC system commands - Resolves: #1367773 thin client ignores locale change - schema cache: Fallback to 'en_us' when locale is not available - Resolves: #1368754 ipa server uninstall fails with Python "Global Name error" - Fail on topology disconnect/last role removal - Resolves: #1368981 ipa otptoken-add --type=hotp --key creates wrong OTP - otptoken, permission: Convert custom type parameters on server - Resolves: #1369414 ipa server-del fails with Python stack trace - Handled empty hostname in server-del command - Resolves: #1369761 ipa-server must depend on a version of httpd that support mod_proxy with UDS - Require httpd 2.4.6-31 with mod_proxy Unix socket support - Resolves: #1370512 Received ACIError instead of DuplicatedError in stageuser_tests - Raise DuplicatedEnrty error when user exists in delete_container - Resolves: #1371479 cert-find --all does not show information about revocation - cert: add missing param values to cert-find output - Renamed patch 1011 to 0100, as it was merged upstream- Resolves: #1298288 [RFE] Improve performance in large environments. - cert: speed up cert-find - Resolves: #1317379 [EXPERIMENTAL][RFE] Web UI: allow Smart Card authentication - service: add flag to allow S4U2Self - Add 'trusted to auth as user' checkbox - Added new authentication method - Resolves: #1353881 ipa-replica-install suggests about non-existent --force-ntpd option - Don't show --force-ntpd option in replica install - Resolves: #1354441 DNS forwarder check is too strict: unable to add sub-domain to already-broken domain - DNS: allow to add forward zone to already broken sub-domain - Resolves: #1356146 performance regression in CLI help - schema: Speed up schema cache - frontend: Change doc, summary, topic and NO_CLI to class properties - schema: Introduce schema cache format - schema: Generate bits for help load them on request - help: Do not create instances to get information about commands and topics - schema cache: Do not reset ServerInfo dirty flag - schema cache: Do not read fingerprint and format from cache - Access data for help separately - frontent: Add summary class property to CommandOverride - schema cache: Read server info only once - schema cache: Store API schema cache in memory - client: Do not create instance just to check isinstance - schema cache: Read schema instead of rewriting it when SchemaUpToDate - Resolves: #1360769 ipa-server-certinstall couldnt unlock private key file - server install: do not prompt for cert file PIN repeatedly - Resolves: #1364113 ipa-password: ipa: ERROR: RuntimeError: Unable to create cache directory: [Errno 13] Permission denied: '/home/test_user' - schema: Speed up schema cache - Resolves: #1366604 `cert-find` crashes on invalid certificate data - cert: do not crash on invalid data in cert-find - Resolves: #1366612 Middle replica uninstallation in line topology works without '--ignore-topology-disconnect' - Fail on topology disconnect/last role removal - Resolves: #1366626 caacl-add-service: incorrect error message when service does not exists - Fix ipa-caalc-add-service error message - Resolves: #1367022 The ipa-server-upgrade command failed when named-pkcs11 does not happen to run during dnf upgrade - DNS server upgrade: do not fail when DNS server did not respond - Resolves: #1367759 [RFE] [webui] warn admin if there is only one IPA server with CA - Add warning about only one existing CA server - Set servers list as default facet in topology facet group - Resolves: #1367773 thin client ignores locale change - schema check: Check current client language against cached one- Resolves: #1361119 UPN-based search for AD users does not match an entry in slapi-nis map cache - support multiple uid values in schema compatibility tree- Resolves: #1309700 Process /usr/sbin/winbindd was killed by signal 6 - Revert "spec: add conflict with bind-chroot to freeipa-server-dns" - Resolves: #1341249 Subsequent external CA installation fails - install: fix external CA cert validation - Resolves: #1353831 ipa-server-install fails in container because of hostnamectl set-hostname - server-install: Fix --hostname option to always override api.env values - install: Call hostnamectl set-hostname only if --hostname option is used - Resolves: #1356091 ipa-cacert-manage --help and man differ - Improvements for the ipa-cacert-manage man and help - Resolves: #1360631 ipa-backup is not keeping the /etc/tmpfiles.d/dirsrv-.conf - ipa-backup: backup /etc/tmpfiles.d/dirsrv-.conf - Resolves: #1361047 ipa-replica-install --help usage line suggests the replica file is needed - Update ipa-replica-install documentation - Resolves: #1361545 ipa-client-install starts rhel-domainname.service but does not rpm-require it - client: RPM require initscripts to get *-domainname.service - Resolves: #1364197 caacl: error when instantiating rules with service principals - caacl: fix regression in rule instantiation - Resolves: #1364310 ipa otptoken-add bytes object has no attribute confirm - parameters: move the `confirm` kwarg to Param - Resolves: #1364464 Topology graph: ca and domain adders shows question marks instead of plus icon - Fix unicode characters in ca and domain adders - Resolves: #1365083 Incomplete output returned for command ipa vault-add - client: add missing output params to client-side commands - Resolves: #1365526 build fails during "make check" - ipa-kdb: Fix unit test after packaging changes in krb5- Resolves: #1353829 traceback message seen in ipaserver-uninstall.log file. - Do not initialize API in ipa-client-automount uninstall - Resolves: #1356899 com.redhat.idm.trust.fetch_domains need update after thin client changes - idrange: fix unassigned global variable - Resolves: #1360792 Migrating users doesn't update krbCanonicalName - re-set canonical principal name on migrated users - Resolves: #1362012 ipa hbactest produces error about cannot concatenate 'str' and 'bool' objects - Fix ipa hbactest output - Resolves: #1362260 ipa vault-mod no longer allows defining salt - vault: add missing salt option to vault_mod - Resolves: #1362312 ipa vault-retrieve internal error when using the wrong public key - vault: Catch correct exception in decrypt - Resolves: #1362537 ipa-server-install fails to create symlink from /etc/ipa/kdcproxy/ to /etc/httpd/conf.d/ - Correct path to HTTPD's systemd service directory - Resolves: #1363756 Increase length of passwords generated by installer - Increase default length of auto generated passwords- Resolves: #1117306 [RFE] Allow multiple Principals per host entry (Kerberos aliases) - harden the check for trust namespace overlap in new principals - Resolves: #1351142 CLI is not using session cookies for communication with IPA API - Fix session cookies - Resolves: #1353888 Fix the help for ipa otp and other topics - help: Add dnsserver commands to help topic 'dns' - Resolves: #1354406 host-del updatedns options complains about missing ptr record for host - Host-del: fix behavior of --updatedns and PTR records - Resolves: #1355718 ipa-replica-manage man page example output differs actual command output - Minor fix in ipa-replica-manage MAN page - Resolves: #1358229 Traceback message should be fixed, seen while editing winsync migrated user information in Default trust view. - baseldap: Fix MidairCollision instantiation during entry modification - Resolves: #1358849 CA replica install logs to wrong log file - unite log file name of ipa-ca-install - Resolves: #1359130 ipa-server-install command fails to install IPA server. - DNS Locations: fix update-system-records unpacking error - Resolves: #1359237 AVC on dirsrv config caused by IPA installer - Use copy when replacing files to keep SELinux context - Resolves: #1359692 ipa-client-install join fail with traceback against RHEL-6.8 ipa-server - compat: fix ping call - Resolves: #1359738 ipa-replica-install --domain= option does not work - replica-install: Fix --domain - Resolves: #1360778 Vault commands are available in CLI even when the server does not support them - Revert "Enable vault-* commands on client" - client: fix hiding of commands which lack server support - Related: #1281704 Rebase to softhsm 2.1.0 - Remove the workaround for softhsm bug #1293340 - Related: #1298288 [RFE] Improve performance in large environments. - Create indexes for krbCanonicalName attribute- Resolves: #1296140 Remove redhat-access-plugin-ipa support - Obsolete and conflict redhat-access-plugin-ipa - Resolves: #1351119 Multiple issues while uninstalling ipa-server - server uninstall fails to remove krb principals - Resolves: #1351758 ipa commands not showing expected error messages - frontend: copy command arguments to output params on client - Show full error message for selinuxusermap-add-hostgroup - Resolves: #1352883 Traceback on adding default automember group and hostgroup set - allow 'value' output param in commands without primary key - Resolves: #1353888 Fix the help for ipa otp and other topics - schema: Fix subtopic -> topic mapping - Resolves: #1354348 ipa trustconfig-show throws internal error. - allow 'value' output param in commands without primary key - Resolves: #1354381 ipa trust-add with raw option gives internal error. - trust-add: handle `--all/--raw` options properly - Resolves: #1354493 Replica install fails with old IPA master - DNS install: Ensure that DNS servers container exists - Resolves: #1354628 ipa hostgroup-add-member does not return error message when adding itself as member - frontend: copy command arguments to output params on client - Resolves: #1355856 ipa otptoken-add --type=totp gives internal error - messages: specify message type for ResultFormattingError - Resolves: #1356063 "ipa radiusproxy-add" command needs to prompt to enter secret key - expose `--secret` option in radiusproxy-* commands - prevent search for RADIUS proxy servers by secret - Resolves: #1356099 Bug in the ipapwd plugin - Heap corruption in ipapwd plugin - Resolves: #1356899 com.redhat.idm.trust.fetch_domains need update after thin client changes - Use server API in com.redhat.idm.trust-fetch-domains oddjob helper - Resolves: #1356964 Renaming a user removes all of his principal aliases - Preserve user principal aliases during rename operation- Resolves: #1274524 [RFE] Qualify up to 60 IdM replicas - Resolves: #1320838 [RFE] Support IdM Client in a DNS domain controlled by AD - Related: #1356134 'kinit -E' does not work for IPA user- Resolves: #1356102 Server uninstall does not stop tracking lightweight sub-CA with certmonger - uninstall: untrack lightweight CA certs - Resolves: #1351807 ipa-nis-manage config.get_dn missing - ipa-nis-manage: Use server API to retrieve plugin status - Resolves: #1353452 ipa-compat-manage command failed, exception: NotImplementedError: config.get_dn() - ipa-compat-manage: use server API to retrieve plugin status - Resolves: #1353899 ipa-advise: object of type 'type' has no len() - ipa-advise: correct handling of plugin namespace iteration - Resolves: #1356134 'kinit -E' does not work for IPA user - kdb: check for local realm in enterprise principals - Resolves: #1353072 ipa unknown command vault-add - Enable vault-* commands on client - vault-add: set the default vault type on the client side if none was given - Resolves: #1353995 Default CA can be used without a CA ACL - caacl: expand plugin documentation - Resolves: #1356144 host-find should not print SSH keys by default, only SSH fingerprints - host-find: do not show SSH key by default - Resolves: #1353506 ipa migrate-ds command fails for IPA in RHEL 7.3 - Removed unused method parameter from migrate-ds- Resolves: #747612 [RFE] IPA should support and manage DNS sites - Resolves: #826790 Disabling password expiration (--maxlife=0 and --minlife=0) in the default global_policy in IPA sets user's password expiration (krbPasswordExpiration) to be 90 days - Resolves: #896699 ipa-replica-manage -H does not delete DNS SRV records - Resolves: #1084018 [RFE] Add IdM user password change support for legacy client compat tree - Resolves: #1117306 [RFE] Allow multiple Principals per host entry (Kerberos aliases) - Fix incorrect check for principal type when evaluating CA ACLs - Resolves: #1146860 [RFE] Offer OTP generation for host enrollment in the UI - Resolves: #1238190 ipasam unable to lookup group in directory yet manual search works - Resolves: #1250110 search by users which don't have read rights for all attrs in search_attributes fails - Resolves: #1263764 Show Certificate displays in useless format - Resolves: #1272491 [WebUI] Certificate action dropdown does not display all the options after adding new certificate - Resolves: #1292141 Rebase to FreeIPA 4.4+ - Rebase to 4.4.0 - Resolves: #1294503 IPA fails to issue 3rd party certs - Resolves: #1298242 [RFE] API compatibility - compatibility of clients - Resolves: #1298848 [RFE] Centralized topology management - Resolves: #1298966 [RFE] Extend Smart Card support - Resolves: #1315146 Multiple clients cannot join domain simultaneously: /var/run/httpd/ipa/clientcaches race condition? - Resolves: #1318903 ipa server install failing when SUBCA signs the cert - Resolves: #1319003 ipa-winsync-migrate: Traceback should be fixed with proper console output - Resolves: #1324055 IPA always qualify requests for admin - Resolves: #1328552 [RFE] Allow users to authenticate with alternative names - Resolves: #1334582 Inconsistent UI and CLI options for removing certificate hold - Resolves: #1346321 Exclude o=ipaca subtree from Retro Changelog (syncrepl) - Resolves: #1349281 Fix `Conflicts` with ipa-python - Resolves: #1350695 execution of copy-schema script fails - Resolves: #1351118 upgrade failed for RHEL-7.3 from RHEL-7.2.z - Resolves: #1351153 AVC seen on Replica during ipa-server upgrade test execution to 7.3 - Resolves: #1351276 ipa-server-install with dns cannot resolve itself to create ipa-ca entry - Related: #1343422 [RFE] Add GssapiImpersonate option- Resolves: #1348948 IPA server install fails with build ipa-server-4.4.0-0.el7.1.alpha1 - Revert "Increased mod_wsgi socket-timeout"- Resolves: #712109 "krbExtraData not allowed" is logged in DS error log while setting password for default sudo binddn. - Resolves: #747612 [RFE] IPA should support and manage DNS sites - Resolves: #768316 [RFE] ipa-getkeytab should auto-detect the ipa server name - Resolves: #825391 [RFE] Replica installation should provide a means for inheriting nssldap security access settings - Resolves: #921497 Incorrect *.py[co] files placement - Resolves: #1029640 RHEL7 IPA to add DNA Plugin config for dnaRemote support - Resolves: #1029905 389 DS cache sizes not replicated to IPA replicas - Resolves: #1196958 IPA replica installation failing with high number of users (160000). - Resolves: #1219402 IPA suggests to uninstall a client when the user needs to uninstall a replica - Resolves: #1224057 [RFE] TGS authorization decisions in KDC based on Authentication Indicator - Resolves: #1234222 [WebUI] UI error message is not appropriate for "Kerberos principal expiration" - Resolves: #1234223 [WebUI] General invalid password error message appearing for "Locked user" - Resolves: #1254267 ipa-server-install failure applying ldap updates with limits exceeded - Resolves: #1258626 realmdomains-mod --add-domain command throwing error when doamin already is in forwardzone. - Resolves: #1259020 ipa-server-adtrust-install doesn't allow NetBIOS-name=EXAMPLE-TEST.COM (dash character) - Resolves: #1260993 DNSSEC signing enablement on dnszone should throw error message when DNSSEC master not installed - Resolves: #1262747 dnssec options missing in ipa-dns-install man page - Resolves: #1265900 Fail installation immediately after dirsrv fails to install using ipa-server-install - Resolves: #1265915 idoverrideuser-find fails if any SID anchor is not resolvable anymore - Resolves: #1268027 ipa-dnskeysync-replica crash with backtrace - LimitsExceeded: limits exceeded for this query - Resolves: #1269089 Certificate of managed-by host/service fails to resubmit - Resolves: #1269200 ipa-server crashing while trying to preserve admin user - Resolves: #1271321 Reduce ioblocktimeout and idletimeout defaults - Resolves: #1271579 Automember rule expressions disappear from tables on single expression delete - Resolves: #1275816 Incomplete ports for IPA ad-trust - Resolves: #1276351 [RFE] Remove /usr/share/ipa/updates/50-lockout-policy.update file from IPA releases - Resolves: #1277109 Add tool tips for Revert, Refresh, Undo, and Undo All in the IPA UI - Resolves: #1278426 Better error message needed for invalid ca-signing-algo option - Resolves: #1279932 ipa-client-install --request-cert needs workaround in anaconda chroot - Resolves: #1282521 Creating a user w/o private group fails when doing so in WebUI - Resolves: #1283879 ipa-winsync-migrate: Traceback message should be replaced by "IPA is not configured on this system" - Resolves: #1285071 ipa-kra-install fails on replica looking for admin cert file - Resolves: #1287194 [RFE] Support of UPN for trusted domains - Resolves: #1288967 Normalize Manager entry in ipa user-add - Resolves: #1289487 Priority field missing in Password Policy detail tab - Resolves: #1291140 ipa client should configure kpasswd_server directive in krb5.conf - Resolves: #1292141 Rebase to FreeIPA 4.4+ - Rebase to 4.4.0.alpha1 - Resolves: #1298848 [RFE] Centralized topology management - Resolves: #1300576 Browser setup page includes instructions for Internet Explorer - Resolves: #1301586 ipa host-del --updatedns should remove related dns entries. - Resolves: #1304618 Residual Files After IPA Server Uninstall - Resolves: #1305144 ipa-python does not require its dependencies - Resolves: #1309700 Process /usr/sbin/winbindd was killed by signal 6 - Resolves: #1313798 Console output post ipa-winsync-migrate command should be corrected. - Resolves: #1314786 [RFE] External Trust with Active Directory domain - Resolves: #1319023 Include description for 'status' option in man page for ipactl command. - Resolves: #1319912 ipa-server-install does not completely change hostname and named-pkcs11 fails - Resolves: #1320891 IPA Error 3009: Validation error: Invalid 'ptrrecord': Reverse zone in-addr.arpa. requires exactly 4 IP address compnents, 5 given - Resolves: #1327207 ipa cert-revoke --help doesn't provide enough info on revocation reasons - Resolves: #1328549 "ipa-kra-install" command reports incorrect message when it is executed on server already installed with KRA. - Resolves: #1329209 ipa-nis-manage enable: change service name from 'portmap' to 'rpcbind' - Resolves: #1329275 ipa-nis-manage command should include status option - Resolves: #1330843 'man ipa' should be updated with latest commands - Resolves: #1333755 ipa cert-request causes internal server error while requesting certificate - Resolves: #1337484 EOF is not handled for ipa-client-install command - Resolves: #1338031 Insufficient 'write' privilege on some attributes for the members of the role which has "User Administrators" privilege. - Resolves: #1343142 IPA DNS should do better verification of DNS zones - Resolves: #1347928 Frontpage exposes runtime error with no cookies enabled in browser- Resolves: #1339483 ipa-server-install fails with ERROR pkinit_cert_files - Fix incorrect rebase of patch 1001- Resolves: #1339233 CA installed on replica is always marked as renewal master - Related: #1292141 Rebase to FreeIPA 4.4+ - Rebase to 4.3.1.201605241723GIT1b427d3- Resolves: #1332809 ipa-server-4.2.0-15.el7_2.6.1.x86_64 fails to install because of missing dependencies - Rebuild with krb5-1.14.1- Resolves: #837369 [RFE] Switch to client promotion to replica model - Resolves: #1199516 [RFE] Move replication topology to the shared tree - Resolves: #1206588 [RFE] Visualize FreeIPA server replication topology - Resolves: #1211602 Hide ipa-server-install KDC master password option (-P) - Resolves: #1212713 ipa-csreplica-manage: it could be nice to have also list-ruv / clean-ruv / abort-clean-ruv for o=ipaca backend - Resolves: #1267206 ipa-server-install uninstall should warn if no installation found - Resolves: #1295865 The Domain option is not correctly set in idmapd.conf when ipa-client-automount is executed. - Resolves: #1327092 URI details missing and OCSP-URI details are incorrectly displayed when certificate generated using IPA on RHEL 7.2up2. - Resolves: #1332809 ipa-server-4.2.0-15.el7_2.6.1.x86_64 fails to install because of missing dependencies - Related: #1292141 Rebase to FreeIPA 4.4+ - Rebase to 4.3.1.201605191449GITf8edf37- Resolves: #1277696 IPA certificate auto renewal fail with "Invalid Credential" - cert renewal: make renewal of ipaCert atomic - Resolves: #1278330 installer options are not validated at the beginning of installation - install: fix command line option validation - Resolves: #1282845 sshd_config change on ipa-client-install can prevent sshd from starting up - client install: do not corrupt OpenSSH config with Match sections - Resolves: #1282935 ipa upgrade causes vault internal error - install: export KRA agent PEM file in ipa-kra-install - Resolves: #1283429 Default CA ACL rule is not created during ipa-replica-install - TLS and Dogtag HTTPS request logging improvements - Avoid race condition caused by profile delete and recreate - Do not erroneously reinit NSS in Dogtag interface - Add profiles and default CA ACL on migration - disconnect ldap2 backend after adding default CA ACL profiles - do not disconnect when using existing connection to check default CA ACLs - Resolves: #1283430 ipa-kra-install: fails to apply updates - suppress errors arising from adding existing LDAP entries during KRA install - Resolves: #1283748 Caching of ipaconfig does not work in framework - fix caching in get_ipa_config - Resolves: #1283943 IPA DNS Zone/DNS Forward Zone details missing after upgrade from RHEL 7.0 to RHEL 7.2 - upgrade: fix migration of old dns forward zones - Fix upgrade of forwardzones when zone is in realmdomains - Resolves: #1284413 ipa-cacert-manage renew fails on nonexistent ldap connection - ipa-cacert-renew: Fix connection to ldap. - Resolves: #1284414 ipa-otptoken-import fails on nonexistent ldap connection - ipa-otptoken-import: Fix connection to ldap. - Resolves: #1286635 IPA server upgrade fails from RHEL 7.0 to RHEL 7.2 using "yum update ipa* sssd" - Set minimal required version for openssl - Resolves: #1286781 ipa-nis-manage does not update ldap with all NIS maps - Upgrade: Fix upgrade of NIS Server configuration - Resolves: #1289311 umask setting causes named-pkcs11 issue with directory permissions on /var/lib/ipa/dnssec - DNS: fix file permissions - Explicitly call chmod on newly created directories - Fix: replace mkdir with chmod - Resolves: #1290142 Broken 7.2.0 to 7.2.z upgrade - flawed version comparison - Fix version comparison - use FFI call to rpmvercmp function for version comparison - Resolves: #1292595 In IPA-AD trust environment some secondary IPA based Posix groups are missing - ipa-kdb: map_groups() consider all results - Resolves: #1293870 User should be notified for wrong password in password reset page - Fixed login error message box in LoginScreen page - Resolves: #1296196 Sysrestore did not restore state if a key is specified in mixed case - Allow to used mixed case for sysrestore - Resolves: #1296214 DNSSEC key purging is not handled properly - DNSSEC: Improve error reporting from ipa-ods-exporter - DNSSEC: Make sure that current state in OpenDNSSEC matches key state in LDAP - DNSSEC: Make sure that current key state in LDAP matches key state in BIND - DNSSEC: remove obsolete TODO note - DNSSEC: add debug mode to ldapkeydb.py - DNSSEC: logging improvements in ipa-ods-exporter - DNSSEC: remove keys purged by OpenDNSSEC from master HSM from LDAP - DNSSEC: ipa-dnskeysyncd: Skip zones with old DNSSEC metadata in LDAP - DNSSEC: ipa-ods-exporter: add ldap-cleanup command - DNSSEC: ipa-dnskeysyncd: call ods-signer ldap-cleanup on zone removal - DNSSEC: Log debug messages at log level DEBUG - Resolves: #1296216 ipa-server-upgrade fails if certmonger is not running - prevent crash of CA-less server upgrade due to absent certmonger - always start certmonger during IPA server configuration upgrade - Resolves: #1297811 The ipa -e skip_version_check=1 still issues incompatibility error when called against RHEL 6 server - ipalib: assume version 2.0 when skip_version_check is enabled - Resolves: #1298289 install fails when locale is "fr_FR.UTF-8" - Do not decode HTTP reason phrase from Dogtag - Resolves: #1300252 shared certificateProfiles container is missing on a freshly installed RHEL7.2 system - upgrade: unconditional import of certificate profiles into LDAP - Resolves: #1301674 --setup-dns and other options is forgotten for using an external PKI - installer: Propagate option values from components instead of copying them. - installer: Fix logic of reading option values from cache. - Resolves: #1301687 issues with migration from RHEL 6 self-signed to RHEL 7 CA IPA setup - ipa-ca-install: print more specific errors when CA is already installed - cert renewal: import all external CA certs on IPA CA cert renewal - CA install: explicitly set dogtag_version to 10 - fix standalone installation of externally signed CA on IPA master - replica install: validate DS and HTTP server certificates - replica install: improvements in the handling of CA-related IPA config entries - Resolves: #1301901 [RFE] compat tree: show AD members of IPA groups - slapi-nis: update configuration to allow external members of IPA groups - Resolves: #1305533 ipa trust-add succeded but after that ipa trust-find returns "0 trusts matched" - upgrade: fix config of sidgen and extdom plugins - trusts: use ipaNTTrustPartner attribute to detect trust entries - Warn user if trust is broken - fix upgrade: wait for proper DS socket after DS restart - Insure the admin_conn is disconnected on stop - Fix connections to DS during installation - Fix broken trust warnings - Resolves: #1321092 Installers fail when there are multiple versions of the same certificate - certdb: never use the -r option of certutil - Related: #1317381 Crash during IPA upgrade due to slapd - spec file: update minimum required version of slapi-nis - Related: #1322691 CVE-2015-5370 CVE-2016-2110 CVE-2016-2111 CVE-2016-2112 CVE-2016-2113 CVE-2016-2114 CVE-2016-2115 CVE-2016-2118 samba: various flaws [rhel-7.3] - Rebuild against newer Samba version- Resolves: #1252556 Missing CLI param and ACL for vault service operations - vault: fix private service vault creation- Resolves: #1262996 ipa vault internal error on replica without KRA - upgrade: make sure ldap2 is connected in export_kra_agent_pem - Resolves: #1270608 IPA upgrade fails for server with CA cert signed by external CA - schema: do not derive ipaVaultPublicKey from ipaPublicKey- Resolves: #1217009 OTP sync in UI does not work for TOTP tokens - Fix an integer underflow bug in libotp - Resolves: #1262996 ipa vault internal error on replica without KRA - install: always export KRA agent PEM file - vault: select a server with KRA for vault operations - Resolves: #1269777 IPA restore overwrites /etc/passwd and /etc/group files - do not overwrite files with local users/groups when restoring authconfig - Renamed patch 1011 to 0138, as it was merged upstream- Resolves: #1204205 [RFE] ID Views: Automated migration tool from Winsync to Trusts - winsync-migrate: Convert entity names to posix friendly strings - winsync-migrate: Properly handle collisions in the names of external groups - Resolves: #1261074 Adjust Firefox configuration to new extension signing policy - webui: use manual Firefox configuration for Firefox >= 40 - Resolves: #1263337 IPA Restore failed with installed KRA - ipa-backup: Add mechanism to store empty directory structure - Resolves: #1264793 CVE-2015-5284 ipa: ipa-kra-install includes certificate and private key in world readable file [rhel-7.2] - install: fix KRA agent PEM file permissions - Resolves: #1265086 Mark IdM API Browser as experimental - WebUI: add API browser is experimental warning - Resolves: #1265277 Fix kdcproxy user creation - install: create kdcproxy user during server install - platform: add option to create home directory when adding user - install: fix kdcproxy user home directory - Resolves: #1265559 GSS failure after ipa-restore - destroy httpd ccache after stopping the service- Resolves: #1258965 ipa vault: set owner of vault container - baseldap: make subtree deletion optional in LDAPDelete - vault: add vault container commands - vault: set owner to current user on container creation - vault: update access control - vault: add permissions and administrator privilege - install: support KRA update - Resolves: #1261586 ipa config-mod addattr fails for ipauserobjectclasses - config: allow user/host attributes with tagging options - Resolves: #1262315 Unable to establish winsync replication - winsync: Add inetUser objectclass to the passsync sysaccount- Resolves: #1260663 crash of ipa-dnskeysync-replica component during ipa-restore - IPA Restore: allows to specify files that should be removed - Resolves: #1261806 Installing ipa-server package breaks httpd - Handle timeout error in ipa-httpd-kdcproxy - Resolves: #1262322 Failed to backup CS.cfg message in upgrade. - Server Upgrade: backup CS.cfg when dogtag is turned off- Resolves: #1257074 The KRA agent cert is stored in a PEM file that is not tracked - cert renewal: Include KRA users in Dogtag LDAP update - cert renewal: Automatically update KRA agent PEM file - Resolves: #1257163 renaming certificatte profile with --rename option leads to integrity issues - certprofile: remove 'rename' option - Resolves: #1257968 kinit stop working after ipa-restore - Backup: back up the hosts file - Resolves: #1258926 Remove 'DNSSEC is experimental' warnings - DNSSEC: remove "DNSSEC is experimental" warnings - Resolves: #1258929 Uninstallation of IPA leaves extra entry in /etc/hosts - Installer: do not modify /etc/hosts before user agreement - Resolves: #1258944 DNSSEC daemons may deadlock when processing more than 1 zone - DNSSEC: backup and restore opendnssec zone list file - DNSSEC: remove ccache and keytab of ipa-ods-exporter - DNSSEC: prevent ipa-ods-exporter from looping after service auto-restart - DNSSEC: Fix deadlock in ipa-ods-exporter <-> ods-enforcerd interaction - DNSSEC: Fix HSM synchronization in ipa-dnskeysyncd when running on DNSSEC key master - DNSSEC: Fix key metadata export - DNSSEC: Wrap master key using RSA OAEP instead of old PKCS v1.5. - Resolves: #1258964 revert to use ldapi to add kra agent in KRA install - Using LDAPI to setup CA and KRA agents. - Resolves: #1259848 server closes connection and refuses commands after deleting user that is still logged in - ldap: Make ldap2 connection management thread-safe again - Resolves: #1259996 AttributeError: 'NameSpace' object has no attribute 'ra_certprofile' while ipa-ca-install - load RA backend plugins during standalone CA install on CA-less IPA master- Resolves: #1254689 Storing big file as a secret in vault raises traceback - vault: Limit size of data stored in vault - Resolves: #1255880 ipactl status should distinguish between different pki-tomcat services - ipactl: Do not start/stop/restart single service multiple times- Resolves: #1256840 [webui] majority of required fields is no longer marked as required - fix missing information in object metadata - Resolves: #1256842 [webui] no option to choose trust type when creating a trust - webui: add option to establish bidirectional trust - Resolves: #1256853 Clear text passwords in KRA install log - Removed clear text passwords from KRA install log. - Resolves: #1257072 The "Standard Vault" MUST not be the default and must be discouraged - vault: change default vault type to symmetric - Resolves: #1257163 renaming certificatte profile with --rename option leads to integrity issues - certprofile: prevent rename (modrdn)- Resolves: #1249226 IPA dnssec-validation not working for AD dnsforwardzone - DNSSEC: fix forward zone forwarders checks - Resolves: #1250190 idrange is not added for sub domain - trusts: format Kerberos principal properly when fetching trust topology - Resolves: #1252334 User life cycle: missing ability to provision a stage user from a preserved user - Add user-stage command - Resolves: #1252863 After applying RHBA-2015-1554 errata, IPA service fails to start. - spec file: Add Requires(post) on selinux-policy - Resolves: #1254304 Changing vault encryption attributes - Change internal rsa_(public|private)_key variable names - Added support for changing vault encryption. - Resolves: #1256715 Executing user-del --preserve twice removes the user pernamently - improve the usability of `ipa user-del --preserve` command- Resolves: #1199530 [RFE] Provide user lifecycle managment capabilities - user-undel: Fix error messages. - Resolves: #1200694 [RFE] Support for multiple cert profiles - Prohibit deletion of predefined profiles - Resolves: #1232819 testing ipa-restore on fresh system install fails - Backup/resore authentication control configuration - Resolves: #1243331 pkispawn fails when migrating to 4.2 server from 3.0 server - Require Dogtag PKI >= 10.2.6 - Resolves: #1245225 Asymmetric vault drops traceback when the key is not proper - Asymmetric vault: validate public key in client - Resolves: #1248399 Missing DNSSEC related files in backup - fix typo in BasePathNamespace member pointing to ods exporter config - ipa-backup: archive DNSSEC zone file and kasp.db - Resolves: #1248405 PassSync should be disabled after ipa-winsync-migrate is finished - winsync-migrate: Add warning about passsync - winsync-migrate: Expand the man page - Resolves: #1248524 User can't find any hosts using "ipa host-find $HOSTNAME" - adjust search so that it works for non-admin users - Resolves: #1250093 ipa certprofile-import accepts invalid config - Require Dogtag PKI >= 10.2.6 - Resolves: #1250107 IPA framework should not allow modifying trust on AD trust agents - trusts: Detect missing Samba instance - Resolves: #1250111 User lifecycle - preserved users can be assigned membership - ULC: Prevent preserved users from being assigned membership - Resolves: #1250145 Add permission for user to bypass caacl enforcement - Add permission for bypassing CA ACL enforcement - Resolves: #1250190 idrange is not added for sub domain - idranges: raise an error when local IPA ID range is being modified - trusts: harden trust-fetch-domains oddjobd-based script - Resolves: #1250928 Man page for ipa-server-install is out of sync - install: Fix server and replica install options - Resolves: #1251225 IPA default CAACL does not allow cert-request for services after upgrade - Fix default CA ACL added during upgrade - Resolves: #1251561 ipa vault-add Unknown option: ipavaultpublickey - validate mutually exclusive options in vault-add - Resolves: #1251579 ipa vault-add --user should set container owner equal to user on first run - Fixed vault container ownership. - Resolves: #1252517 cert-request rejects request with correct krb5PrincipalName SAN - Fix KRB5PrincipalName / UPN SAN comparison - Resolves: #1252555 ipa vault-find doesn't work for services - vault: Add container information to vault command results - Add flag to list all service and user vaults - Resolves: #1252556 Missing CLI param and ACL for vault service operations - Added CLI param and ACL for vault service operations. - Resolves: #1252557 certprofile: improve profile format documentation - certprofile-import: improve profile format documentation - certprofile: add profile format explanation - Resolves: #1253443 ipa vault-add creates vault with invalid type - vault: validate vault type - Resolves: #1253480 ipa vault-add-owner does not fail when adding an existing owner - baseldap: Allow overriding member param label in LDAPModMember - vault: Fix param labels in output of vault owner commands - Resolves: #1253511 ipa vault-find does not use criteria - vault: Fix vault-find with criteria - Resolves: #1254038 ipa-replica-install pk12util error returns exit status 10 - install: Fix replica install with custom certificates - Resolves: #1254262 ipa-dnskeysync-replica crash cannot contact kdc - improve the handling of krb5-related errors in dnssec daemons - Resolves: #1254412 when dirsrv is off ,upgrade from 7.1 to 7.2 fails with starting CA and named-pkcs11.service - Server Upgrade: Start DS before CA is started. - Resolves: #1254637 Add ACI and permission for managing user userCertificate attribute - add permission: System: Manage User Certificates - Resolves: #1254641 Remove CSR allowed-extensions restriction - cert-request: remove allowed extensions check - Resolves: #1254693 vault --service does not normalize service principal - vault: normalize service principal in service vault operations - Resolves: #1254785 ipa-client-install does not properly handle dual stacked hosts - client: Add support for multiple IP addresses during installation. - Add dependency to SSSD 1.13.1 - client: Add description of --ip-address and --all-ip-addresses to man page- Resolves: #1072383 [RFE] Provide ability to map CAC identity certificates to users in IdM - store certificates issued for user entries as - user-show: add --out option to save certificates to file - Resolves: #1145748 [RFE] IPA running with One Way Trust - Fix upgrade of sidgen and extdom plugins - Resolves: #1195339 ipa-client-install changes the label on various files which causes SELinux denials - Use 'mv -Z' in specfile to restore SELinux context - Resolves: #1198796 Text in UI should describe differing LDAP vs Krb behavior for combinations of "User authentication types" - webui: add LDAP vs Kerberos behavior description to user auth - Resolves: #1199530 [RFE] Provide user lifecycle managment capabilities - ULC: Fix stageused-add --from-delete command - Resolves: #1200694 [RFE] Support for multiple cert profiles - certprofile-import: do not require profileId in profile data - Give more info on virtual command access denial - Allow SAN extension for cert-request self-service - Add profile for DNP3 / IEC 62351-8 certificates - Work around python-nss bug on unrecognised OIDs - Resolves: #1204501 [RFE] Add Password Vault (KRA) functionality - Validate vault's file parameters - Fixed missing KRA agent cert on replica. - Resolves: #1225866 display browser config options that apply to the browser. - webui: add Kerberos configuration instructions for Chrome - Remove ico files from Makefile - Resolves: #1246342 Unapply idview raises internal error - idviews: Check for the Default Trust View only if applying the view - Resolves: #1248102 [webui] regression - incorrect/no failed auth messages - webui: fix regressions failed auth messages - Resolves: #1248396 Internal error in DomainValidator.__search_in_dc - dcerpc: Fix UnboundLocalError for ccache_name - Resolves: #1249455 ipa trust-add failed CIFS server configuration does not allow access to \\pipe\lsarpc - Fix selector of protocol for LSA RPC binding string - dcerpc: Simplify generation of LSA-RPC binding strings - Resolves: #1250192 Error in ipa trust-fecth-domains - Fix incorrect type comparison in trust-fetch-domains - Resolves: #1251553 Winsync setup fails with unexpected error - replication: Fix incorrect exception invocation - Resolves: #1251854 ipa aci plugin is not parsing aci's correctly. - ACI plugin: correctly parse bind rules enclosed in - Resolves: #1252414 Trust agent install does not detect available replicas to add to master - adtrust-install: Correctly determine 4.2 FreeIPA servers- Resolves: #1170770 [AD TRUST]IPA should detect inconsistent realm domains that conflicts with AD DC - trusts: Check for AD root domain among our trusted domains - Resolves: #1195339 ipa-client-install changes the label on various files which causes SELinux denials - sysrestore: copy files instead of moving them to avoind SELinux issues - Resolves: #1196656 [ipa-client][rhel71] enable debugging for spawned commands / ntpd -qgc $tmpfile hangs - enable debugging of ntpd during client installation - Resolves: #1205264 Migration UI Does Not Work When Anonymous Bind is Disabled - migration: Use api.env variables. - Resolves: #1212719 abort-clean-ruv subcommand should allow replica-certifyall: no - Allow value 'no' for replica-certify-all attr in abort-clean-ruv subcommand - Resolves: #1216935 ipa trust-add shows ipa: ERROR: an internal error has occurred - dcerpc: Expand explanation for WERR_ACCESS_DENIED - dcerpc: Fix UnboundLocalError for ccache_name - Resolves: #1222778 idoverride group-del can delete user and user-del can delete group - dcerpc: Add get_trusted_domain_object_type method - idviews: Restrict anchor to name and name to anchor conversions - idviews: Enforce objectclass check in idoverride*-del - Resolves: #1234919 Be able to request certificates without certmonger service running - cermonger: Use private unix socket when DBus SystemBus is not available. - ipa-client-install: Do not (re)start certmonger and DBus daemons. - Resolves: #1240939 Please add dependency on bind-pkcs11 - Create server-dns sub-package. - ipaplatform: Add constants submodule - DNS: check if DNS package is installed - Resolves: #1242914 Bump minimal selinux-policy and add booleans to allow calling out oddjobd-activated services - selinux: enable httpd_run_ipa to allow communicating with oddjobd services - Resolves: #1243261 non-admin users cannot search hbac rules - fix hbac rule search for non-admin users - fix selinuxusermap search for non-admin users - Resolves: #1243652 Client has missing dependency on memcache - do not import memcache on client - Resolves: #1243835 [webui] user change password dialog does not work - webui: fix user reset password dialog - Resolves: #1244802 spec: selinux denial during kdcproxy user creation - Fix selinux denial during kdcproxy user creation - Resolves: #1246132 trust-fetch-domains: Do not chown keytab to the sssd user - oddjob: avoid chown keytab to sssd if sssd user does not exist - Resolves: #1246136 Adding a privilege to a permission avoids validation - Validate adding privilege to a permission - Resolves: #1246141 DNS Administrators cannot search in zones - DNS: Consolidate DNS RR types in API and schema - Resolves: #1246143 User plugin - user-find doesn't work properly with manager option - fix broken search for users by their manager- Resolves: #1131907 [ipa-client-install] cannot write certificate file '/etc/ipa/ca.crt.new': must be string or buffer, not None - Resolves: #1195775 unsaved changes dialog internally inconsistent - Resolves: #1199530 [RFE] Provide user lifecycle managment capabilities - Stageusedr-activate: show username instead of DN - Resolves: #1200694 [RFE] Support for multiple cert profiles - Prevent to rename certprofile profile id - Resolves: #1222047 IPA to AD Trust: IPA ERROR 4016: Remote Retrieve Error - Resolves: #1224769 copy-schema-to-ca.py does not overwrites schema files - copy-schema-to-ca: allow to overwrite schema files - Resolves: #1241941 kdc component installation of IPA failed - spec file: Update minimum required version of krb5 - Resolves: #1242036 Replica install fails to update DNS records - Fix DNS records installation for replicas - Resolves: #1242884 Upgrade to 4.2.0 fails when enabling kdc proxy - Start dirsrv for kdcproxy upgrade- Resolves: #846033 [RFE] Documentation for JSONRPC IPA API - Resolves: #989091 Ability to manage IdM/IPA directly from a standard LDAP client - Resolves: #1072383 [RFE] Provide ability to map CAC identity certificates to users in IdM - Resolves: #1115294 [RFE] Add support for DNSSEC - Resolves: #1145748 [RFE] IPA running with One Way Trust - Resolves: #1199520 [RFE] Introduce single upgrade tool - ipa-server-upgrade - Resolves: #1199530 [RFE] Provide user lifecycle managment capabilities - Resolves: #1200694 [RFE] Support for multiple cert profiles - Resolves: #1200728 [RFE] Replicate PKI Profile information - Resolves: #1200735 [RFE] Allow issuing certificates for user accounts - Resolves: #1204054 SSSD database is not cleared between installs and uninstalls of ipa - Resolves: #1204205 [RFE] ID Views: Automated migration tool from Winsync to Trusts - Resolves: #1204501 [RFE] Add Password Vault (KRA) functionality - Resolves: #1204504 [RFE] Add access control so hosts can create their own services - Resolves: #1206534 [RFE] Offer Kerberos over HTTP (kdcproxy) by default - Resolves: #1206613 [RFE] Configure IPA to be a trust agent by default - Resolves: #1209476 package ipa-client does not require package dbus-python - Resolves: #1211589 [RFE] Add option to skip the verify_client_version - Resolves: #1211608 [RFE] Generic support for unknown DNS RR types (RFC 3597) - Resolves: #1215735 ipa-replica-prepare automatically adds a DNS zone - Resolves: #1217010 OTP Manager field is not exposed in the UI - Resolves: #1222475 krb5kdc : segfault at 0 ip 00007fa9f64d82bb sp 00007fffd68b2340 error 6 in libc-2.17.so - Related: #1204809 Rebase ipa to 4.2 - Update to upstream 4.2.0 - Move /etc/ipa/kdcproxy to the server subpackage- Resolves: #1228671 pkispawn fails in ipa-ca-install and ipa-kra-install - Related: #1204809 Rebase ipa to 4.2 - Fix minimum version of slapi-nis - Require python-sss and python-sss-murmur (provided by sssd-1.13.0)- Resolves: #805188 [RFE] "ipa migrate-ds" ldapsearches with scope=1 - Resolves: #1019272 With 20000+ users, adding a user to a group intermittently throws Internal server error - Resolves: #1035494 Unable to add Kerberos principal via kadmin.local - Resolves: #1045153 ipa-managed-entries --list -p still requires DM password - Resolves: #1125950 ipa-server-install --uinstall doesn't remove port 7389 from ldap_port_t - Resolves: #1132540 [RFE] Expose service delegation rules in UI and CLI - Resolves: #1145584 ipaserver/install/cainstance.py creates pkiuser not matching uidgid - Resolves: #1176036 IDM client registration failure in a high load environment - Resolves: #1183116 Remove Requires: subscription-manager - Resolves: #1186054 permission-add does not prompt to enter --right option in interactive mode - Resolves: #1187524 Replication agreement with replica not disabled when ipa-restore done without IPA installed - Resolves: #1188195 Fax number not displayed for user-show when kinit'ed as normal user. - Resolves: #1189034 "an internal error has occurred" during ipa host-del --updatedns - Resolves: #1193554 ipa-client-automount: failing with error LDAP server returned UNWILLING_TO_PERFORM. This likely means that minssf is enabled. - Resolves: #1193759 IPA extdom plugin fails when encountering large groups - Resolves: #1194312 [ipa-python] ipalib.errors.LDAPError: failed to decode certificate: (SEC_ERROR_INVALID_ARGS) security library: invalid arguments. - Resolves: #1194633 Default trust view can be deleted in lower case - Resolves: #1196455 ipa-server-install step [8/27]: starting certificate server instance - confusing CA staus message on TLS error - Resolves: #1198263 Limit deadlocks between DS plugin DNA and slapi-nis - Resolves: #1199527 [RFE] Use datepicker component for datetime fields - Resolves: #1200867 [RFE] Make OTP validation window configurable - Resolves: #1200883 [RFE] Switch apache to use mod_auth_gssapi - Resolves: #1202998 CVE-2015-1827 ipa: memory corruption when using get_user_grouplist() [rhel-7.2] - Resolves: #1204637 slow group operations - Resolves: #1204642 migrate-ds: slow add o users to default group - Resolves: #1208461 IPA CA master server update stuck on checking getStatus via https - Resolves: #1211602 Hide ipa-server-install KDC master password option (-P) - Resolves: #1211708 ipa-client-install gets stuck during NTP sync - Resolves: #1215197 ipa-client-install ignores --ntp-server option during time sync - Resolves: #1215200 ipa-client-install configures IPA server as NTP source even if IPA server has not ntpd configured - Resolves: #1217009 OTP sync in UI does not work for TOTP tokens - Related: #1204809 Rebase ipa to 4.2 - Update to upstream 4.2.0.alpha1- [ipa-python] ipalib.errors.LDAPError: failed to decode certificate: (SEC_ERROR_INVALID_ARGS) security library: invalid arguments. (#1194312)- IPA extdom plugin fails when encountering large groups (#1193759) - CVE-2015-0283 ipa: slapi-nis: infinite loop in getgrnam_r() and getgrgid_r() (#1202998)- "an internal error has occurred" during ipa host-del --updatedns (#1198431) - Renamed patch 1013 to 0114, as it was merged upstream - Fax number not displayed for user-show when kinit'ed as normal user. (#1198430) - Replication agreement with replica not disabled when ipa-restore done without IPA installed (#1199060) - Limit deadlocks between DS plugin DNA and slapi-nis (#1199128)- Fix ipa-pwd-extop global configuration caching (#1187342) - group-detach does not add correct objectclasses (#1187540)- Wrong directories created on full restore (#1186398) - ipa-restore crashes if replica is unreachable (#1186396) - idoverrideuser-add option --sshpubkey does not work (#1185410)- PassSync does not sync passwords due to missing ACIs (#1181093) - ipa-replica-manage list does not list synced domain (#1181010) - Do not assume certmonger is running in httpinstance (#1181767) - ipa-replica-manage disconnect fails without password (#1183279) - Put LDIF files to their original location in ipa-restore (#1175277) - DUA profile not available anonymously (#1184149) - IPA replica missing data after master upgraded (#1176995)- Re-add accidentally removed patches for #1170695 and #1164896- IPA Replicate creation fails with error "Update failed! Status: [10 Total update abortedLDAP error: Referral]" (#1166265) - running ipa-server-install --setup-dns results in a crash (#1072502) - DNS zones are not migrated into forward zones if 4.0+ replica is added (#1175384) - gid is overridden by uid in default trust view (#1168904) - When migrating warn user if compat is enabled (#1177133) - Clean up debug log for trust-add (#1168376) - No error message thrown on restore(full kind) on replica from full backup taken on master (#1175287) - ipa-restore proceed even IPA not configured (#1175326) - Data replication not working as expected after data restore from full backup (#1175277) - IPA externally signed CA cert expiration warning missing from log (#1178128) - ipa-upgradeconfig fails in CA-less installs (#1181767) - IPA certs fail to autorenew simultaneouly (#1173207) - More validation required on ipa-restore's options (#1176034)- Expand the token auth/sync windows (#919228) - Access is not rejected for disabled domain (#1172598) - krb5kdc crash in ldap_pvt_search (#1170695) - RHEL7.1 IPA server httpd avc denials after upgrade (#1164896)- RHEL7.1 ipa-cacert-manage renewed certificate from MS ADCS not compatible (#1169591) - CLI doesn't show SSHFP records with SHA256 added via nsupdate (regression) (#1172578)- Throw zonemgr error message before installation proceeds (#1163849) - Winsync: Setup is broken due to incorrect import of certificate (#1169867) - Enable last token deletion when password auth type is configured (#919228) - ipa-otp-lasttoken loads all user's tokens on every mod/del (#1166641) - add --hosts and --hostgroup options to allow/retrieve keytab methods (#1007367) - Extend host-show to add the view attribute in set of default attributes (#1168916) - Prefer TCP connections to UDP in krb5 clients (#919228) - [WebUI] Not able to unprovisioning service in IPA 4.1 (#1168214) - webui: increase notification duration (#1171089) - RHEL7.1 ipa automatic CA cert renewal stuck in submitting state (#1166931) - RHEL7.1 ipa-cacert-manage cannot change external to self-signed ca cert (#1170003) - Improve validation of --instance and --backend options in ipa-restore (#951581) - RHEL7.1 ipa replica unable to replicate to rhel6 master (#1167964) - Disable TLS 1.2 in nss.conf until mod_nss supports it (#1156466)- Use NSS protocol range API to set available TLS protocols (#1156466)- schema update on RHEL-6.6 using latest copy-schema-to-ca.py from RHEL-7.1 build fails (#1167196) - Investigate & fix Coverity defects in IPA DS/KDC plugins (#1160756) - "ipa trust-add ... " cmd says : (Trust status: Established and verified) while in the logs we see "WERR_ACCESS_DENIED" during verification step. (#1144121) - POODLE: force using safe ciphers (non-SSLv3) in IPA client and server (#1156466) - Add support/hooks for a one-time password system like SecureID in IPA (#919228) - Tracebacks with latest build for --zonemgr cli option (#1167270) - ID Views: Support migration from the sync solution to the trust solution (#891984)- Improve otptoken help messages (#919228) - Ensure users exist when assigning tokens to them (#919228) - Enable QR code display by default in otptoken-add (#919228) - Show warning instead of error if CA did not start (#1158410) - CVE-2014-7850 freeipa: XSS flaw can be used to escalate privileges (#1165774) - Traceback when adding zone with long name (#1164859) - Backup & Restore mechanism (#951581) - ignoring user attributes in migrate-ds does not work if uppercase characters are returned by ldap (#1159816) - Allow ipa-getkeytab to optionally fetch existing keys (#1007367) - Failure when installing on dual stacked system with external ca (#1128380) - ipa-server should keep backup of CS.cfg (#1059135) - Tracebacks with latest build for --zonemgr cli option (#1167270) - webui: use domain name instead of domain SID in idrange adder dialog (#891984) - webui: normalize idview tab labels (#891984)- ipa-csreplica-manage connect fails (#1157735) - error message which is not understandable when IDNA2003 characters are present in --zonemgr (#1163849) - Fix warning message should not contain CLI commands (#1114013) - Renewing the CA signing certificate does not extend its validity period end (#1163498) - RHEL7.1 ipa-server-install --uninstall Could not set SELinux booleans for httpd (#1159330)- Fix: DNS installer adds invalid zonemgr email (#1056202) - ipaplatform: Use the dirsrv service, not target (#951581) - Fix: DNS policy upgrade raises asertion error (#1161128) - Fix upgrade referint plugin (#1161128) - Upgrade: fix trusts objectclass violationi (#1161128) - group-add doesn't accept gid parameter (#1149124)- Update slapi-nis dependency to pull 0.54-2 (#891984) - ipa-restore: Don't crash if AD trust is not installed (#951581) - Prohibit setting --rid-base for ranges of ipa-trust-ad-posix type (#1138791) - Trust setting not restored for CA cert with ipa-restore command (#1159011) - ipa-server-install fails when restarting named (#1162340)- Update Requires on pki-ca to 10.1.2-4 (#1129558) - build: increase java stack size for all arches - Add ipaSshPubkey and gidNumber to the ACI to read ID user overrides (#891984) - Fix dns zonemgr validation regression (#1056202) - Handle profile changes in dogtag-ipa-ca-renew-agent (#886645) - Do not wait for new CA certificate to appear in LDAP in ipa-certupdate (#886645) - Add bind-dyndb-ldap working dir to IPA specfile - Fail if certmonger can't see new CA certificate in LDAP in ipa-cacert-manage (#886645) - Investigate & fix Coverity defects in IPA DS/KDC plugins (#1160756) - Deadlock in schema compat plugin (#1161131) - ipactl stop should stop dirsrv last (#1161129) - Upgrade 3.3.5 to 4.1 failed (#1161128) - CVE-2014-7828 freeipa: password not required when OTP in use (#1160877)- Do not check if port 8443 is available in step 2 of external CA install (#1129481)- Update Requires on selinux-policy to 3.13.1-4- Update to upstream 4.1.0 (#1109726)- Update to upstream 4.1.0 Alpha 1 (#1109726)- Add redhat-access-plugin-ipa dependency- Re-enable otptoken_yubikey plugin- Update to upstream 4.0.3 (#1109726)- Server installation fails using external signed certificates with "IndexError: list index out of range" (#1111320) - Add rhino to BuildRequires to fix Web UI build error- ipa-client-automount fails with incompatibility error when installed against older IPA server (#1083108)- Proxy PKI URI /ca/ee/ca/profileSubmit to enable replication with future PKI versions (#1080865)- When IdM server trusts multiple AD forests, IPA client returns invalid group membership info (#1079498)- Deletion of active subdomain range should not be allowed (#1075615)- PKI database is ugraded during replica installation (#1075118)- Unable to add trust successfully with --trust-secret (#1075704)- ipa-replica-install never checks for 7389 port (#1075165) - Non-terminated string may be passed to LDAP search (#1075091) - ipa-sam may fail to translate group SID into GID (#1073829) - Excessive LDAP calls by ipa-sam during Samba FS operations (#1075132)- Do not fetch a principal two times, remove potential memory leak (#1070924)- trustdomain-find with pkey-only fails (#1068611) - Invalid credential cache in trust-add (#1069182) - ipa-replica-install prints unexpected error (#1069722) - Too big font in input fields in details facet in Firefox (#1069720) - trust-add for POSIX AD does not fetch trustdomains (#1070925) - Misleading trust-add error message in some cases (#1070926) - Access is not rejected for disabled domain (#1070924)- Remove ipa-backup and ipa-restore functionality from RHEL (#1003933)- Display server name in ipa command's verbose mode (#1061703) - Remove sourcehostcategory from default HBAC rule (#1061187) - dnszone-add cannot add classless PTR zones (#1058688) - Move ipa-otpd socket directory to /var/run/krb5kdc (#1063850)- Lockout plugin crashed during ipa-server-install (#912725)- Fallback to global policy in ipa lockout plugin (#912725) - Migration does not add users to default group (#903232)- Mass rebuild 2014-01-24- Fix NetBIOS name generation in CLDAP plugin (#1030517)- Do not add krbPwdPolicyReference for new accounts, hardcode it (#1045218) - Increase default timeout for IPA services (#1033273) - Error while running trustdomain-find (#1054376) - group-show lists SID instead of name for external groups (#1054391) - Fix IPA server NetBIOS name in samba configuration (#1030517) - dnsrecord-mod produces missing API version warning (#1054869) - Hide trust-resolve command as internal (#1052860) - Add Trust domain Web UI (#1054870) - ipasam cannot delete multiple child trusted domains (#1056120)- Missing objectclasses when empty password passed to host-add (#1052979) - sudoOrder missing in sudoers (#1052983) - Missing examples in sudorule help (#1049464) - Client automount does not uninstall when fstore is empty (#910899) - Error not clear for invalid realm given to trust-fetch-domains (#1052981) - trust-fetch-domains does not add idrange for subdomains found (#1049926) - Add option to show if an AD subdomain is enabled/disabled (#1052973) - ipa-adtrust-install still failed with long NetBIOS names (#1030517) - Error not clear for invalid relam given to trustdomain-find (#1049455) - renewed client cert not recognized during IPA CA renewal (#1033273)- hbactest does not work for external users (#848531)- PKI service restart after CA renewal failed (#1040018)- Move ipa-tests package to separate srpm (#1032668)- Fix status trust-add command status message (#910453) - NetBIOS was not trimmed at 15 characters (#1030517) - Harden CA subsystem certificate renewal on CA clones (#1040018)- Mass rebuild 2013-12-27- Remove "Listen 443 http" hack from deployed nss.conf (#1029046) - Re-adding existing trust fails (#1033216) - IPA uninstall exits with a samba error (#1033075) - Added RELRO hardening on /usr/libexec/ipa-otpd (#1026260) - Fixed ownership of /usr/share/ipa/ui/js (#1026260) - ipa-tests: support external names for hosts (#1032668) - ipa-client-install fail due fail to obtain host TGT (#1029354)- Trust add tries to add same value of --base-id for sub domain, causing an error (#1033068) - Improved error reporting for adding trust case (#1029856)- Winsync agreement cannot be created (#1023085)- Installer did not detect different server and IPA domain (#1026845) - Allow kernel keyring CCACHE when supported (#1026861)- ipa-server-install crashes when AD subpackage is not installed (#1026434)- Update to upstream 3.3.3 (#991064)- Temporarily move ipa-backup and ipa-restore functionality back to make them available in public Beta (#1003933)- Server install failure during client enrollment shouldn't roll back (#1023086) - nsds5ReplicaStripAttrs are not set on agreements (#1023085) - ipa-server conflicts with mod_ssl (#1018172)- Reinstalling ipa server hangs when configuring certificate server (#1018804)- Deprecate --serial-autoincrement option (#1016645) - CA installation always failed on replica (#1005446) - Re-initializing a winsync connection exited with error (#994980)- Update to upstream 3.3.2 (#991064) - Add delegation info to MS-PAC (#915799) - Warn about incompatibility with AD when IPA realm and domain differs (#1009044) - Allow PKCS#12 files with empty password in install tools (#1002639) - Privilege "SELinux User Map Administrators" did not list permissions (#997085) - SSH key upload broken when client joins an older server (#1009024)- Remove dependency on python-paramiko (#1002884) - Broken redirection when deleting last entry of DNS resource record (#1006360)- Remove ipa-backup and ipa-restore functionality from RHEL (#1003933)- Replica installation fails for RHEL 6.4 master (#1004680) - Server uninstallation crashes if DS is not available (#998069)- Unable to remove replica by ipa-replica-manage (#1001662) - Before uninstalling a server, warn about active replicas (#998069)- Update to upstream 3.3.1 (#991064) - Update minimum version of bind-dyndb-ldap to 3.5- Fix replica installation failing on certificate subject (#983075)- Allow ipa-tests to work with older version (1.7.7) of python-paramiko- Prevent multilib failures in *.pyo and *.pyc files- ipa-server-install fails if --subject parameter is other than default realm (#983075) - do not allow configuring bind-dyndb-ldap without persistent search (#967876)- diffstat was missing as a build dependency causing multilib problems- Remove ipa-server-selinux obsoletes as upgrades from version prior to 3.3.0 are not allowed - Wrap server-trust-ad subpackage description better - Add (noreplace) flag for %{_sysconfdir}/tmpfiles.d/ipa.conf - Change permissions on default_encoding_utf8.so to fix ipa-python Provides- Update to upstream 3.3.0 (#991064)- Require slapi-nis 0.47.7 delivering a core feature of 3.3.0 release- Update to upstream 3.3.0 Beta 2 (#991064)- Update to upstream 3.2.2 - Drop ipa-server-selinux subpackage - Drop redundant directory /var/cache/ipa/sessions - Do not create /var/lib/ipa/pki-ca/publish, retain reference as ghost - Run ipa-upgradeconfig and server restart in posttrans to avoid inconsistency issues when there are still old parts of software (like entitlements plugin)- Update to upstream 3.2.1 - Drop dogtag-pki-server-theme requires, it won't be build for RHEL-7.0- Add OTP patches - Add patch to set KRB5CCNAME for 389-ds-base- Update to upstream 3.2.0 GA - ipa-client-install fails if /etc/ipa does not exist (#961483) - Certificate status is not visible in Service and Host page (#956718) - ipa-client-install removes needed options from ldap.conf (#953991) - Handle socket.gethostbyaddr() exceptions when verifying hostnames (#953957) - Add triggerin scriptlet to support OpenSSH 6.2 (#953617) - Require nss 3.14.3-12.0 to address certutil certificate import errors (#953485) - Require pki-ca 10.0.2-3 to pull in fix for sslget and mixed IPv4/6 environments. (#953464) - ipa-client-install removes 'sss' from /etc/nsswitch.conf (#953453) - ipa-server-install --uninstall doesn't stop dirsrv instances (#953432) - Add requires for openldap-2.4.35-4 to pickup fixed SASL_NOCANON behavior for socket based connections (#960222) - Require libsss_nss_idmap-python - Add Conflicts on nss-pam-ldapd < 0.8.4. The mapping from uniqueMember to member is now done automatically and having it in the config file raises an error. - Add backup and restore tools, directory. - require at least systemd 38 which provides the journal (we no longer need to require syslog.target) - Update Requires on policycoreutils to 2.1.14-37 - Update Requires on selinux-policy to 3.12.1-42 - Update Requires on 389-ds-base to 1.3.1.0 - Remove a Requires for java-atk-wrapper- Remove release from krb5-server in strict sub-package to allow for rebuilds.- Add a Requires for java-atk-wrapper until we can determine which package should be pulling it in, dogtag or tomcat.- Update to upstream 3.2.0 Beta 1- Update to upstream 3.2.0 Prerelease 1 - Use upstream reference spec file as a base for Fedora spec file- Rebuild for broken deps - Fix 389-ds-base strict dep to be 1.3.0.5 and krb5-server 1.11.1- Rebuild for broken deps in rawhide - Fix 389-ds-base strict dep to be 1.3.0.3- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild- Update to upstream 3.1.2 - CVE-2012-4546: Incorrect CRLs publishing - CVE-2012-5484: MITM Attack during Join process - CVE-2013-0199: Cross-Realm Trust key leak - Updated strict dependencies to 389-ds-base = 1.3.0.2 and pki-ca = 10.0.1- Remove redundat Requires versions that are already in Fedora 17 - Replace python-crypto Requires with m2crypto - Add missing Requires(post) for client and server-trust-ad subpackages - Restart httpd service when server-trust-ad subpackage is installed - Bump selinux-policy Requires to pick up PKI/LDAP port labeling fixes- Updated to upstream 3.1.0 GA - Set minimum for sssd to 1.9.2 - Set minimum for pki-ca to 10.0.0-1 - Set minimum for 389-ds-base to 1.3.0 - Set minimum for selinux-policy to 3.11.1-60 - Remove unneeded dogtag package requires- Update Requires on krb5-server to 1.11- Configure CA replication to use TLS instead of SSL- Updated to upstream 3.0.0 GA - Set minimum for samba to 4.0.0-153. - Make sure server-trust-ad subpackage alternates winbind_krb5_locator.so plugin to /dev/null since they cannot be used when trusts are configured - Restrict krb5-server to 1.10. - Update BR for 389-ds-base to 1.3.0 - Add directory /var/lib/ipa/pki-ca/publish for CRL published by pki-ca - Add Requires on zip for generating FF browser extension- Updated to upstream 3.0.0 rc 2 - Include new FF configuration extension - Set minimum Requires of selinux-policy to 3.11.1-33 - Set minimum Requires dogtag to 10.0.0-0.43.b1 - Add new optional strict sub-package to allow users to limit other package upgrades.- Require samba packages instead of obsoleted samba4 packages- Updated to upstream 3.0.0 rc 1 - Update BR for 389-ds-base to 1.2.11.14 - Update BR for krb5 to 1.10 - Update BR for samba4-devel to 4.0.0-139 (rc1) - Add BR for python-polib - Update BR and Requires on sssd to 1.9.0 - Update Requires on policycoreutils to 2.1.12-5 - Update Requires on 389-ds-base to 1.2.11.14 - Update Requires on selinux-policy to 3.11.1-21 - Update Requires on dogtag to 10.0.0-0.33.a1 - Update Requires on certmonger to 0.60 - Update Requires on tomcat to 7.0.29 - Update minimum version of bind to 9.9.1-10.P3 - Update minimum version of bind-dyndb-ldap to 1.1.0-0.16.rc1 - Remove Requires on authconfig from python sub-package- Rebuild against samba4 beta8- Rebuild against samba4 beta7- Adopt to samba4 beta6 (libsecurity -> libsamba-security) - Add dependency to samba4-winbind- Updated to upstream 3.0.0 beta 2- Updated to current upstream state of 3.0.0 beta 2 development- Rebuild against samba4 beta4- Updated to upstream 3.0.0 beta 1- Updated to upstream 2.2.0 GA - Update minimum n-v-r of certmonger to 0.53 - Update minimum n-v-r of slapi-nis to 0.40 - Add Requires in client to oddjob-mkhomedir and python-krbV - Update minimum selinux-policy to 3.10.0-110- Update to upstream 2.2.0 beta 1 (2.1.90.rc1) - Set minimum n-v-r for pki-ca and pki-silent to 9.0.18. - Add Conflicts on mod_ssl - Update minimum n-v-r of 389-ds-base to 1.2.10.4 - Update minimum n-v-r of sssd to 1.8.0 - Update minimum n-v-r of slapi-nis to 0.38 - Update minimum n-v-r of pki-* to 9.0.18 - Update conflicts on bind-dyndb-ldap to < 1.1.0-0.9.b1 - Update conflicts on bind to < 9.9.0-1 - Drop requires on krb5-server-ldap - Add patch to remove escaping arguments to pkisilent- Update to upstream 2.2.0 alpha 1 (2.1.90.pre1)- Force to use 389-ds 1.2.10-0.8.a7 or above - Improve upgrade script to handle systemd 389-ds change - Fix freeipa to work with python-ldap 2.4.6- Fix ipa-replica-install crashes - Fix ipa-server-install and ipa-dns-install logging - Set minimum version of pki-ca to 9.0.17 to fix sslget problem caused by FEDORA-2011-17400 update (#771357)- Allow Web-based migration to work with tightened SE Linux policy (#769440) - Rebuild slapi plugins against re-enterant version of libldap- Allow longer dirsrv startup with systemd: - IPAdmin class will wait until dirsrv instance is available up to 10 seconds - Helps with restarts during upgrade for ipa-ldap-updater - Fix pylint warnings from F16 and Rawhide- Update to upstream 2.1.4 (CVE-2011-3636)- Update SELinux policy to allow ipa_kpasswd to connect ldap and read /dev/urandom. (#759679)- Fix wrong path in packaging freeipa-systemd-upgrade- Introduce upgrade script to recover existing configuration after systemd migration as user has no means to recover FreeIPA from systemd migration - Upgrade script: - recovers symlinks in Dogtag instance install - recovers systemd configuration for FreeIPA's directory server instances - recovers freeipa.service - migrates directory server and KDC configs to use proper keytabs for systemd services- Rebuilt for glibc bug#747377- clean up spec - Depend on sssd >= 1.6.2 for better user experience- Fix Fedora package changelog after merging systemd changes- Fix postin scriplet for F-15/F-16- 2.1.3- Default to systemd for Fedora 16 and onwards- Update to upstream 2.1.0- Fix bug #702633- Update minimum selinux-policy to 3.9.16-18 - Update minimum pki-ca and pki-selinux to 9.0.7 - Update minimum 389-ds-base to 1.2.8.0-1 - Update to upstream 2.0.1- Update to upstream GA release - Automatically apply updates when the package is upgraded- Update to upstream freeipa-2.0.0.rc2 - Set minimum version of python-nss to 0.11 to make sure IPv6 support is in - Set minimum version of sssd to 1.5.1 - Patch to include SuiteSpotGroup when setting up 389-ds instances - Move a lot of BuildRequires so this will build with ONLY_CLIENT enabled- Set the N-V-R so rc1 is an update to beta2.- Set minimum version of sssd to 1.5.1 - Update to upstream freeipa-2.0.0.rc1 - Move server-only binaries from admintools subpackage to server- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- Set min version of 389-ds-base to 1.2.8 - Set min version of mod_nss 1.0.8-10 - Set min version of selinux-policy to 3.9.7-27 - Add dogtag themes to Requires - Update to upstream freeipa-2.0.0.pre2- Remove unnecessary moving of v1 CA serial number file in post script - Add Obsoletes for server-selinxu subpackage - Using git snapshot 442d6ad30ce1156914e6245aa7502499e50ec0da- Prepare spec file for release - Using git snapshot 80e87e75bd6ab56e3e20c49ece55bd4d52f1a503- Re-arrange doc and defattr to clean up rpmlint warnings - Remove conditionals on older releases - Move some man pages into admintools subpackage - Remove some explicit Requires in client that aren't needed - Consistent use of buildroot vs RPM_BUILD_ROOT- Moved directory install/static to install/ui- Remove dependency on nss_ldap/nss-pam-ldapd - The official client is sssd and that's what we use by default.- Remove radius subpackages- Set minimum pki-ca and pki-silent versions to 9.0.0- Drop BuildRequires on mozldap-devel- Add Requires on krb5-pkinit-openssl- Add ipa-host-net-manage script- Add ipa init script- Set minimum level of 389-ds-base to 1.2.7 for enhanced memberof plugin- remove ipa-fix-CVE-2008-3274- Remove duplicate %files entries on share/ipa/static - Add python default encoding shared library- Drop requires on python-configobj (not used any more) - Drop ipa-ldap-updater message, upgrades are done differently now- Drop conflicts on mod_nss - Require nss-pam-ldapd on F-14 or higher instead of nss_ldap (#606847) - Drop a slew of conditionals on older Fedora releases (< 12) - Add a few conditionals against RHEL 6 - Add Requires of nss-tools on ipa-client- Set minimum version of certmonger to 0.26 (to pck up #621670) - Set minimum version of pki-silent to 1.3.4 (adds -key_algorithm) - Set minimum version of pki-ca to 1.3.6 - Set minimum version of sssd to 1.2.1- Add BuildRequires for authconfig- Bump up minimum version of python-nss to pick up nss_is_initialize() API- Removed python-asset based webui- Change Requires from fedora-ds-base to 389-ds-base - Set minimum level of 389-ds-base to 1.2.6 for the replication version plugin.- Drop Requires of python-krbV on ipa-client- Load ipa_dogtag.pp in post install- Set minimum level of sssd to 1.1.1 to pull in required hbac fixes.- No need to create /var/log/ipa_error.log since we aren't using TurboGears any more.- Fixed share/ipa/wsgi.py so .pyc, .pyo files are included- Added Require mod_wsgi, added share/ipa/wsgi.py- Require python-wehjit >= 0.2.2- Add sssd and certmonger as a Requires on ipa-client- Require python-wehjit >= 0.2.0- Add ipa-rmkeytab tool- Set minimum of python-pyasn1 to 0.0.9a so we have support for the ASN.1 Any type- Remove v1-style /etc/ipa/ipa.conf, replacing with /etc/ipa/default.conf- Add bash completion script and own /etc/bash_completion.d in case it doesn't already exist- Remove ipa_webgui, its functions rolled into ipa_httpd- Removed python-cherrypy from BuildRequires and Requires - Added Requires python-assets, python-wehjit- Added httpd SELinux policy so CRLs can be read- Move ipalib to ipa-python subpackage - Bump minimum version of slapi-nis to 0.15- Set 0.14 as minimum version for slapi-nis- Add Requires: python-nss to ipa-python sub-package- Remove the IPA DNA plugin, use the DS one- Build radius separately - Fix a few minor issues- Replace TurboGears requirement with python-cherrypy- rebuild with new openssl- Fix SELinux code- Fix breakage caused by python-kerberos update to 1.1- New upstream release 1.2.1- Rebuild for Python 2.6- Respin after the tarball has been re-released upstream New hash is 506c9c92dcaf9f227cba5030e999f177- Conditionally restart also dirsrv and httpd when upgrading- Update to upstream version 1.2.0 - Set fedora-ds-base minimum version to 1.1.3 for winsync header - Set the minimum version for SELinux policy - Remove references to Fedora 7- Fix for CVE-2008-3274 - Fix segfault in ipa-kpasswd in case getifaddrs returns a NULL interface - Add fix for bug #453185 - Rebuild against openldap libraries, mozldap ones do not work properly - TurboGears is currently broken in rawhide. Added patch to not build the UI locales and removed them from the ipa-server files section.- Add call to /usr/sbin/upgradeconfig to post install- Update to upstream version 1.1.0 - Patch for indexing memberof attribute - Patch for indexing uidnumber and gidnumber - Patch to change DNA default values for replicas - Patch to fix uninitialized variable in ipa-getkeytab- Set fedora-ds-base minimum version to 1.1.0.1-4 and mod_nss minimum version to 1.0.7-4 so we pick up the NSS fixes. - Add selinux-policy-base(post) to Requires (446496)- Add missing entry for /var/cache/ipa/kpasswd (444624) - Added patch to fix permissions problems with the Apache NSS database. - Added patch to fix problem with DNS querying where the query could be returned as the answer. - Fix spec error where patch1 was in the wrong section- Added patch to fix problem reported by ldapmodify- Fix Requires for krb5-server that was missing for Fedora versions > 9 - Remove quotes around test for fedora version to package egg-info- Update to upstream version 1.0.0- Pull upstream changelog 722 - Add Conflicts mod_ssl (435360)- Pull upstream changelog 698 - Fix ownership of /var/log/ipa_error.log during install (435119) - Add pwpolicy command and man page- Pull upstream changelog 678 - Add new subpackage, ipa-server-selinux - Add Requires: authconfig to ipa-python (bz #433747) - Package i18n files- Pull upstream changelog 641 - Require minimum version of krb5-server on F-7 and F-8 - Package some new files- Marked with wrong license. IPA is GPLv2.- Ensure that /etc/ipa exists before moving user-modifiable html files there - Put html files into /etc/ipa/html instead of /etc/ipa- Pull upstream changelog 608 which renamed several files- package the sessions dir /var/cache/ipa/sessions - Pull upstream changelog 597- Updated upstream pull (596) to fix bug in ipa_webgui that was causing the UI to not start.- Included LICENSE and README in all packages for documentation - Move user-modifiable content to /etc/ipa and linked back to /usr/share/ipa/html - Changed some references to /usr to the {_usr} macro and /etc to {_sysconfdir} - Added popt-devel to BuildRequires for Fedora 8 and higher and popt for Fedora 7 - Package the egg-info for Fedora 9 and higher for ipa-python- Added auto* BuildRequires- Unified spec file- Fixed License in specfile - Include files from /usr/lib/python*/site-packages/ipaserver- Version bump for release- Preverse mode on ipa-keytab-util - Version bump for relase and rpm name change- Broke invididual Requires and BuildRequires onto separate lines and reordered them - Added python-tgexpandingformwidget as a dependency - Require at least fedora-ds-base 1.1- Version bump for release- Add dep for freeipa-admintools and acl- Add dependency for python-krbV- Require mod_nss-1.0.7-2 for mod_proxy fixes- Convert to autotools-based build* Fri Sep 7 2007 Karl MacMillan - 0.3.0-1 - Added support for libipa-dna-plugin- Added support for ipa_kpasswd and ipa_pwd_extop- Abstracted client class to work directly or over RPC- Add mod_auth_kerb and cyrus-sasl-gssapi to Requires - Remove references to admin server in ipa-server-setupssl - Generate a client certificate for the XML-RPC server to connect to LDAP with - Create a keytab for Apache - Create an ldif with a test user - Provide a certmap.conf for doing SSL client authentication- Initial rpm versionfreeipa-common bncacsdeeseufrhihuidjaknmrnlplptrusktgukzh4.5.44.5.4-10.el7.centos.34.5.4 ipa-common-4.5.4Contributors.txtREADME.mdipa-common-4.5.4COPYINGipa.moipa.moipa.moipa.moipa.moipa.moipa.moipa.moipa.moipa.moipa.moipa.moipa.moipa.moipa.moipa.moipa.moipa.moipa.moipa.moipa.mo/usr/share/doc//usr/share/doc/ipa-common-4.5.4//usr/share/licenses//usr/share/licenses/ipa-common-4.5.4//usr/share/locale/bn_IN/LC_MESSAGES//usr/share/locale/ca/LC_MESSAGES//usr/share/locale/cs/LC_MESSAGES//usr/share/locale/de/LC_MESSAGES//usr/share/locale/es/LC_MESSAGES//usr/share/locale/eu/LC_MESSAGES//usr/share/locale/fr/LC_MESSAGES//usr/share/locale/hi/LC_MESSAGES//usr/share/locale/hu/LC_MESSAGES//usr/share/locale/id/LC_MESSAGES//usr/share/locale/ja/LC_MESSAGES//usr/share/locale/kn/LC_MESSAGES//usr/share/locale/mr/LC_MESSAGES//usr/share/locale/nl/LC_MESSAGES//usr/share/locale/pl/LC_MESSAGES//usr/share/locale/pt_BR/LC_MESSAGES//usr/share/locale/ru/LC_MESSAGES//usr/share/locale/sk/LC_MESSAGES//usr/share/locale/tg/LC_MESSAGES//usr/share/locale/uk/LC_MESSAGES//usr/share/locale/zh_CN/LC_MESSAGES/-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -m32 -march=x86-64 -mtune=generic -mfpmath=sse -fasynchronous-unwind-tablescpioxz2i686-redhat-linux-gnudirectoryUTF-8 Unicode textASCII text?07zXZ !#,<] b2u jӫ`({"n,qzey PɜJJb%OP3%VA0-P8@i1 _iC(MۈI&b~hw.0jlլq3}d2RbNQ6 ipPN]|*¯ЕG&+hn 芥C΋~٤fG!PH6v,;4uW<\癿㜐Y,p+i&D2g5AJVN%CG-z 5'G'yuRྯ9rU0^gFĦrj."aCJ-ץqFK/xT.e֍8b.X]3B(ġGnϾ*b5r92qMZr\zbW} <(6-gԲ@&R u1xc okx$UF^j^ vD |vDESA  z+c{_ޥߥGj(fkl>~ :MKCzn8>O.g7r\?b\,>V7rvdh|Kme 0c% nUZR%zvgb0]`Z0ݛNmG0jDNM@pT``bMrCU;xLTۉJ:W_=(1>s"b!5HFor] &݇F6P!2[E 4xGjHEj:awUwrcC9y[G7opW.,61k>+GD+ LZ 8]Ru< xieQ^#1L`I3&{GD:kN,`-p8 D^@ :1J#oɻ @'O2P;p}l'bf`<9΢$sAA)osOk ,SQv1yE"~PJ(9H[cbXϊ-bJ 0f*3x&t߼bHZ3,<&ჴ0z0s:l=G]jP1#6D{rI *՛-syy獴$g{ g>ׅ_DTՏxb3pFGAO"ߡ0>_|i"@qi>1,߳TKh[FtG c qe"9oȥ窀%J qF=\S/^a*91uv%ݫA+k1mMOHL|xkk򖋑Вh.lo&o2ӡG0"n'Q̲W0@Poo`T StRvjJZkӯ`Z>cm QcxݮbhГz)ZfF1zZ&Rb\: Pt8B7%ui=&H{"b(%X{Bm2WJSaG% 9Wk_6Iz*73e 8/(XKnUUZEfut&צYTwFF-1"/Vo<74y^/@C&b"D.pg";[2|W:(4n J=R;Pǚ<]n s]C,EuDfV~S[iОNLS֫pk)b|pX.T58[(ă vGԬ8\VKzV#~ԁ$GˑRɱK*KͫH50bq@Lx(|oL*`*4V1u,'px% 4x[?t. Yhoz$"Eu Ef|KWtJr91gN fVYocL=??wڰcuh[m+U2!TN$ *ALbRVpbҔ2J\|"|ܑҜs= GC! Ωt% }egXYl5#ho zk@~L73\:2lI_c GzÆo $7hXF9Ww tYu,0_ˢ/!׷pɜ-~|~QO ѷ MK]=5rCHdź5ĢY #5@%|K-O?vw>{K&aMv6%&{5RP3?}mT6yvP0P3tJח%>WIR4{8rӻ3UED[ e'JJ*pA CU"fyBUT]/Ke:_Kw%V֨EFaq|$`pOp`a1Ǣc.ULWۤ3: X+#B0e{h0[2HCMR(fF+KydT˾ڱJsT.zU V YfNQZ Yp{:|/𫞊p.6'qmuq(]wϻyR]h0(Wߨ‡]* }R<Ǽҳ9R?0I7T'pQ[jgp3]VcBe=тHMZ)vɕc<VS ^ D?UlҧP:Q'af9lD>fGyz4 [J2 5+c3HKѰN`}glr94ۄUWv54.Uv/ء&!ٯErq_tLl?X rÖ D3LD1\%5ъHaS+<mԕbWf,)SLٽ+̲Uiْr4D?\n/M$}1E.[]x&΋A> AXvu [I=94¬4DhYxtPB]@ J agV/iY]M19j)FԠf XY_] ]Z-f&'6Vke݋'x-ͺ.'7wcLv3.Xݐ*;u7ҍJbE#GG&x@*MxD?f<R_.T-cfmܥM#֊Z*$_7Õʏ Faʆc9̄w%Gt;>udsJ"]ҥ bdj){sƣ0 8(:JL#U=&G0`6dG9g4)ω3*# [)OF=4F7D:̒bVUgK`H8B8/lڍ/ςyʘR+w@2>А`( F7&4Y=A}l`.?3sAC~ Kd;ٹ%OtvJjm6z,8Zz@9Ӄm{]^p`D?k'U NؙФB)8˕7ø[a[sLьkR%eG,EfN!x03ZR2g,Lk[LmˡgJQ|!DяIʎGZJ:d@aom;]m%h}DΡǍ̍[f0zzˤE.D'Pj餘+ 3؁A9:ax5kQua$ÓkPs cS8~ƴ*]🦬ۏ %aBDto`^ yzhI `;uؼP@k<:}A iq˲?}E?8asՋBCa`u|؃Oo6*, zo;Bc5daufw}圧2%g>P K-Qe&DI 9~Q g=;΂"nt y /~VVd4I>%PvCBoҀʝiEw:@Y=!+̪d䞡BP1:sВ Ǿl_+΂vTG^n=cQr3x@1Ng\g!~xZ}(VYMY]RjW~i ]6qHZ1.R۬#bW`kmv%QݫaNw6H%SS5f2|b2to;fivm8ӠuHþa=mj*1IkfE/Ut?X3vF9V RxNilw\o@d Jv&[{9]n+Ʀو?I\Vt Tk=P{ddUN4ML݅f=9C|AS 4ISzz޻"LJcUAjCoZ jfbVkf d.7IVH?O%Щ@dr062vj]9s0VM+On~pdd!pP:o{<uy i|tLigW GɪSt~V!?VX?n} ƤPd;{-0$|˜E;hsG4Q=G4UIgo!]oA*oSSĜe+VY-z U},϶^k̈́Q7 I kj@ (@Ti}ncnBVn Wnر@-Vw yE$ZVFbL|LEJvu|K/i$yz[vƚ4PP\3ثOCj\ h!Vb4I',5O:%&:i 〾ke߁˜3X>e kp{uz6\Xٞ^a~*16BWK|l)VuEi:QiY[ҏ=Ov\ U2dp{QZKi~=A$fדeJ`8Gvyþծvەv@9cz8!WQ+7L8k'xٞ/#ThKq5Fhrs\n7n%MaH;nS% ^u;w_YObڀ(WsK#U~Ul@B< &q{̚9YXנ'sKe',JTQlF֬jb0᭑s*5QnZ-=0VYJ鑃GSk$ 68^|z" aM&!^gy'ndE?ی(>YH63 T?Gd.W(3Ќ=ͳa 8\|7U,dM:y2!bZX[XxOT'#ױI2'RUPP6|" ٫0 (}.25 gGu$Ǽ"WݎxXb{aHuO a' ]ý@ YX"-謥@2ܑg#R 7OZۤ}[b\R̻׫B?7rmit ~ɬ5b+Ed3c~@[JG<ɇ)4(+v5#ꃢUs`.'$XYEmJjo(FZ>-T6"CR_[mxCxG5nz~ ZYgZd7iPgL7NVS˦:0|J@&x]%yyc-_>p6X s*Vڶ[4uuG&wXw6·/"hV'e3qysݓ2^0bo|D t+Oyr\c++lи!sL}Urؤ[&;:p)Ug`%h>T$}lpV!+Q^zVftn+2V|ʶ@Lє`iyɗ~+s0z' 7+,c&OO".N^WLQX¸\SI'l./&~)vWm|,d+VGڲ44~8pc9|EW ^Tb܈?St? {u37\ic6Ҥr#$Ծ*߫$cc"jhWɥqüw5OqDqOP&2jLOgj8F%ټu=%/G{V[ӈpqe}Y[6(tyy2XZ(+$NO3U1v7dM±Jg:8qガ+I!z?jӻ;hB ^rd+HP$Sx@Y즞VDYӷiPu?]n_~3_j2Dh?/{c_ ٝ2ՙ¤lsOZΞa pyRxw.8h]UBڞ@;d6O uk [=11R˩pi}wǾj/}j'G5efD]F[ 閖hϐO)Dw ;?°JS\z8D!&$1/؆OyJ}o6qT(>u} Ot!Ԇ"&[cvClYԵ=r_R~0~{7\ 7(V zn'aLQ*x^D>"2C=2sK[5dBh=?G Nl!8| 5.JN*GP }l񖎅/tW˭i΂NwY Go$Y)C }q;Ьb~a9 v ãĬsMW ?MSHtk];$K&H.d4py6P:Z5JZѳ2>6-P=G5ДiB;Dzu?vtT ݩeeV6;(wf&v;hDGB]Tuߐ[~vtI%4b`2p7"~e'B_L5)?T>c^t N>.A입:Lxͽh0+l\{a,[`15i p|!3+Y@OaiU̕J2"u6!-{ȼ3B3-&kb%P!5-t38Aioxnpq8I\v |ô59jS+p}Gd- f~UqPI5ЀkFu`_1%Nݔ{_;zдjMy &`.{Qs"ɤP{eGb6>6z%[E0A]j_usJZ1Re½ꄞdUI rAOH۝&$h9$`6Ob0Es)N[۠;>*2_^T1mKp;_P]/'GCgWRK; mKҀp3ag Ő d8Rj?!BAIo'̿G\,qoʌ Әz^ ύAdD(hVܕ38UcxfFCoPBppEk7LV,NK)gla QuSspŃdP?SGy&Fg4wǽakRӚG%~S~GyIafIm*_jK7~q.Z#躐 , sG <@o"RI_+l {̭LgE!4a-dlW_C0 n˝"0߹ȾzC&F-pKH UC%X>=j Gx˾btM~qRN0b-̽r @ǬC͎?;EG ~1bT@A#c^&l弄C.%?^_{rϾ몉0i8.h qX_kw. kSuQO&uqc}v9e:/DaɀgN&".bЯhiGX1Y)xGzΚgqEڙK}v!V(KFp)ƛ< lnr|*PxаQ.8g@-Q40ę#5#L#%lIXGfc-kYE,Si LW,Ɏ\,8 iY0%Ws0 k(JO<εq1Dxo`0gwZZZv ɺu.nN wIgo˦w. Qs& 8Oq-nl:o p.E3ṃ~'LeԬاq @h=&̍N#+TZ'ٽYSlj=C}!uM}ȭXhCe¯hgzQƔë*'_T[1 , 띧h:&u~gznʍHth_1#- Ǔlx ,u-Z TtҽiCe~@]P-܈WA@FMd|G\{_, ӷIG/Sl [US|C`ؔZv94kIYJH+2)0~l5މt/ytׄNK^ٹ@$\WBZn.$v=rH)|CHi*eZDkl ˬĪ5ǥHI_5OFu fyd(\-5h} 6>a>>a '+МɦCT SLUIRx3,6Ti=ǁ^* ,gSK܎5QtGS9|(v+4Zkl+ )RGʖ+h9Xx"1X1U!wδ.՛]qr)~{%7[ RV\5^!T;O\Ka?4WD֪]Ke?DCUU' N1aS`kx1j\ɮKD<>bD~3(ϡULzZ D٧LJY,SqtKiRn0뎷Ѓ[^ÏrN52QAS- 8j[Ѝ?#ga&Et\;|.7$H(9т2BP瑎#sn$Zf\x;[ݜNy_e?7`ecR0 So{ШKIIE}/A:{{fVb(]v[[Rܤ:D+$L6.;Ev}`+CC<c:ϯ|R.$&[5bym>XX 숽6'%كu"$߭tIW*uCw2PJ{Oߖwd&P̍4 =)M)'qz/H-̾rq @?R ?L"$WVPBG!‡kN|^jK!-Psm=5ĜLoYE.+È!@e_ȉvQ=J,kTݦsHr00E[OBJ%IBzҵ@Gf<͑G<Kly ` An~kMyGgQ_"=cۨ} 48kPH)ޫ}VV7Ξj!=Qxr593):;6BY.MftbMgԌ@Ki ΫWEeɂ8K1FUbrG:%,X Oa\ڬ@Ɵ+~6d^?C.&z('T8kZZK"pCdU@38^®7)Ȃv~x-ԹZR VAb)O?1$ƙ50!2U+k/lR 5 OϪV.X}Lk„R?wu Vp!E^ MCԸ}([DQlh6߹wX" rF)&Y6@>`O5H/VF-$EZ{CjoP? ۗ2^;nMp }mZi'' <76 1yol؜RUIN(_E^谸}LYF!>_xБTɋtv~7({`˔S)R:G1= gRE@J Yzxǎ:q|"NykkoMgY)-ϵRvWeg-r!  ʝ3b ƭG;<܀_6ڒ8!6\1 x~Lx:cB;$s{dF)S)P7U-Vd(%އb pmհK=_U rISµ  oh''?l(s@ix3k8DK 1F ,0}nʽ9`ZA0 Xȥi5h97!'f ]1w+U嶛*S,Č3QSe5Wa>(Fk}A$J/g4$ ǟObDq Y&wD@zu"جjXd>c_)Wv i 1ʀ/%b!ǝF3X,Hw4JyWYސR9y k0{ ;gH(-Xot<d *5cYszOׂ :j 8dZ=J'YS6b|A5S Nri$lG+ާ"#׎){:NS RS˫+6,q'5S'|B `WiBʼ"H2 [Gh Uhi|ԙcNƽ\czFgIݻJׇlz4#(աK{+okﰣ4r2Sv\Jis3}D˻։UL¸y^R6+=1|IA%o8[^B!VLi;?8r {Qvc(3fFb5_g $:hVB8j6o(:|AN:a͹UPɇ*8Ι#A'y?ee  N`QY5+$A^WD *zK!CxQʦGpeH7Dl ωf1xJo[DcF{p, vFoرoDfvm+m{?8t`WodbԐ_+`#~s`jHf_8]pB9 -Du.8mxjCفN38G\{.rG= Ez" (2CTe}v)Q{?S+F!)ҬkVObYas$Gj|˃DWg߯hV_⬿sW,VxjgI-q NfǷ*Zhflk kFBkr¤:dr qw[%&1Md4ހvLw;P7k~Mݙ)B馰=H 5 S`3 e&Iej/ 8^roؒS[md7{YAm"ώkA|mWjRlzG&h ߔɾ0`'"NxݨД_'ȱk<)0pu7:ˆ^؇BOFnMt4j6[aB8AxZ-j I ٌf7t(1Zy#Şt,WC\:zO@Ewڬ]IEHoy1Xz ӇFEGē4bm/*dmc:ϋܯ*Ad o,e˟*76i:c:zNl)s=-[1冨 Bu dCA1;'m 7De*V6*6Yq F <_Gs3vL/Һm H>S1 _TX;rLNLH+ !>2bꙥh .7b|,{,xՃÚ@M4KQaYRf&/gjw]H]u!l(ZY*8mFG(emqsάId1sIp R1~O$2̷&[\1؞@[bfn9d}1oȄH]ݹpгԸf9 c۸6r^4O~跻z@x?P|B˨Jr:NYu]ؐTW.S A"Fx/zֳ qi8?i8AQuɟjӄ=NoVsČ97 %*ܹ?P4jw3ŨAwt1@7{1e)iw/\W2RJV̈́4$|",siǔfz5m{ k 42?*جE[*oY<}x>[q =xmmzRmE2;d,!vn,47YܑRmm)aڼD8΄qit 0U|(Ӭ\ $4 ] 5+J \֚8#a!8J81DM@ M@>/q6 (ު[ıtx[n $İsB^iKަ ꎍ:]B#iS\O6n}ҷc)$Eu!w1yޔM$z؅7 tr- k#GkDYS1ǵz T g?ǜd4 _I"FiTTqQ^ۆ&Y*&;WW~8D T:Ax@C6ב\xumY,j&b} ^O8n^r X y$'tJ+SrA^(2 =gH[Y\/%nj@Ψ1+0mLIskӤÓ2|@\c9;o9죯3zwe:9RT= 󇝹xQ$5~/,ю) Uu^牸i)~: k7a;g_rޝ΋ЫZ5G]ʲlP2[hzIrlvlfbV!Zp9&G2 5Câ=cBUP$)s˷gISOZɿϔ>a>^9K "|'GmGO|*O|zX!Шg7tDSa7\}ɽU-O"M@S,l-{z!+T]cB6UEG3"I-cEŬ!gT|tL%TߛBlPWm غFnZfsP=lZO*YfPے4MW?)Zxg//qSB,=x?gyZ0]׋{SUS92:<@sn[~:k̕0 ӛlֽECm@,qZ-.oE^)K$^her@ƫeh%yV7"sŰ԰zUOmht6)&#zIe ɞgK&R×r]~CcgR7~t6UゴHiјuӗ>U"j8ong8O9_*]Z\7TBD"feh!˛u~1CO 0~ª;M+GШ mЭ~Pi&Xd0W @Mj*ZDFom /[Dcsex1A)JhI{i,#J.n3ՠNDL'7`ۭF`$F8gȾQO-X#f=BȽ*B$p}DdlhY}q51I4E8HVK-N~{L w%0U#*is_HRyK̗J(z^!>)a*a3ß+Fݪcu"x܄h: :E3J_< J L57'`sT`<i4'7ݮT’v>ʔ φs|KѿI]_TɲKZr_{qآ=d{^sYh jh=gbUG+pdbC j)?gC.eB_}ʁ-W16|"6W%8d&r}N-/vPC/?{J 6[C"|3JwU KG9 ttK+G Zzw}zgh]/`H{ޤ00tH܆L}g V12[Td O ofdu{x_9(\pכI&oYg"Њ7@Z^tkURK҂C7|Ucc͈3WĨXaMh(Ǒb[p_zbՔB;)gMxh`dMtEnw c59IΝGDtXǪbw)MTYSNd=uQQ#^ń7؂Zh!=*b`/_-bTGyl`j[.ba? j^5[D]ѯˇ͖jA 4ZEo:fUe9Pnm{$J? &Uy:/D 4fϮOjJ1|'\.lӀf@t1-?'A'^aZF?K.]O*kZo%6KQ2k$\ 1_3rn:IIb*VuQ>Y[錸?:-9,^AglfV+y+w98geq;Nb++gӰ} :RضA$4t2g΁f)o2@$E+=)I4pZH}DG4Fa4_*e2i<ƣmLf ?q+f SOy*ckJp;W#O)ATUg9I? $KzGR"4FvN$7]c$dM#q?h|+iˮ;iEድ^jD$u@0&u_`q$؄wEAm|7>5F*1 ^,YY["U>fRB> ݏϘ-%{va=6e:d Aw[|t׈ɢ*{GF"$jjMx$uBvЃclaBDm|3 Uh pr3TUS 4t)y~KD;\LsؕZ9 RY =ݘdBXI)A'08 go=Mߋ}+\cʢ|>/WVE~1;{^ǘjK`ޯ.hb/-]ȋѷ;M$q|iC>Q9@h%&RKde|J>ulnDf=$u=I+/E;teˊ[X`d 17T8)d43HЦkݢx6:O˟ҳtpDE22p9 ř澻|0ټ:g+h^Ȱn +p-6Eg|Jt5̂?yyrm_TR $)~"^[ŻlRz 1ag׺.R;9ir"?Dɒ 2 )ؾ  0[ 7,lz=r; ]tcİ=Ks\0)ӆ߹RrfNW%׃b9|!Mc `>HP}aiPsPʶP6uUcl ׵ʣ >_ Vj'!)!ҊU8ZQhDьU_7;ށ&,D%ێٌQ$g1{s]ђKYSlI",w7st-ɍi^Եj9u]AZlM.XL1ءbh2[gA,þ _9w<(p>qiБƘֳנ ^Ld~NTp(Ӕ7?M)>sNW<#SJr.7w',u}ri40jME针PiS'x1[?Rxf}$\y~2e6ru0eT<DskAo4 I8箻Jaa4.O1!Furw-6}Vl:Ayk|PREt)XVހ_[ܠncj Llv:}Zq tPO_@¿z`4t|d+%v\nw=@x}D” \NMu\K2xSVg;)P+\!SN8 G͆KͳOJnD2Hi@JXG"zp՚]L.=µKQ⚺abVe/1(MīymY(u1%qkZWF8vW,F&v)8>*!l}n(\Q?(li`cGHd3Cjh7;ɔ͑%3)A(O)Njʙ/QbBE~&WǢ1+b}X>fc:2"Fl Dxy*F : eA\ќZ1`ja%ܕ\\dYG5 5[j% $?jkB962J(& /555UǺ%4rtEMy26(ϵvkn(@SCWKpHˮڍ0,m=+_Hg(<'],nHfuxɍ#mgj45 i84Ƒ;_K ɾ,SvfLSԗg9NhJVAɪ1@ yqUCE^~Tyx)f&CpӹV-s0zj-!>J>.Uw hNG b/ U7]߄KӇ/HedwG=c"f0_2^)I~_;L T˳CాT|/7٤ɪJ{|o3)2nxPx%Uڷd+FF|&]H,S,z4"*@T;J#umѐ,2o~'z8WvU뽝[iNK ZAEe_ ۫Z34B/h)a BHy_~M>-X؅gPG!8C"5GnrӶuZ7v iۡ:ٰN@ Qn ]PQWqX{F N*n`Y^t[Ucc"$m(bs[Q)e-ϵ|9} Qv`x\j,VT0w\"EG^'-ޅq6"?BVM1ן;dgV =LaZ;sx:=щT6Su<SW:AA 3;7IyCvɲʝo%>JQ5AImw7؁ɘ!MCgPGC}dx?Plf v̞8]L0#qho&\am_k22&}kF YMH{[!am(⦖̇o\;cly$jf'&ZGdk|+hgӬE1.WTVHPJaM PPze6.<]b$2)g~GF߭2/L^NO?7_44ǏlٓP G' iȀ|R~JsԿtY6ב qM8-H RDOMw=Ce1!&w2&{fC7~ӕ)ėbG U>c%u MCQ5$næVVkErxl$XV0/0FzXx㗋M6$|>zdžɾ3H#Mv]9ߚ6LQ߲׶'0Ռ%zaexVS# LRz:=I"P+δqO 6# t_ZwsSm+ *c* \7wh}Ą\'m( pNI?1)>SczR43`We@8ow?ԯaH1Uv9Fƺ,\6W$Ԫ K;yכ$(PlNTA魒D;d&0C\=wf Z㷜mg[pT09_( D;wtyX>ҦS%pE6)tYaw4MXUܬ.|Wf3¢=ߚ~og}mFyhs 1\_D#/(\ar{O&Sl\lU"mtM#ZPT;jK->yJkyVjt=zq'(dV&y-86hYYSt=9UT85Α&.5K:۝9߈!8 3(p~O4[$jHrdir;j6݉bE3q)2M}Գ4/J"1q8rnbq[yh*@l9򓜔d7'trqn,ք^M%TQpvA]'P0eh΍H07.J!CqACk'dԂHJ0U&ЫD8<98L(G=?jhpkQѥ_vQlcB~_f\2+|NW% ٱpks)EI/)m򻣚$ޓ6,*kTP2@Va^ghR?1l^[Oո9t ҄ni($-|˥fQ&c̬׀LCgfU֘* 5%vP($?pu/|\0I^c'?+l a[+mq1o&o:!!Tgac)wR7^3q!-o-{ԗ4zψެ%A,{ 2" "&d\CJ,<ƸNb]BP-#xUC +Wj>S:9vYǃxKrDŽ;3+Ky|"mݸr庉g]H=lޥe*>t>μ@(8-<b`xЍiN z.|҂6+gy劇!ް8FSPdJ <%w$V)>1y)489 j˰v$a*`~գ@jCODdϼ B&Hms%xLIqc@9u@"D(6r~@o1,z7ܣw6r'{:Л&~5 H1|â?hj,`@N|Y)89sȑ о/>,{*Ro2|V]:D x@뜠 +NYNܼP3M1fxVqoljyJ2Yx3ѹ$#de#\lm$kB߾Lk^-x8A̓Z+Lb*N fRSktdAkuo6d%J ,,Y[ vơ=;4f(&,ywrƻ9/)!1_f4!3 @w XrIɱdJ t/9.ܗMqT TZ w ?>%GkbΐaN[ZiC Švp =9_9p)~@gjfԱgwb^7iL+.veu$UJ_Uz6䈠l-&_:6'9"o$X䐫j'L=Dc@wn b(sV4ŀ2pj).ݹro$EB AD_0[oPD</J+;oAY=hhYC("OQE W A6x Aʱmtt]V[Yo!V1e8lmߥdzh125OSVfv; TrxzZ;/?5Ā3ᯞ ;DIT[ڢbU'x|VgtrV >@qHq^PIo]j6B(cm>ex̕跆NwwvWϷY#IAfX?)\$HQbPbS18 lR$㩄Ѽ iZO~H!QGz;Pxo4.kdpip(-,lyy#N ky:17Ms+An7ۿ]E! XAGThQz皽W~}3v"D|j?%R4lC_.c>%ǏԼǺ212Ag)c@$& 3{Z?Vˬj$l1׷|%ҿoe/6Fy..VG|>Ľ#w:O%QO1FP"V 6l|~)-0MW"QQblŰVS)N. 09˺E:=$ڀ).ǾP+^~5[}Jū?cLM*CÞ~e):$0eR&N>ud= 7׳y@KL+V]9[nch92oH"5{mZ0@E+5UdqT(/Cc{[ T&E! mLr3ҿia jv %8cx󣺓Y߾A3&F~"IO wa9q.N =܄9~uuCm{Ս.nRk~AHJտ8q{)nWrH_Cj7-e)o!Fj6rSZ /d<v2-VT'ȁMm!Kλdt!|Ype-og {%Wyf)u$`w!Xk(}FJ g.>Tҏl`̅hbp YZqI\l{b x<8@Qq}h8 H g\$0u-dY!:^_HB}S)B2h^&CjIHQ[h1"e,kZfEXZ(y-;"&dwՌPi|1 n"3ךњ~@5_HM*]' yYi&?PR-zɥ {&*܎S.ߒE^=:}tжxmh9"M&1bզYPrc p{<6BG<Tv|.CꚔ@*O{/} EuaCg~;߻!%4IFM;߲fe''J>K9@ʦf} JB?$;škCer+O [=[7(sekR) 9r9Md>Eq/6rEPc4(cϿLpOKŖ>SAʹ4g[ה%^qiowz^ʴ'uLks].f62ٔN({r Z ӅF1Z9^G^/N:ekUn*jx@Oȋa'  ˓m-A}]S=R^,Ql*[3;_\\1C |2&*!e0v$ d 3stEhE0uwE}IE)?&hyL8  {g;! R!p^b([ђGwSA^lYh{D嶧inYt+#LQHABxx;R2!+ov)C_'e*8Ñu:@QlIXkj 4L&ex>  _1*nmbNJdI6#8]yd7<+NB`rI?9X125Cvd7FHNF(Rۮ4xFٸ#fĖu!9?aejy<_;K3= -Ik>8uȔW IXHt%ZťG 謋R*\6`7_jgŏU9P~Zxruzaxgb09-P~)uE,8Mkli)SbdpG|加f Iɿ Ť7PTll= \@r dɎ$C&Bk @[r̎;V:4J U)Ke6:Ď $ v+ӃÛe֣L1*.m~am M_'=`/ WM"h=ؘU`% = 1i^iecFSchc]9cP,ϲ5S{ǗjKPI %,fKc]BY[e<xV;qtcvlV(8{ lCx:0 /r]U7z >ۂXsՉZ,unÜTCe/ԻW;Sy(Fke_*wIFuv<ރ%ttBH첢TT350J iDkc{ORؿM׭0̌,rhq,MȄNFeZLO[sX @Q%ɦe'&^W;}5~tubmȥMybJΩ\?zR)(t6'j~ }\lu@ pIJoP.8H,V0g$Z7[;臂>3_#to2(a4~PLMWU -ɞxj1Q}ri =Zw̃>KZL:,2*%4FFG mA!CqZfGwUƵ(Y\ؒblA~NQ.%9K7 u3N{JN\m"] sa@8$\(@ J0da[UsK3wZE{L<yc| vNcw$n < fl`SnǮA +8'<57 &@{cH(ڭZ m8݄.!Zr}A%M]+"LTU. "X@aŐH4X4/O7]Z8!Q(Z{OcƚUA~$x~)۞_"^];xO8WxN>{q֟@i/vKdNЎMSl#}e՜!;0r[e% |tL`%&7lF5ִ"T `R6Jp_ uaJn V~w'dzCyP RDm껷UܲG]sٕu9hcY]nM8LyP{=]HDml5`yatf6jRtaq6&'sW }PJ5 \uWl&. fGSyWBws}1Jސ͂P/|C蕒%қe(#rA!UMǶ&`~IP #m*Ḳp\s^% C57@D|&2'ct7gBBPSf: 72Zo>]1O1I5W&Moi/p|2ܗ}b(?*)g; 7O^4 Y}!?Hjeռl?3reTt6 {=L [̀dbZƉ&וwk  Ha͗ގt==“ݟKj6@21)g.T98^+]SΎ6aGT]-VeYDݍE X1lJAyM=2LO3Gb̜SO,w 킄0`]T7apR YnaOmEWץSb\DWQ3Iw-12m+H״ͻ_◣aXU־G *4u%^o}6S SIv-|OPzSJS+ZN ${)Lsٲ\ž-U6_̞3NwD?*Gi4S& ͓cfeQӍDLyUR:tljK)n|kn>M03F.ȻZt '8>X-($x ln9p9w#M{u YX~YDF3$ >ЙuO!4Z ԇt܏\X7 3NjhnQr|z7S!"hKgD+ۍ!\S]plKw&.QA"hkUY&am-`Ы^[^ʚ@{I 1@ss!9ҕ7 pZYEpUO˴^z6@D)fm`dl~bQݥphKJ9 )*2aGcV+PlaغKR,ha*dfg(ʆQ s)*Q7jR%c.L! {-6 i3e+!8"qΆ ^N_E$,ǫfF݂W" w!(:;QқB[]V N,X UdƏ*<0%4H؃1|gPJ7O2?H& 4ܢ>Th/ ɍz!#nZbJУh;Q?^܃Dd|-4w ,"X?t1zKwH`Ws"7tp`|?G#7atwH]339..>ݯ=bźPԷGh ?Ӡ-N/Hig3?_GneyX I,Gr+8[!#6#l({Pcuшj"y3G@=Ҡi`ԖM!?[CQizK=U(SkOeLE5}@6%!)C! ,nujtGib 24\31>]~N^}Yi#_?QE/X7S0YA!3 3; 7/D?um-)]ypw[2O``,O5'EǴV?8A:'vҸ w<۵YSfEǜ'|Fy4ox9rܮ)5HLm-WBN0SK T˄ 6Ǥ>? -[Ni ^j)n!Sa(b>vV $iY~{Pk AXr5ym'ie88nZz,i{Ih^ldG0;fW)嵽޵a.rr%/_e62>F80VƂgw3@"N]VRS?cx8 gJۓcS#pߨI?7 ^sht/Ƌ:h$E׷,6Ěcu: J#ZA= %D% F!}F}JҒj}A !DqٻO,i/8CYHA0?1;TIeo-Xu5#'?Lƹg.8By5 P B/`5nMW2Yj7XT ;-:ThIu=guGfUtB9LQ^vTV)\-%})Z,Jf~i>A0MWEF1*t0763iBX<غkLUW"@¬c~Ӟ\ {8.L]VWmG_%g[½{<*;:%4>·숏 K8 %i0Ǔt+#@1c`')ߤ0DŽ kjs{EĚ~-uk6mǔ~I#!;U'=&c5TsުYzBp(4g֔ ۈCZ4ϔ2;F$iGwH5~~vE5!YAf 0CMzЂk]!0EU7QGm!VO ]Ӵxzʏ5 (kε{}L_ '{u&$f*W[ Y VH$Yޜ En"kFxS"{{hU0gɬ>1<Z`=H4 FY3ȯ@mY*YLx06 aϞFʴeg4rz76wo^nUڻH /VV7pnv "K@ B)QWPcBn5i+']K3'C=LtLڰo&gg=@fZFXyI+y,݅l"=A9濕W !`> ze(/q4( {(cWa"a4E%r^~A#j4 Ry"5~½ENޮ L0$H~ V`:Q#_Lu]ai\ @8ue̍gD{H5tKhז cT@OCQgΆmNSaĂ~M%ixbߜLj!)؇i5XPrc{O%!I7${C̬Yױ1z9z\aZ\>:>y]d3MZ۟ 籎[<"lǹ6/ ;Zu/E- ,OleEQ1[ Е>^m<*Źl~W6)C*fYS8.Ħ~c!(D&Ȇ,}M#U84ȔO:xZev ll#tb 2k\%뙢OEz$;uF5ui+ O}ly|}g#~G;؉|uI'֊luliMYh}S؋1AS%X.c^εL J"QDQʤۀ #5dF40p͞=_pnMI uI5:D7eqKet(h]_tBL.7A =dʖo18}]&KtQQUx k&4KeD<@r=`›oY.'fZ 3ou&}MUZ8YXz23L4dZ$FZ|,Je Mq]DE&fv:tgmuZ?A^Ƅ>o6{_UKxEN R;A#;bT|~HfIő},ā0H"ds87I:L܄`2|vbX8ڋuDjk#97Ӂ>? ;[k S#~P^m~A:ξ{mmioY?,F#:)"u\~`QSGY&^PVJ\doWCn㿡wp=/ >`i13Щ:9!+.D^אU!@*\FJ{qL}xΤ1Ï1% P1ͳ!NW.=~8$w8֦<|[)t"}&5m1FZ@R}k0ϯA幐NbױjeR{wُxǙ ghU?[VzBtj$ !vhvӷnu7|3a#1s]QܱC~3M lfm1CϧVDBVl*fYI9USm yv {ǵٷEpBdu+GʓFIIhs^hh(=Xl}r_Qg§Ņ ?1!F;| SwZYZҦieSfSHVEClo| 1=$~k /?b5Cf@߻J gS0p(3GVYʣ\ddC"hzK|8"dHq>%BJxAp'3/M̳uLIS ,Ȉף]9Y ca8SA ṡ;q/$LȽcsVN;cW1;xs| Uj+rpFcclrX.`R\** weEPB0]XNMM{x;Zg/zW!UGhs:itPTPbP0CFOv:tJq ,Wn>bH,퓇.A;RdZq!~xޢ}\{'Xƺ3""Y=/}d!ܙQ:YbjBny]fsrto/m0nE^ۨ{7( s&BŀmwL6)Rh0­IpMQ zW ʺWb2{,g+aT_wĞvgK,_i_;8wg'?0iX^ }8GT0{OSGv'U O'`@mNU/nj!…:IVb@'sc7TQEAsW qxݩ۾1=-|[ 7Oie-f1=UuڸU糼1t1dɲ/A+׫k[xoD1M S!UFakB0#T]ƣجed`j^ VMV(vp#nf\.j⪀R7l7)) `|d? PQ*sCBޙg4 gS\_U{XL=S 4PmP\kˤ&:} 0NLx2z̞R@>m|S A1!&wg-ܵ.$罪\z)ؽM+ =~vnүqmR͏<~"d\>L%N|'rW40tb R'E7"\hv-c]3!~$`5yq;dzTBࣂ[ w.#A&w3&ͥ4m&K^Kkk/uKԛǯ#^M .(֞Ȫq/rKA_mZNmS}sEK\/0ѤϙYDŠLA?w"Z׼"Y\tc٤7G!++MR r9;/ֶٟ~Qtp:K3Fft cT j.vdDX~pmoo(!wqn uD0;Fb:2<Β-W^\ŋCTǓ̡7܇@dGxA.&^3 4^g}=qRlgͫ\[tOچd? hN@Ӄ(9D(ApC`E5%-[b=.k-& !(;-r[uIic=mH,aP<%N &D a@dD,tĮ9r:5rKtkw1d` -p *,Đ"B brP{u`,Ra h !FCحsqTq!7zo؎e8p\1B7῁O'Og\xîןj蟠}?HLSA DKA,~"ξ1kR=(Ag+!N"d Èr|;1W21\k>U% MEXgjn?zg)U:1SzRW?xISe\wڠ+' 0,A9y\PVO5Pg@/c-:5.mD+t۸%:(-6 U}RZ֓^ܣyzS8i[-Sm&8tWK!X!kR*I9)zM> "xފλH$%6g*K {G;} }Q.2aŪʖ]cm @y:ȼ95^_|ꨕfzKMQn(WM6S~fݣ`7ݱO Umԣ{׊^晤- ,{(A({r@ *:yAfɣnB gBS}M|5TU wL\%S}_VF )5g|P}ҧ&sB%}?&ze+^UiWȆmDRyDD~ .ȥ-f!y$g'S je.?: )3;; -_Hڰḁf<]!D4/T) @'S>s#7{ ¾r7ᾲHT Z} V.[pYJ'?KT2ڢ4bly$~a! BDB)*KJS_"Ә'vF<0K͎70 ̲>l0ni(Sk1jV4=.QX,J޽䦖O>.(-C { 5CpD!ÿC[Խ~1OqKL+軃J|GMfrmvNGoFչ`R{ fR ⮯<&*.欹](žb {*N Mp4,85az4e z6 oꥺy ]ȍIIay}p8{ cqL`\!|nז庽rhxbV|NuP#rO&ܱHcuFYZSs$ ^ U.L?Ww d l5#Qbd5oM]Aa17^-*a}ɲ@%[m+ +dn|xmOj:qaSg2fYTyQB|yxX;%kA`Id1^ǂW̽FkdcӼ'Ov̪%:Д|XL,Al*B$9֖J~rR!\=if\ݲOAbhǠ^ &YLI[]fR߭+*7 koZ(Jg$2oz͙a c3@(MBusMߧUA~%[mEx8i5ڨVHHo%p?hD>n1VA$Ș+"T*N(M@چNs WJ_i!n_k_CB!IBX{Y5C0^䂊Ih){Hm"G'44w^D࿡g#&Ңig#a}G¼07E=iᜥ'(T )˻i(m6\Ww!"r/+t܇ WKM%OCaЎ it*Ź+DU Ȇ w dDmє[+.z{ ,c@ZUPܑOLپ/ӏ)ƅ%4ʻq!A.NߧQm3a׫]\qҌ:.v?cl),b`WefG]t\^+'UͿ`:o'GJC3!$s'K80pqy 6k#4X⋝xZ\u/XqZm.^ռ8M?&A&z3=hɭUСw#K) ֹi6tQSįij/_6-->88/g=vo\3py*w!Iуxuz֕YKC:%RxPUX{ B^ [2BFb2Ɠ$ݥSj~9I+ R/{HudhE3 Z6L+1xj\/~{+0Πos_lb4'0T"w)Ȭ'C)PjǼ2? #ܱ1ku>F/,G]<\ <7ٺlIHaAS/ƇC}eti!\)P>n {:P@0oq:T|}QWI òNjFx ٺzO3(g:ZFMŢd.ŌtW޵2S_(Ȍr 3l9<3f r;4Ll c( QEc~52CSa'_ɩr?/2an?$P, ٩lݙ-5Tl 蟛qQ {r.8I&JoepXH.LXXzYD bF\J}eR҇wE @I6, A{޷`g EfmZB#xCx1j3?FYDqٳo}t@kNT|L7 K.E&=A7x0"X',Dr㪜&H'vi) F|=VcZ/z~[XsǼP,}MЄ"l9)L<(AC]CF8J3ؔ{ %KPV4y4%&{ b97Pfy&i_NԞ09* %1WN{GQݧDsZ<*Q7JmG?ī(*Y97͏ŕ8sTxUrGq #W6i(KƋ)Aqg.W3 +!B#6*YqMK],_'17  G`v_Ç[Yġ|\yEbwu( jqk v M {Z'hf4>яβ=xU; @lJZAP g^ل\B%OɏMק)߬gAcCϼp,v0+:$q{Мy$r$:FoQz $KU.yHnHh"'D7id 6Q ׭ZqJVQ8;IZĽ%{?8;׉܄ΌJMjm5r({0QDP1N1s.N͚ŏZ"o2[5r/᜙(nv$efR A$:B>qθ#UbXL(tqETl*bTo`oW&ʅF7w =R?Ri Зw#~Riq\oIV!;0y|V8h@Ci+E/Z5q$m(^B 43E4MOh.֭qrgn i$6N ~ب|h3[W|UV 8@ CZNǍ_lf3aJ›+"qS %mm.VAY+m_Ԙ㡕DiV(Ĕ]'A~xd(H`ȏ5]^%AOG\rϾ.!VsGv2"~3;5xuTM O Ծ-u#& mFJ݁"H>:h@΁GCWb5m8.86">w@د.ԟ `3ꃉnF rG|>q ۬OTz?m\+G@@b "C_\QbQ wj8Ğ VzRE:p5?Sp"9nO?wkvMtFi˺ے, r"\٩A,MM&YKϡ玜k*8JQ k$rtUNՅ51URjEfz\l!ԯJUSoo4E)dx_B`X๫GQ_!x*:;1vM^&c9.'" wV#gv}WXRQZhԢT.&ͼ Plx &54PMكK]QԼ_ G瘬P]3z xE2“bjx7ZBbF_q5Ti4AUP%?'oO[Ay㟬701N$ܧvR +<>Tr+KKP+yjbX^ se4C;d*%Z | C8WpDD P/ "<ˌ"KхTbJkLp1 r*  X!rL2-\:"ZAV(< E)QDT}'f~`e4GJO[#l 3ˆ4K("'ck>o@<]!8-41SUm":-F/c3.滸eaRS\jCVfRV%ɑ#7+Pr0WД#ځ ?\pLV~2R/k~Ukڞnm鋩l[5#_WZxklb3'lI)?y <;p=*E:{ߎ2_`zFeolEUwc >r6mEgx!-wMzړQNj3mCeaL-Gxeh[K)e7hIًG)}j>O*d0*k咎;@V;ȷќB1NLߊ@BR6{o? 1)lte^X-drf0HdG [Q\X ˏb_$1'X wVvqGׯ t7y P^d㽹iO&GM|weCEɣs- '{mbo#!k.%X`?SCxHM#ܤ\qEaq;68eBޒ#ƫ'蝒et$fW/zj Szт}?[8CԚμr[3{퉤>1DqHD~SA ]N=ά[B JCVIFm-rۑ)bkiOѫ-svQO%wJFǖ|w98=}4F3~0/`TۓI,JƷNT>5DSY/~µy{&r*Ҥ{Ì t`ޕc`ƹW!; 6#yT 4/[ýH*Dm6n˱+P?b2oU(reDʖ֦0Ƿ52i-(̍Fʿ1Gfp?trrQG|X@Lq b~'4!W!JR_8jPɃy5XyYqyfܚ^jE=${\Ebٸ:+)ؘ0U52$+5r.5˚%h'l1B<|U(8Y[gi]fhyT0}@洸P9,p0.:h𜧾2HY,:Vn/L]r"Ÿ>qGP'KT!<sNOŅEp ߽|$l?vѸ>k:{CoE ֏rnctn%+;%lIa}\(k0qֳϛD ~v 2&dSȚ-;[ )!( g:>of5RzjV*?` ;8~QRh0'쥢'Z\Jc ȕqbQj_8 DĉG1뒞z<3;zkܟ_.o{rr+xbjڃSB_n5:^7XSLjiEHb@T abMLAU[-){c ++o/=oȌ2b.}0&=f^9 =WgOpa]B<:! q?ҝ?_q-eeS]eYm݉MơV'Q2ih`Ғ w>x#xHyG7!(J"[jM P䩂~SAU? ?)3K.u2crJjt!L Α2 6SZm:v_8X̕6ȏh!=g+u7шs#8|wc}X^~n?U[Rm^M5bZwcY2ȋ:¤,L݌ۚc);$轙%jtӿ5WEhF|x 'B'X_o*Q"$$EvZ.>B[P [0WeP2|;wZU&ҫ>vvh 9Ť9Cwc򵀈)" fg[shߥϒ?iPk)hD^->Q4G=ȧp+j';ŜEyZ!Ѭ]x bd)Of;Sn#"ϰ_u\lh3=S$;̰RI1SݢA1rcNr+S$DݎZz-N$f 1HLCZtZJ s}nڴu:n;fm gGM-紊MꥺPMD9_B yqh@VmF=8(mp./}[5@}s ĂvZ=:(L 5!%mۚ57ABZ/UG"4PNW^,&\_ChX[^DSs/O WEe#|qvVNKe5,* 8#)2zNߏi=8X̙T*ܟ̄h]u˶P><}2)e䞰vi GZюW YP[FJ 0akA k%Qϳ +>Q1]xܪ_t95xLHludkЎP4rX e*R)ARU'a4` . +z?.|^C PBN[$+)fwsQ =&C-T|(AF)Z+PA)ϑ LM)?h0d?־_n"1 "NY"Z.U{ *Ҩ8>Ėm,U&Ol>CMHTΟr<3OM沎LѶ(twήdḔ7F^C!F *VCB1&%yx*IŞ9{FCdH>['zNpś_ђI'bzDOC&ܹz88Ԍ>~rWvZ l,o{JڻDFn(ͧ^# ~`Hfhݷ3哩rmi(H& HORV9`o" ׳ieWƘȗ5, w_t‹j]uF΀ SFjQl {(L*%u|_ MRRY6uWIkxWȁJwzKI iESK, c! P?q%5pUqz˺|nu66$}ʛ3e[F0 tڵ]4H% T4}yd56붨Mf,J)<>ԃ"68*rʶqV K$[$c[LWS㰞j SM}ף\1(2wXWT)' 45ɩPTGN5US:_ WUιZ|19:d! 6jۛz~fߔej6kF@wy9@LZp.ݾns第 IxǟWqHA@ Ǜ'DWDH O8X<&C lXuAmr[;u+ko-o-k)ѣJcO 2h94+H6nGUy"3sf#ϺڜU!vo~W^H,#a R~b P[VnKF@M^k_h|y Vt1MZ3S(3ke[e/׎6<.8‘I4}{8B*i;uF f ȇXd}~8ѯ-C  }@k͢}|?9YD<ĪC~uIy\h;f@LA p.cJpƸYՂ[BC^~g">IH OБ5~rBS;`D$za/7Bnc in5,CKG)wҗMōa/h }X7{Db/FWd;nTǻ<ȩKy7ǹ.9 15gmMm@" ? u+A,{Zš w\i210k}_&xzZǏ&@Z#cdVF.ñ߯}:Z։x]^1dT7V[po}"IufA,sTagG:xK"?71qe {o ^`]VW|JAP"s%oskpJQ*+35eמpƃODʦJ<ha!&o]6SwՉK4/s=fMൃ3 ı9;( Q$ Z C2txsf"[G!jI$W[t/p%Ύ0~#OWZҷ)Am`a 5.~B "{/5UiDQфZ2ǽL|"c|2Di"r携O MDC5dUNR6cr!/Hx0rx RrLaSj uN}1H@,[e[xyfnء?dC;g VwXW!tP|D|BH9, iOQ [РOMp@ߓy0- ȠG5cjpSH 1QL!8Ry@-r*i;*xZ|1 "o]fWʉel~{?! ځ!B偞nPr^;8ʟM khJVR,z{Y*)K$qoTH)`gOT;XV!)Mw?sD֬?:"J2jtP|X3ͩH<`c^]z 3>pሁ|v ¬~bdCVS< J9JG3i򚣨QTl& (}Ò =r %-on& ^AZt}#Cu4ʢN(7MoJbY+"Rt-ߑ_'k~JWʆMfm0ޜhr}r̾h?׬Әr-ђ` w@?|cUO%5]f:Ynu,jǂlG="vGꄌ!) _=m~ꦵ14&:{W} {#gl9'[e(^h'ߝbJJj"9BV"(If;;31K#5nKR5f!KY-v$8B$-cD^&-U.j6+Y6A!`MǡjTP}p\Zb2IH8tiYfAn6~~@US$Xc'1HQdEsp-yhTOMxF% .F~2E[u.zfg;CF3ތ$r7ZcT PzAF !2֦I:CX^R߆!{`T 0Мy⌞e-,cjRT(w5U6B2)u:Eۿ?0Anb‹Ht.Z%E &ݹ;W(^Kȸh>_@^g,4F{Wvh<_Mo^#VT>Sy ,RP;?\cMgommtc"Z5S/ kl7QWͺQ +ߣH!8s-XE IBߢ AOCAea3?XKK=SIǫܜG?w36HeP?a{7L [X]d<H&)qKie@O^<b(6cx$U^6Xɮw1 SDCkiHK WD5tOqֵYI\( u5TObrdg\*?ﶖsw9$4OjaBCjy,s_xt=rC A8,PExg&KghU v]Σ"9pױ)[o =b ؃w; dBcFOŅ Z@y6?M(xSie!2Z5\m1*ֲ!0k&5͂  bMFpQ;y2k= .33#Vs&U$i<9]SRi<_DyrmʂcFP!o6O* ]KJxJpxZU -i7b{4o,K2OgsOs JLg/#d`hO(-Px (baz [URNع1}ɌkGzwl +7]Z}}([)m[pM\ֵΒ~[2j"ơ==6;>Iohke@dneaB@wd)&ڇV']KXr[̠…'iK#cH_JfBe zIW v%8j,j|>?NsFU]V8[vmP|f9e`1?zay7 Yف&6Tؾcw~( +̽^\ܸ0:v |16,?OBZs2X{̃h6dO3-&̕ mm)QXm)J y. oEHM6+a cnx9ZR"53(Y-:v+ꠞ)dY';O\M3zx 3%l-3W"a%NtŒěͿ]cLpN+p1%GpgVC+*hM}K ORg/=EWR;quob0> 5CvK~MGP>`ՍYՓ[қ ْ:c*%Y'~Ѐ0nJS"m֭Ҳ;XQ Vj饝9R!||(6("l1Vrb8nܮpΗ_970OǿAd ͫd*'ߕÉ̳!n ǻ` NK9Mȯn6rr+X(mbuu1YxZ 祓nr M )Dhm|6{s(Bv8]1/,KLr5QWbY1 Aʬ eS(Sm#8^iD^Śb4\SSyibȜIsS00 6*‚O{ˤ'.J*[ɽGV:DUl=욝OxڔQ m)TN+a"K*CD<3aSLe5(0>l{Ю*6l o!&w9Eލ&gm2PI@(>U[F@3/!X q:ѼO2e+I_\Fiŷ3DIرM)HdԄG]b |G@Wc sjk~kYj0aXE Ӗ>ދٵ!W栏pXwiS 0slo.A;z~ܑ&RcD. us]̻5 As䫹pyGҺ`i#3}EBhb1?iqilP{^ z6%S,Ⱁ6 .$-d*RUeQ_K)D]-Rwj$]A*K;X_vJ6LѐDW"dd܏3FڀƘE;*;N5/2Xړ?ƺ c "@$z[UnYY:Se:pHV 0]8qG>} 48Z݇`TZ$E48C`F&IP,YXZt ؋,3{[]zދ9+B~C]`HCُ@PCv՗ +<,iDןԔ*MF8/$OhΧW!.9_Xߔ ?cu>"at?pS+եIhr`.~/]哈b#ٟ@`?,-89)?aX0^=i,ٙ~f[k$x5h­8CR0{p_FZǭY̥%AEdMc#NbKLZ O\N7Z2(}zh^ +ͩS:7 fuy+P{`B?~(BkDb1IQcbv==<yb e٦Fo_lYݦM} &ƌi)8_nΈhxtAk&-2=&#I3sKr@]i:2&NOdM̗QUX +k(X YېRԬP6EJmK -lb_T޾RjۛO9{fH0sHSRJ*Y=3~qy&)PHV:ܿUf71RTey21%͔^yPEVk7rt)(cxNg$Awb͸^)0ΤW)}Mg;3A'/C />8`*Q^ь(Nԩ7Dak`yYmߤ ]5P%):Exr95#S=M͊;0?p!jH].}FNʞp~ KSEAXճ--cO1[ XICЛ?&#(x#ڳMAp]7,2z_lm{fJ%g@$TUZ Q ɺ z`OU`c|goi1]PM)6PKZR+OI2[a.^3Z7, ; wae_]fYCL<* bV_IW<<P&Y TK2fuy駒J<㫤9s}KyG!RW)+e=?֎krqغ.-ƚwכUU!cӣ=$\# dkP|Y|ÒISFCk(y.x^N61/wɺq^#DD-om/\W fwP=raV{:ꈬ PLhV7.H z&y(oE#7%M;dP4[b/rM2TQei+ 'Q(h}jBLseS̲\':)6Rm|F]=uuR5ِmäe"YCiϵ8iHm79J™,ҷX;&kƗ>+DD;5HiD\a-3Ъکh7#&j/:jW@ךAȺ  *?ݘ)aCIĔ]˷2꒛46ZQ BptjoJ<' z;xCEQB~b,|{7Vܾ-ʃ#/%[;NkRnC h&l~i,b23-]/l(Z1Ri7qa?+CKd@H;njn9_BROM].*y#'wI lnvB.׳v`$ :L6NgWޒ"IT$cLq [703֧r2X_(q|0u[eD4«!U"Ǧ,*pf>&X<;mY1x o`dz5?s傛t D稑Bn`akd, eCՊ!9֌4vVy~nJ_y¨nR.>d H6օG8Ԩ-t-(r|&>RꕴBazi{3Ӝ8_}*5 da[&Pnۭy6ۯg%K0DB'V.[u;{Krv1HPC.r$7jfiV5oeifw噣L<|Tm2{uZt.>B4 ~qBaZl]PqqA.OZXP~-A]ߧG6 #o@"|u-rׇL"àɒUn/ lGyZ*Ep[%%-2=Ujcfrֲ}ǐ#hn\lf[`!4ŝD!=^##l*7V@UX.ߐh~ \8&}8 0jpHi7\7-/AI+GSR&\kEϜ/Ng's$ R䏂G~_ёUGf6(,'{oNZ,7. Trֹ<9BUx;f?U0 W-l͘inהijw)M ۷]B[vWl]j}ث*4ޔ/~n,8ߡ%24)hN[בH.kpf6_ 틀re8-mNԞd|ɭHY>svP4tlP-t_/ZyՅ1?뉼ZnZ3s,gd=MOΗe AI4J"%4bTrtm>!;5 Ì>HUy53H=+CllC 4-OF_2x[LQ)4n_XUbB@::?Ұo1a7zҟvy2b!LDKN>XhrPyn49_ N7Eِ`ɜjmKUbYO|pIo9ZaS)L$GV׭ݔk~Jy%EG#¢ݛ򑽛dOvb辋G~A-o̱ G{ǮۂsyDIKak\/9M3 0XYũ !dBF#)U 8 5Z+{`%PDz7vOiͳ`S_^Yԓ"LCsMƁʫ#)f፡ڲa򌨟g`R2B_`ܦe`RaQa_o+QEh &Ղ]NmQ`@1Y:%`fS|dyw Z`RpSQ hy¹ lYy5Z`bNKa "*pM')h[FH+;$0.̬䗫ΐ@]ҋ)_% *[ H*[G %e3K/KE|uxd#;gqfĢ:F-%(4~`> @fYlIkf [x)4 ~gDIh?fJuSPY5oᯆl}b+Ϗz=ي1alp/&ĭdǝ!Q6Fjx#1 0"fH„nQ׏}u"w3v쐈Y' AfGeubfSۨ8XF\4.K4{| K% ; ~)Y(a)g6ա!aY1D#+%賄T],x7TӋ:S>y]VT/ܝ`@9*9cWhԻ_4rz 0wN-{N&0YՖUGUAn(3>2v967^ÙT3-٘(VGE޴'NƏH9C7 =t$4?wfp ),FA`ze_R/77NûZ_iW‘Q*L5L u?̙ 86^UB>MVؽI[T{X0;jo?qaj,h3`prqʣd$Цp&xxH,~$ItGf#ҭGYtL.=0lyØDbe;ʞh|-b؊Owq/DwґS\fڭѻO8$em$i q-MK ZI]r\둜[F_&׹&Q`6&`@4NRy ZM FfBd-x&؉5[wr:g!lP>dL)f%_>j0-~'@>baRXg `Utgg:'A͖>uL P ƷoN__@n*Y`gPU䗒Y;]َtᦃRiqJ8[>(z䛦UfM 椉`kΌ\D HUݝzcn>.ЗW Y#GU4ّFIV=*3j 1[v V?"u늊utAY :Ȋ?^4r퇜ҙ98⇾edy0,Sll؈zFE9*ֻAzQ ^o]2%doL,i1$l):{5nAA@7VC58m6nxkHVɗV8`,эiE{X%bؽ0;Mni:urվMiQz_2-±geZ JPEu,E9A`!T#ReD7'셏%$, #c?|R^ L)SV )ԉW7 N߶*"}SCNch£h>=\al7 7c AΝziw"X%WBͯUߕaUf>bi7۔"AGc'jMʥrv%ro@ ]ɅKa=!Z0m`2 B37!?td=uϷ*BE!~&E] nE0BJ?j}oK/[5Ç*cBX4_(.q$Rx*Q;8}ވbR\Jn2ZƒC07AY6UOstu ms 9h0%/M`|F fSo{p_S>Ic 4IFvu\ m"%pf™ĩ6**%H$FMNib,VuiB4Cc9qH6##Le~"Z&"81J r-έP:h,\s~ 71M]B*u`ңrӖ-M4I9C(~NW WZ|wqN~: HߝyXXAAYo(vspFכʍ'dmIGL2eHk}Qxi=HAW_epR(oQYE#"ꗄrZ|O=WfX $C_;>^7iK5uVQ%6BqqAJ/gτ*tj"%C=?\TxfMlIrCxlW1!i`KTmM\\Иr`@vV N, ᝂ!1GDb F4ܢH`ρ_G j Մ&1<@0y"gi_FUdNGU!C(V5A>q*T)~U?-<Io`?<]]C( D`^x"rnJyZ#*JZ&eJ%6o)HEvM%RcNpa$hAxTDp>Μ|O%4t7 \|񒁀DE;I6Ne* { J0E'pٌ,ZO -R =[yXmQ پED)瘝#hw:{:E@ Cg~:$UJzAv~C-j E=5퐧0GFL5)5A8 !G~` C :iTl9N흮`dsZ|(.XJ(ٍnѰOvJW2Ǎ Lz/f:C"x0$q+;b_ƾ?3o~ 'YQyR[K%v[جTQ:t\..eheKd^JwɁSj*9WW]T?f5bАuYX܈Lt^އR?eg3is:{[?cz IMh;0~Qv}+^~_F<,~C*Jv Ʋ^ |@coAS,Ib!LCkW^</x:U8 K"G;"S3*3(Մe9q~~Ř1ERzi'ߺr Ҏ lW/S\Q!@ IUWQ5}k!:f>d970ytc:HI=OGcݳ$_75=kJ;z:J=G2tbw̶:kWۆoN:ڈ#OJM-=RB˙e27@2q"+alQ ]X|vD"B^7ptXa<{}uYaaY\3*ߘM~Jqyu WéHbxޜ69d՟S!YԷǹ|qfϒ0ȗr[ZOXC$.`u۰\j6Li]"|Oޅjh>sB\ާkGd+>^2'D-?(I oM' ߪ'LɦB$zDFrɽ~]F6hZCA5o.Ѡ$Ax{E˂p ⻭mD9bcڶ @R#KeM]id|F܍mF ;6@R- IM%Xrk~xcl@xȡ߆Ցs^‹{WYG\BFƙ+sa]FNtr]yPۯDM|3 ]"ys2.bwM:Ñ16ɢ&ؘ6pX36C~%G~`qḘo?ӨPիJ| =ji+_d@#~anW o:ܰdf 8z2w, a81*oWEUjsM8=fmF0AS @|cdႈ>RJ Wh76z<iuI_'Jow~j~I³9d"%6>7D W!' ZR_/=EB+78wEC)؀P7=":PRywdyߌ正Wv5vwWyH">"$'`pNjC,KAf酆zC"i؍&Pk!|G\>T wZr]iAv5_jQBy>jВys1)kYb%T,q9t xI9Mէ:$Tc![R[M~}+YmwrggiO/J.1Lz!" zpYBYz'TPd0|,A\VeƐI\ yLeA## LQyauъ&fR y&11` %*Zd=[lF !6;Cf(fUYӉ˭fn C!a˘,)1^Kwu3MB]ǹsmKTPUreSFG٬+nR +R黅N?tφuš1xqEIA]M C. k*zhmnȂ>gg5;b{ġW.r* %y>l3+/"ZTuHs8sr/tةawU,YZ;vbN Ge@6W{\̯\Ѯ {.h"feRuHV߹'B]!΃l~x#SiB?8ihҹ9GO0!ΐ\&4WZۖV#zH֏*od<$ğ/A(\g!ts'P(GyUV`]`v"aSs'Z ̫^iꨵu]뛢ɴ&&!*T.͎9:P@G)h9: 5}[3OnT';r0&2S<9Q/I!M Λa_j 0 6Jxx JڇyR 0.9ݿe/#L#xQNT毀׋Fp`;)jQV@4>W*\~ltw;<~v5-C5ofbUz:rqmPD /4P*Q8&yI7֝Y |#"ʚE˜bRՔxQL жi:bBB!R&qQЧ6<߷rB1ѿfNj>) )WC6֛w@Qt"- 7=%*~3.  qOQ;:ȋuG&6؃Ng=qP^Q^Pqy4Wl*,RFHXt +8Ӭ9H_4?QR|"/Fvn #z"Pw}A!hAwb}qL}U7D(gJS,Su7GN G覀 %/ [1b[@\eg+&1ħ|8Y1̢蚅s6n&?% Ÿ d/ܬ'8<0b.7ە)8 enAρĨ-Q Jw}SپWOzkѥd`o'⣎?-(X+ul#?;"1ۅbQc,DZ;撂;'Aa2cWq5W3X5o|&n~Ld{^yЉu ,"$ENZgԙ,m_Uc7˃D">^a ֿ:E]iRNjj@z Uu /XV'Z<.z*>!)*\wk0IO06P7RW31& 5@b2>ޛ)w9=QQ(X)Iig4$[:8h{yzsQT*w(X9Īs (H=zv]7gE(lE J+&9Bp2 ő8Nn Re6]e[k_*1;x^e{b_MWM'"˛\֗-c'AH^>:2addOa'C̄? н!RA4.>S)5^wu J-z?2 IYV܁RziA-3 `%uIywGˀ")V`|Ha{ l:QN3) bjy>J0Ѻя靗s| d0Dk^q|1i=O fum~?V p)e-g.ٯ@z16N"4] TK*ǟ qId|ׂ[snJR՞QAwR@kPSnT;z9 7L$c٪@IO:;DgVLHQ*BP7ocI$4|kȵ+W.jBo&Cڠݶ@돲70^1'6~\BTd W3eMF3@*YVre9OΘĴO~}/7|(L'3#\c`0V``1'I"xBAa=2^OR^kuʅt)4+g0i6۝I锃!7ۢpzZ50 [袾ZL'k|uVޝh #-d1AfO()df{oCs<=k4ӹ9C(+jc_u̓QDX}@}֍(B!i FtQ Ƨ K贋&wwPVW ->^ɡ<W(*;zj D X,JWBv U <1."l:4ǐz0h3 }{J|)NN[KSTSrT'4g֐&{JZғ> ;Q*%+0X V5L6?t) ێ5P<~d9\ r+xo04a>/&ғ+P3Q+&AWS$ :Os%MDj^8@ѝf(_=^Bj(XL|NPYBx2S$|b 5HMtt3&kZaC"j'ʾf T⳽T:&ANGA󃆴횼t"I ϷcRx*3V`Zic6 a g]n fCkmj.=H} ?6Tf':P3K\<9d>n$Ie``ڀv8lֈɒ 1É=!Oy8NF`ha$i]>>Q$H\xKN[-9!74p=nKpϱzH}K+{lbW|huTb'k4r g+k#S%D"mfaE/BTeT&hX6G+MǢ7 k0Wuمzj7qT)׺q{_KwmnC M-H5I"̱7)s}5`- "gE:2aoN<2HR&ETFBV)tXi΋]r3B y\I|l޽ʱ&hH 胘9MayM%F^C%;$SYwr; -8Q7V5BIMAZcN=WXbiMq279oF-6ׂQp z f@9W>@[7JZXX1\vrq>)P7 mQU?٢6;6Yl՘247o`- ե3#ݯ>poe=CJֻ " ?9Gkw7d$H]<>+ ?^|.@m7/0^YWBLܐg"h ?7#}(G>Cfe%n{ Pp @t0?M^ 䩞pw '>󿛷"YT!|9n Cմ7b i.(ᡗ2-R_SR/W-,13Zg(i^eL<~#M.Rt hΠ²E ¨6kT̠ ғ[IzwZ+";-< ࣆ#+;+fKhu<5>i Z(<`8Oו+ fM5ʻa=̿A/Ƹ *C&*],VS/S]gBɗY_^*wm q>J[j=v e!q>ʮ|lJ4,@~) /X)Bz'UJ P*3 )6/|4EUsnVᶤgoqfIƲ-m6?٣OЊch;|^΋ |?cɂdNr͘jY)0ИSjVgz@?~'w驔g<nx#lA?<&X{v Fcr]n10򡙍8q6›5MJi+$F97 /`uZ, "Ȫ%:43BaƱoBdff)S°fqcԧʯ⎞+%pM3nnxgi-`2Y XZ U׈\6 Aw!5qQNIw~f@=Kʸh;hN6Xaf.Κ"ƱO Rxĸb̻%cR=k.;:7Ǯ N EZ0T-4*BAQƆۀ3k+y(:4a˂.Gǎw[OVH)Hm~Wmxh'{Cr,'0@Bl0,?0J,xkYxQND[glg 'i%}r{)on~g|DrgWpu)!f:eXI騸@j^km 8 G|^wrb2A$=A-z4!7?EuƐi6D]3җgGTLo[AbeJz: vT93zTZ(Vd8gk`1H^lIID{#|GxߡY-8nL6ЃY6 iR"W|@Z+*YrpбG܊(Lr>b#TJ@睳(|ӝՉך>5ɺҘ;xVT&5+K􍉷.Ɠpb 8h7U^RG4d?.o7,#\KwSNݿr-t@T/X&lFKEo.zJ!,i'# TC5cҡ>_ ŗZ PXWeK2v:Q:&Ə޺bSUljV_'ܷUm\' $q9C SXRox(&w-%jB؊Eğwc}o^ͩ]KҰ2̏g,F֑qL?k\dmxHb=$6ffd`nVi+*^D+0uw}2ObϽI5qj#rg_(MQ[Mi%Sx :8aB E5hКky_m7;Ss`Z`Ӟ259#ݽ3ߩęz1+▩+$tvFwn#{rS_2r8V.[}SĩlJ5JDq1i@ػƂ "EhLy[>V2j75x S+Qc}ZHĹ#b]kb.pCN. f~"m'^OQ\Ѽr!"_=O[c\5MrjrQ#3=rvA?Stx8<\tdā02ZX'ߴ4Kkzb"&M4sgn)vI;mG1C= ZUlXR-&ѐѯfmqXd/sSrǓfj*2I#̍(3efUm GR8ܱJ?{3FiMnglz( H<1,j90 J+Mn NHLNޖ[s'ѣ q_SU,8qS1e3Yg j0>1]Q>0Y!FFYgDKN - `”J"@"HJ3y*ӌz|N|]"Pim^,"H\kDO_Ҏd ԛFl~F(@Go(%hD@r8|[#1nZD ^+C#?ac~ D`~;) /gstCj?h ) pLgrw|0 [/t!,lL "*q "κWC^e8dFQ-Dp() >ec 2»mi'!#"Oo) qB.jn}P|2f֯z)x.SJ^Dr3iWA<|n 1h5a1&[?E_8- H6Nn^~|Cs3gOf5nxBd.ó$4OȄkKxSӝkA {0%T:HjQ+Mi#y J۾}sgE%tV$V $x;~BI1q+ .c`௜3OL̵cd_j[~K:[my+뽕31 _Wj(f.ՊCA)wgOIQfhL)Ci}B0eq'+غP>W E$_$7u1H{$qWw y.$x=e.pY߀ыPC3;zSt sFml%N1"l:0j*5w`=mVH֡Bl2G %z䢴2J)aν!adueUSK b)~+0~IſxCˤG112x7uȶM>ǣqόzmV{9Լ bI#tCʵ BV@gyq*t  YYt߄3;0׳HEM1|>6lU1R4cvOp1従ס AX0ɵ>3J Ii wϔ|nu:XxTRjXóǔn,u*tgx 8\NPoQ8=.A XѦr (>}'V2- B6;%kQ@C &^'?!EKʒ}Թbqj}QKh[ Upoc'_.Ayǵ߳4H;3^]=fDqt^F.UmDF #r=nh,i"~;_fYZL;0}Llۙ\DDH+m;6yJoJUkKXbaJΰ"]z+I64R$?{YFܗFcR˼c+vxT*Ą3q5y"~;1vk)ºop ̈́iy+H^GY [Lqg# +ߪdPGbeXEZOL( ~KWތQMWg ZSP1LY9wR5򭥷D!f]0;8Hct(4ȣO7n 5rwlv.#h/W|9Z ^[.)L9N$]dV}ڪ}{.z:p("ƴ6OqNuvVpb *OC!#' \!p-:@C*LJHreSx4g.O`V*Ϣ =.@1G}OR^S4m jSr`<¬[,\d[1׎= C+Vdn3lLӷQ( f b_Eh3ƠewQc㣕$Z.7&A^?l 9]| !&aro*Knf'~{Vˮx!*mLgK_s.ŽSV҃\Ze2R9u ..Y]p1- (2eV+yTusqVܳK0@+ذ>3tW䝷!_Sr 8*XskbiΩ~,׌<ǕG̣kG ;B[j1n|E,) (SR 83 sHXц (W=DMURk^L#X͗gae:D[1~:MAL{v2! u]^s2Ĉڳ 8;16F^Zɞ1wKaWtۗn#-φk)<|Zą,hK!鵩Y==++H"sD8U*}6 yvR9c_WկQAg5-hŭ\p>`geTCǠ G]6}?va((-!߶U8P! İ P xáP 'GCv+ {~Od z]GԌ>Z 춅׻Q$sm\"dbyLJ8RZI ހ& ShhŪCÝFd "ѯEvz7ֽft|P\hby+/՟d'ݾ#k'oGbA͠Nn,NK :;|- >A5gJdq7hr7Τxk}?jXjUJ|tZ9%ԗnNgP*̣U؎m >AxLx$c/6u{1,Z;>:%8|R ,>2dx#I*#^t,jWϜe0z0 /̠HhY*;'>NQŨF-O7Z$:Onj &Wzy#`ډ"uyOG6PI8f7U*ZaſDnO Uc6dÁcx=%YbQP!T5fx8r8{8j!뎽hg;63*1@(t/cedJ @4 w'RM[ iB&ﻄVhgB7˾\`ɓ.+yh:9j106Vf[=)]3P;?ѢҁHNO]b\ &sp Rp/sf(70xN7ݚ_Y ,yǕzux0a\\U+qMI]ӤaPH*rO/92[1ztΠ`1@|(.PNQhJ{]lX# d<:HgY=C"Yh1֦ 2S}S:2pnJK_F, xE0 'йf \&e@X$) g Lk:1NB,E v@`KY4lD`q;I͟fQ_]}Pt[="bgD5 w;hOTUd%`\KNXq^<e$i;+U|4ov1x 6s:`w*h E[+q9!y؆gs[jdjr=ǯoU=x=N+ؽMBicO,&X@h5Q3:o!kg0)1t]VVQjB ?;.q%և>Dwihv+qwNgTɺ+W.8 =.'H}ef;%S;sY[NĝxF0}nJfVoP#d4)A؅GпaruJ DLD5,%Y{hGP3ÑrvU:jK!&!?(r@lUʟpDKUoz7mq*`P>g1GMOgŠ[rmGR<v0S?9Pg:$wt* 9i@w54?s|levXƈ{Z">(r7 }=OiknE/ IqvؼɧѧKnƙxwE7~3 V1'.[pqctި8'Y\w1RE|KF8Rp9IH\|kQPEqKtͼj#:70a6Yc~D8Y1$5(OA"8h~[g|S1 :*Gux cJi|Ѡ oài f:XL;scN<:. mny뺚a%,x`clV`spa+ȫY~{~M(O )hf$C7;lװqAp bcβDXGJ/8~g* /| o1wHA_ߑ[X@%)s$WnEfaP72}5J>X<:_o0tUb%2#rוPZx_3jZ 9նqT*T)~']&B% ~|%vH(Lg=\zF>st"+43KއÈp;c^.E` |HZ.]m bA`6YFY,SQxcG AXWej os~+K+V6g^?A#Thj L! brLQ$5qיxg=}Oe=5|޽qd12m$Nf[gGQb/=Ȟ8$߯8Uw Lt_Ppv<+.P`Ya҉EN"vCt:7FKl"Fz+F,#|ۮ8yuVG{9B"҉ܘ،X.6 '9q@I*+0`D۞\՝)ZD bOǵ?4ۗGAALԽA<5[䎇sY{&&'lЌJA!B2ZR5W vADԦïO.2LH6eb2wcH~@aKRMUz/ENS^A*&P)uQT‰Åƺ zק ӛ#!7ŠjS_`s2n6\F ӣ\t'Ech(q' ַ]VSEvgk]ǞXuRMuS @}.آ`xa%A 7!ܫJ7/AR-Z޳CVW\ȊKZҪ?P+'`eS7xQ1j2iUyԸMK/k7SLOa˅wc~6Fc9M4jqk%l}XIU ~:͢3Ù]T-|֑5}QkIj0]ȶK 'On]\%_.̉⻃EIn=9&UJˊRQ4೩L+y͇vg2J9:SHh7tA4 O(7AFP_($~UCMo!-l\l`Bm:z~yH- r:yxfIM!D!EQ/%K ZNNT8 UEFNULq싏Y>Ws{5灇ּSI*:5<PGL( ˗NȨrhaz|#JD:m bg.W*K2%11l z84^]E|IFQd× T^h(Q(6=@jHӴoV J$Iw;U단ɝ-[x*!TJr§d[+g-;d'% Q-5\ 2A?^bMKRY ÖcX݆v@VXKl*$T]c:f1DoZu.0*c=Tgz܍8``#3/U6ld}p_虸\e`}{q2h %}`$:.:`c /D{).J t€߅ 5@,~J9[fTلY=8Xҹ7VTPL2T%13 ګ X;u4~csVdO[ȭtQv㧜>QkZ1A 1Qx=t eer[\JV&\q=6i1X=: 9-C>sNв G̘tn3cmz|C[ -vЩ/]%?s#`$h~~4<0Ot$1MO)d@΁LD هo[j 3C—~{{N Vv. \U y>FV[BVhF$-'ԭ$ly2k% &ꕡeOjZ"trzUcʬ#|+-$;,\(&|ɫ|Ց])T+xQlDckxwB=G$ GGW 0p+2(~ƨ&ZpqWv-}D\M~VZ97e]hz͑Fw+!:6]ِ Z*3I-_yUI^cwB+UҒ5r<;rY]@~MbDڪƟ~b?+̳X,K]w<&BmOi;.O%dոR =1kf=BG]MqX[4 5f=օ$^dGZ*<>Xfa#6KIOO8eh8p/dBQ4atVަOHzAT|@p;0<mK}VZt"6w&>3Y3)3<pҨR,v¨T9peR|. 1=gP gNCLV̅!ExGmן{K EZxs]߾̖8.Ğ쨃2%*V9o}UQ>]s,Ea~Pn4e9=E#BU* hjBwJҟ>aoovާc[ܨ}<`Ap(4T74d`RtdϤ\h )m4;E9䚄\J"Ò tw_> Ϣ%Rޓ=wzƶSIz[*h:q^q,4V#a-ظ "hrq 9`)ix;Vv&F[_{n1ëICp%w!¢_Cmn|* b[xo3Vܮ3|cp#ww$l6l+Xe48l̮Kiw"z:uZdrJ0y/nΚZ(Pw]X0;|Px?)J ;eHuɺb{Hcu ݉~kPiLAcXX?:6'Hś}#ٺQ :[NS-unl]^A_dDXbC 54,O@moweSM0eG{/iTiӵ- x"Br&vM /pq eM)p2U&2 )I @ f5p6f)uNu3픢[@ fk){PfX-_C++4$Ns~2d @EUD?;3ޒ |K爨/eg\C(^q z8T^@_DԹ+EC4=;uJ!A>uMz)IFh7EQ܈ Ĕ;B g#~~ɚ[Uh EcI %cNbbCE6# JH0d / 37-߁SO0@O^Ayd>>C q Fxn$Nį &=zQ=^ >k)s*ge (>< JC*͢lU E ==܍j أ- $ʊ{K2ZBuō\5AE!=tJ/@JQ Hw +敾}p@1p2Hc]sb9vbFġR+{",S KvVnÄa'3*3: 'Qe6V[lq5s=T]Hkf;vGgrc>U.8IAd^ᔈ|rh;Z_rjw)9i&BӼ-мo麳ka 3O1E%5w-1#.s0w bBfcr1"8xrg6p$joQHQ'C׻K+*?#adMR:pbCbv5g>Z#~KD%/]Jz lF@U;:q|}SZ[$hX Ύ:y*jg4fb/= !ۜln1Ȩ cs/oFB+DLٹkjAZh&NWp|d B|ШU%3ߟi)C 0!IkaA0ܬTNpɗ O䳖\kY"G#NnK*6 %Lm(3-Qq>S5@KLݒ܏Ka8$M?Rz )wq]VCpH͎(B Չ$!D3Z|8WV_p+ N{_6GD6{Ot2SڕwuT(D1^b"bK7 uDo{mkx5e8]"}s 5m|\Fb̊HMG]s!m;XhREKãfGU@ UF-[ߒ͝`?Fqޖ׽l)<4 RDKP)7ʈm*ձC--踂Ds EZ|N:s0ڛ8wڨ 4kFCP+M_H:mm*իSKߝ3^vUw!<[} 8@~[!֔xbR |`o ݔ?_eFK 'u`tmՏV+5:f,Ql hzmά%DN&0]q"aw]1I-< u haj(kn9d, <n*5g#hʱ=' %˫= >'3/cLyB d4-\ _,f$ޖ`O b y˕C1I0]>2RGDʾR#P3UOδB(؍h?އmSkh7X2?Tr6$kF};U엔+g88%SWљA.*4O@ю]Hn#4W3o!]V[2v]q(*Tfv3BيDEE'#g[[cƟ5GAx!u𜍮yyNRRZ "op_,V(]6&n5$5^?UN|ўR|{bE_΋T¡ 8T.['g-BH,Z2^l` o7ׂhrwp5"-A]/ؘ ;:%/&hܩ`lX2jql*ĕǎʍKG)!0"2US"9bM^Ih]s7ϟQZZՌi 0w-vkA06n}N}te>Q0>!=@/ ӴΩ9TV5sI)5,l&lԢKW|,! w&tqAJU~`R<=|Ro;ڟ':5L$46H.L&E :{^͘g[r/srJC%Z+X1DRT:(Y0IU7} Q`nuiq%QhҒ,x+!}mF( |Z4pK< h~"#F)saN9:n|Uһe7?YFX q5bϜ؛sǵ86?TO UM%wSI%ӂiSm\pq|fk}݃R&īRUAOQ.2MDPчX-nil%Ƒb!Yx] abQ>Vxk$T{D,dnl[_I_&sI|HrcQ { E8ޛȏ4 Oz&%P9 ;:&>%_L\j sO%FOqkfg.dB$[|rQv|aOLJ62_ZAlsv|7gl}vDA }qK D,wzwoWhmZX٫kK %tnD6ޖ$O  eZ"[F%xFfTXMa5} +' C ix~$N{) =ŮFmQCvz aSHи޼>hA%UGA_>_;`(:`NDN(,m<'ҴG)»ߙDGC=yq`e"X4\%u}%wQC߽sy>©k4DtcsݦJ\^ʪS2XEVh:H" *\W0MUKv5~aP1KEp}s+s #"$ E;ӏf0`#\ޡ@'k}699)B|>OL5{cF/V41o恼CJ?'$A%Nr.2`> f4Pg,^kz`~/gR5Avvr8g`k3@Z[8iuGlFdU6mdݿۉ>(廆M^ R41~_'2b8w6Τk|?<.KPHޞ HS7^Y-ZƑs%e`AnW_+vB7N-Co`"*(e +aM],i E%h_*5PW>*KZ3䋀 A(?2+U,G[}"1@:eEmiNx4ؠ:Emx|4I#a.%R51#rwKpmMR@W~hNhVmi+Kk^Cъ;%-E1jm2pdQʌ;fWir>npjX -LY,E9χKkkJ@{FKJkg;|+Mb6{d~K^̺ -f3hTtz-I:z8T>$ 8uO0`4X l?EFh, AV+c*-2 q}ڒP$ׂFVTGzYc=!+ p9Bb q_^`Z! q\]*ocǨVoS;'2"Uic*Dmh))*ϰYu48*h`f~z&.fWefO,ښQojۄQ@q?QR`;S`{Aƅawe+N%i݅. DMoq/Jnw9ldڿ?>+"\MHZ VG5ޒd*xrƄp;΋=KPi> C@P+\wX1(YܦBh41N kδN^AsYZ4Z wQwH>5J!^F4Fg ˚3' 'b#jhs3'~Ur)վ8R=r8(QjCz~;c*5: C $x(%>5 8%!/B+--By{qIbHP0 bS+)s6p_O^m=a:ScyHˠ ƨRV%vad H(T~sJd3:lҫ.Ka=92b%RPѕw=ҵLhaǵx9g )MhT9Q,DK.o 9F~G; o 5|HN0iPȄ BÊƴL>0-{/@=o&1'm?zk%.XEEpQcW3-w)U1ˢ|6u]yDnN486H%E@UBR b``!"ٵ'픧5+1à@ ;l1F{\ra4D^07XJ ɚy"G60cCkϺgF-sFE @ 4ͩPSFBcdᐘm14_&_>؂suv`kNv)%&܍HDO9ZEğ&U\3$4g6!^XP h| Nk{}Xzc{YS#ttb,% ;j_R"$CfNJ<4CZV;q gvdʚ $ |l*` FsÙ]g\5[)Ca?:e9[)e*5\tIU5wOX9OsNW,7&>}w]c,8̯NlRD;#rv.msvS}RH> r ~< ,[@nk?ư@ν;0sV5/Ryܟ~˚l?2(p!MRo HE6Ώ0I/7p{Ttd89B*ʗ/+4(@>ӶB?E4%/Ӧj#-AZXѱMkm2":i1P<̕ZV7u+.a*#.g3 &̵3-}NiPl%M[Ћ#REMȞ9FyR\gqp7^ɱ^hbJš,FHd2@E9\-(*1rcIWm;ȀZřw J4bQ7v|߶N/ w 0䀷oL @ŋ;5=9%ixsb~~Q܊||/rfB^7J7a{I jJS2GInV9fȔYmiq Wji.üLizQ褿3x*B'm/c"@:mYj 8 X5BBt>E qk4țp#՟C6Hj%  :.jB*Yh'8KZUmӺwߚO;%\kwp݅eΊHHgpA J@U&94_Gio蕂7\}-X_\365@%M#ǸWB |\}{Qy0`d Gq(i&^L?S'QaSJ9c.6@ZY;{< V#8׭5-OмVa'fF VAw; k*U-RCQ/直P"E:jԍ&N/)icPyҧ=`ȁLLځn9򿼲C͍0Ї~b^c> ]GWO 237BȕHy4  R Х^m',iAծhLF>J+W2En1>C?_:U'Kr%ї&'+*9o a &vF=[;RQ'* 0n\ʂRjNڧ'9m`sL̍DdkLan9Yv)~.V `!g"L_?  RT%>љ67/L?@L_"Qd\Yxb8uQ%EJy}عٷ~Y T%D?BQLΡ才}bĘ\PW'NC2{'4cדqj$msepOQ7x#l,3XwIH?*Zt6^0p쨡F*f5Zx>QYFkwG^/Ox"h!Zk\-o] 롨Px2Ty(ei1Gxz;-3~ @D(EwƉMS1ңu^sPOBەY9%a.BFbobk!W0{ƸN*m}`-GbR?Mc[<~FR1۠=V&x5R8,ZK+9CM\،WV50zXY;}\&H%'1B5!d3>'ibo+Exz7]DJF|9/ 8E#wy#``CU,Ӧqռl_^۝&6wtpYҥ+2Z©F`4/L҇ \ H[$A>`6 P6L/Wۑ)(Rs S%-Y /]X4bx,#Lm\\>橾Q="mUoQO 6،4M Ljl]naK <./v rMEt0GaܷfCWrn E$@Y&c:'x7[LX@,^He37-+&<.Z #֥#&+slvegUxivvo,F/d6ܼt|_4[ZbKx=@wԧd@~_Fwv]._ZOzBIz9":Eq+-xbUpyJ<[w/}NC@FYeabWp³{#: tD'[ 9NaՎR|.reI?Ĺlyl&B1wn -wΗʖ}?>SAӌ;Qz \O_mƽwY -Ea&" しd@+}u/pw͎3P߳H`g90Z9žuzdfBp9k̈́cNŹ`#rytx 1aVq؍Lqn*2v .# 6)d[&&&YZ nGsAeѽ[F vOR!AjT  K9΅\p,o:U g,Lá=HYIHcDO77Zv) 8c9@9`3};=#>g-Xwa&"^Lg*{s_|D qkMѡ՟Ŷ!JeqS#izTurg^R 0 kǦC?r4Um> 52)xYԸqɭho'&((gI_3GoZ VO݃&)vRܬl>#!.`[d/$qw=[#-msA *pޟ}0dnu&|.:]ݩgE\$_:l^Y.|)2Y솈O D9`3NUޓNJ2nxW<bv֮ It+{5@kDWP4H+Q_o0 1!\= v[^7deiOL?PSlr˜kĆa?K; Eȃ_:IV3j?|V6v6acֲiB߰5 +F}B8.5{ $CnP5eM`5)>󞛢wKD.yI,`qNQHFmC~rd :{ 0Kicc1U)tSOy e.DI^t=M,'6*$y} 5b$z6PtHRhHmYsU$kU+xл;ӜkN>Up- [4o"z8!`nPJ ) P b=`G?GI?DD\eVnK 8z%~z187ʋMFW=TAϹ*N;tV`_w -rʙ<}\W ,XNEDIް&%>G`QzM>e* />Oqx *IezTO3t-Cf y2L6am>gTBqc"o kYN,бXu-7utJW9!rW#;`6^LОjڦe\Gr7,vK@*A V)8GgjJ`sPg|CuM ))H8 a()#sڙ-B2~ M"pY皶8%! If r"@Pv!]\sToxzO=S&LhrGEnVbztoeGަ}Zƫo-. hߧL kFȚ3R>n {b.Bw@! ~xA!ÉFMN o^HN4!mn3Ŷ~WĽK~g|jMuplPL1&hPC(^4ΦJeUn+Pk ]KkՐ0oχ̒Vʮ r<` -LIquDV-c}I73nk,;q32@ LL.]kwhmƹD\EfflU%v8J4^LM'@F|_L J1 r|4bv$ފQemϘi <4n7F,=dR|SbM['U}᧖ՂGe[lVe3zqG]I%ͷS+ӍB$љ˷SX3X䘣3h's ݚ\llQGb9ᆼ^Xf*xIկ9DU'l&nEʪ~%SfʕwP4KD2[$Y:X;Z G #%j Oܦ㩨-YqD8GQni>/3ڸU-/"]IU 90n lo5 N J~5_@u28Gc#e.4w5|:$I%\װ9no0bQk5 aUn7gr^=S´M"a[=7``~8˄w7HɟQ+$dm($ 55cbw0'!tyXKZ\)Ą YUC-E.i'/$^53oVkpǂ1xfKi 7g&]RcCņ|x<歄r3*#ZќZfU01QOypi)bpSIhp,9~ kQ_0#?SxQݚC T4E\\.s̠ Y\$5mm [;^1KMEy\%b,=5*b7w{@ց[BrAGAr5 ORznϋ.wdJX($6T1y$ep;*2މp ZO@.kr2Py|$Cٯs?o{OH 7%`BN-i*h-j/r~hv h5,ma~)ݯ2wstJcU-^[5{vuA?ɴK2"tS9P~枛8n}rns{mdu`ҫQp=2y4-cG=~Taٮ8>si]JF0kٟVΖSD#fIa#ݹU#EUXʏ3f10TG a\t w0z|'"7<9j/kɶCty}Jꑀ!=p /5  "Ƴ'8M5r7t1czjFc(k!` Kd~͊lf}.jk9;Nۅ Ixm|K~NZ]* vcfaŨHS\ y+ʜiOMaPO;aO\Х3 7LƣFNQo-h]Ƃ/em3 GNM/4߅*Bjr#pJ*)︗7_@uB'mqӭ 2.ZP*Zjsm.':߷bi.O h|b#yoױV80?>]XPaIN6Ѯ=sOa"zGAB6ݎՃ_5YLg ; `[ ]fPA霸Qvן+Aq;Odޱ(āҽ',Ғ1|P7aZe1.69hW|%99͈+bO^ zu B 3 _e +"B  xjjzTo^%DP<ި5Yq9FZTѐs`P+ mcՇ;>Ru{.Dy%-y+-:,:zZ3N+&U[#@:aws}{ES+ȴ`Xo)ɂ6&d)uo@MC?Mi^gr +t(f[Uy-yj ?y\pYL{u!E(IfV޾*sw[*V籲-qjVB@FjsѭjSMql U$\7GoEڮe`?cxqzP.yl dV`0Wԓ28ۤGE~5AZJE-'y']A̧M&;_OSr.v6l54܄ʼnr@tWȒ,r/el3nٜ~?@ܞX`y//eH _΋wT{!i.1{5Vl^z tѺ@lJY׻+`đ56TN#煓%fEalO:ZD3lF/*2DTܥ>\H-FOwQ^rA/ KYȃu\=.].YNLW{z7PS)΅Fvp9#@DsU;޿YrMCx`E& 2C |pl@GKjկwO]wClW;PrM#_Bћ,o%MTYڅw(7ɧ}JT YS,Ұ OhVH6GdCߗR\5(p3D-Կq΃_HkbARg%8|bg}!#h/*[4 S; aCeopKCX}EL^-{4,\Sh,C(&RZxS"h.2` Su$7S@ ]Y% (febuQGfƆʁa†x|[ M~,١/(9)$%T*޳zú۷U;M:Q[1߿O/#D90CS|ںi|#wơzzmd5 ObpZk!¶+Vm{%g ESZm+~G|}]J`߶:Uip֦2 :#TK Hl0Ynw 9ˑjSrLG[o`-p vig#>v Ű{nl%l<_ L)lzJ<" pq+f=2DXfP8Y1/vO;fSf>S~08CBX 'a " c/|i!.zT yFo<]泾&ka5#5\"rhhyJ[n%oufr?#8bKZQ5x0_h#YqɁis; ؕR M9BA%b<888M-$^+ ȇtPCt:^ե«K'ռi!,'ϕr:+';]S a+1^¿Bꀠsw@I ,G71,Zs7B&GʖT'|zb^8e1==%xG8$\/?;MKN5./ rnTj3{e G>G.T`ʝ$Ҙn˗ W3Ƶ"EkMJИeX2|V=6_%GA@z26>^Էomœc!fSl=1 7-89Ox*bu^D?6{_@]&а U֫' ᝟8u%{NW$w'"'(˷~93PuUߜpYwj B ŬUˑ͕+N?17SR ?mҋi/az$%A ăk?G}s[7Y̤6cI8@⒈qT6lr٠]NC$ͰfwiZ:h% vR _M ##j铉;g5ln`Mx!많y1a lA4Q8o ]D}I"qǁDE ^xG&H(3XjњQHmGc& 8d|9(-vRg}\5fU X^<1!̓Ov"89]":\Ej;4$$Qb/6xxIC/9dD{ݛӖ#]2ű+?h:VV=U:^LnH-9֠|{QR4< qj;7ڀt4m pIS%>EQ[;ԐMkoƨB ,{sp< nQF}q1WDp) ѺߖFW"b!ָYTo>|D 3`$c):< 45[bmS>?堔=RD}@8_Mx 5eeYw5r[){Ўǀt+qotw]|7K B zѨ[(sĄ5[R4e%HBEgN!VaIrOﴍǜ}u(E lX&Xc5 <\5t'2hkSS -w?Np# e-sC.8gacO;|^!'ODƞ;'0hq[LJAWr3-gd>vicmi|6Uju8vyѵϑjh$*6( IjW}m B24$,1O.UK.ne8TAGЮ1$!K!b[[`]h0cHA) LлT)}Ϯ dt3M̑j L&8C7 ZHU1 !P_hUxk3Aft2{Q}q(oM >Yd}ܪ [h-x۹ϛH*x̍B_A]`^{O6" Ǩ ;=]vfi9a&؍j>A1n_ʲ%._ػ gdk-xAAh(Tuf0-5z)&qdl! (.N:t+z{C $E dbsHhL3jmOª$! B.ͩTpgm FH<}(IU\a!G m}b'K̓b-OsyGRc4ǂr`m}C!6\55OFY<\22r8mT4)O,xUZHAU=15i( *09.=Pir/*DZ.r5< !lQ>zCBg<z y]3*0b^Z03Z~Ze jI$1 ~Ձ ˝mt3Y]Zi]PVnd=y cWGUXw9)kx[Phek0w ʞvAz+$2g+195`=ּ^ <R25#gC8bVQչ9BWFddjx) k8I!oiTW~XiR(D q8 Q_vxWuV5JmR],Æ{!e_Ba7+\kd>gOpS4wV0"Ce3!$:|3ꉚWy$t㉪gJFilSp re& n/â=dk^*|h[\v) $2H ]JAg튌i4'8<ϡ Ѝ09ټcm&on`1Z0[1 !oƜZS A~IҋMŅױWL3'~@fu-bJs6EJT͝_ S}ߟlD?o ٧.9uoϝaҌi#~ ^#Y-sMMƿAqBdHC>w:Ƙ}PќhvQۿ3ac.LT9>S(~@|P#?8lFq, !M:J=|R7޸ϨئtozvvՎOV':}$B "39TZzyfxcvv$%\m 2EY(_ tHHRZ7:Z^ϣ-W2۞tz[V^+^E-8 {dү1PjooQ->R26I!^wgR)$v+h jDs}Ƒ=Pn5,57 u⿙ 8p9[iA*iaV9/7`Oul491H"+%tޭm6x@,"PB>0(N^AB`°7Fƍf@|{o}dJ#ZEVS(_U] !UId Dhked*BÜ Q )L2v2'>k~!ṉ{G ÜXZr {p [7ϸ5$/A9^eaGaV#*h _Ck]<&Fy8?C^#,-+`Lyg!kAr0 N.c@q6y"ʔ  4(>97J`…%e߽Ӄjf:D>q-YL99ּ +'[| cJǒ9u04JEhUWZ-,^Q`Zo5'T;jWgnBX09S"b;zߙMgznǐŋ]TQ$ b>]r] hbuz #3(j{nG(D> )rҥ!Fh``Si]7P2+M]PMȼa[iؘLG>ƿb:愆#bѽ23(lwUEB]VGձiГTL,WɺU3a:#QB%O4IdCE5p_VtSv} +s/|}j=EvIa(2ủڮCVE v6T,rkk>uT&ognn~-ҿu7`~P`uLCl"ܲ@LYّIݘ oeX{e{ҧTUDsM8IpE%~9TYWj.8p 5ڤTeʐi}ETX m[z=ߜae%Œh ~im~;V˧iR !S-BrC)۾M(NyCBeg?~gYe` \WCrKQחR<-h%͡y!t~`:BPT(ZT)WrY.z;b"/}-`3{T54BY*MT!MO*QSc)ZM>cTh]w9Ch:M>{LM6^ t*vWz6msՎ3)9LJ)N9S6 olwUٜ/+:F9m@NdhKUy0T혼~'sU1;g qRTpKC[NkV% Bۧ0v: R E9 ~8:PY@#)Jx>;*$j,%1;Z9.(_ 0i| 'q=Ȣ?Yfg zb╰Hmi;VDwBn76'C'8O˩Chw,-rGvIrU\rΥpqrځO&wC[?n6eX3 ?9GWNǙX6t&nǏ):l~u|d D|ndU5Ym*BO ʄ`-B]mrqU[nL6紸UܑeQ.NZ)_W+ _X@%~X 7rsJ Ħ(kuK+G)\5H ŲTgt*>i ͯuo20/bC3bNw[xn_;|[x$mePii5ŀ3 K WN> _bjXx2=PB>P>.??N9=uW$3qWRw72rp&r)n$lA֚&%-"i'5^.Q1Ge-Ī .PրUV9c;4v>3]d$acغ/`wC;{!ѥgI꠨*AYK+cO09Wӣ@WiBMύ|),Op7%]N E>GB~VjfC O\ުꆭ'(CSʣdzyۑjZ"{T[}(y-16N[.&v.ʹdfL)3cQ~ |OooA^5oSc'Fҧ%)Om@Z9Uh~@쑐o)=@HW/eW\-r-X\|Kfz5wNKYr}W M@AZ̰3!H/2`o~=cSb5jb_>>PZjsx{xn8|VnZ VC _M9^=^P~ w{4.u2 LxjˍY۪nK +N@~9Sp(MGU,̏JHP(.{&-n)/m -@Jl1}S8]+ajAno#J1_1 :Ob@sjB'}clVbd`K(Kg!^oU')9Vcva="#k^K,!.%R ,kzOT5 .1_珧mQ4~aoȵi!%dZɻh/e^ړE0,J掾b7'Ƣ\ma92Var>pw<,`m8inlc갊8_>,.uh抙yWy#-B#/)XꯎӲ}u&zqC9(R*dž%9$M4Kݾ!~H٠"IF-$wL&ATf/+{@jg?t*/U5LUI4K"FcBS sg6 lFb/ksmR. WNQߤ`-W}9h5Kva0*侌-2z2&Qn ºڴ֦X@_Laoh~fr0dn /\C{Ttq)谩rz[2 ֹ?/8/!6 jN E2(vw.tHZLXЎkW̍ұ1FM[ *"<Ⱦ#0;L'?[U X%WJn癢WD/h`wO? M2aSn'[ l¾s1 =Rp$|iMYxV_ $XڳzXp.Xn*CC9Dku{! BMjbWTF:85H뭈7Ommq{4d~z+v~X&鎝& :M,_VKS>m=@?Ti.Im`5*<.95X,qa1&o/$*Eb&umW_&ɑٶgM%3hÇGS{"֙G>r~pNl<;Y' `= -E!y2(S"/wl xhc˺L[>&rD_B5,֐Q?:NQt6̵k"&'>X E f n6 W} #n1CnQ`b׋KU!31YEeWɑp5cж5L^xE72|؝Q'=/3=]p1RZkV6a ۶ԶK?cjS|NݾCkrwAJ|쎿 Jo^i9LKW:x;V)i/}+NO<$gVJ}r8F`-ƺNUfP鱑}E9UP4464 ?3BtûՄyjͶ+޸: 9NȨƁWt ^CG3LHڼ ߒp}eëkRD-fcPC6ߑG:׿vե?P.|`Ѩk6Lˆ. CyRڡ޻#V7"h%qgzqu!.7418Lq`l[Y]68n1HJNS+^Z'uHc;Ήu>z kgv+K)2ssv:K%OJNq|@@BO: .@sRw3ɘ{|e_PDxb>DbrYtXz=kX4cCX+q6\"]bITBM0uW .@~/cxi"t8Ǜ%&֞u-Hnyn1bi thdȹ^9AYT3qsE!h/*)SPb%5-\cYԇs; <(O}83{.0g?V^/&I6p|p|KK3w k`Dr(^kSHմF@3s L//u;=+\;i鿠YL84;sR`*?{#g݈r f"bEUB3bU /itp[hVUSEXN/uPo]Q 1w_fWֿ֗$V[I,γ0ETcٲNݷO}a;1KFm[K(v9BE `IR2\ZJx8s67Mtl9%VL&k=gB/ $e&dݧ'zбꫢn\# sTL9HkMk;fj޳Ior 3X(I>ek #JY+M֒,x}.եj5:*MZEff>]h"d]Ы^ZR.n aH$JCIA(ђ ݠq}x7wLmkPb iB;h`Tg}i}q7+7D|hB>8gXYK|oA j*nQ=2mGU9 DN8)W"+9HK-,3a+*'AnR*ӽe -yexsʹ7!*…k+pig7U ruM[oB4pU)9\A*HWՇ3 l _4/sn@; rk$[.WE-_;JN*%3JF<ALFU.x$9 awXr'[H, ~{G׸m0RC ˪LY)@) 7]MG)rMmGl|W[_ c~HAvzE5˒6J>F/D)p)iޖY" ]BdJߵ2Ծ4vpRDگ=w~d DȽCgrLVNPES\5>Z\FdyM!W!M&)Uӵ`7;98`@~VҀD-sB-5>1 cH_l:P%~|3mOCb:J_8X/ހl"{"&{721t"](!EВޣB{1Ҕ"򥀗ѓUE˨VhLj4 l+1pYǧ)|N!`0^(% xr Mar3X<7 8OR 9xPi@sOY ]ֺNMe<R35&pff]1 dP#ڲ[h1uWfr_kKꥯ(&i5ۓ5E0R׈^{W·?0EL#S+i \,o¶rfzO[p4>j7͐ lQC@R2J_ajlR LFKԘQlm6ԓU.TJ~אkUGV][Pn$#KtFB^%9;ѵ u>%nS)VWːD]ȭ\r v;>Wem/hu2 )2.9D1sS Yod&|Ꮟz-!/{N[$1 s&V36lY#YEF+V/I۪/0rMJGG;|6JJSVĂmyKp8(ӵD@N3s\Cɸ]uz|`%T|AcϏf{yW$m\m;򳶊4jn8}TVO(٪߽ͥOIl';OټxSRک=V02;<.7/gQP~rX w{,ћ[_&hEW J4`O؄ogWx.I["+f_@QwKX 75BR1jS2Il JEtlޱufL^bH{(„`_+t<-P"{,Rn''K'p;y0gצufM f!GhA{~lH%RcЧ=3+B61 YN}goO'(K!MӁxu6H+B✻̸78!d:W2ZE>(cdx^N7D%ܖ1#f`Chw1p{|w=&є=`3O|I7XLZQh57⅋Kd aNI'AI4Ugӗ+}8bbḓh!ik{oRu!\"jFkE(? fycz?eH%TuR '@8f꣇W vǯ|D /n3f%>-l >bv.h'dNY瓫d;vb5(^s}Ne`>SH6Rtlƌ'|F9ͷ @~2>-(Vv0լ@ /0N/EgMk[~S_SH kS‡N\I9 F\v*BkMݽrbiF9lf~¯fZ1j},K2M;7y}[[D@$%H^p+B`_X*l()| ׫1FwJ oiY`Gl}']9"i[9}'qe6lz:_^*Ga G& 1ĒA-a+;_s CӇoBDdah4mZOˡ`0Z:H5[Uy-2(i^D|DKR϶h!X^,,]ؑ s*SqF/f%^LBR/U$ĕ4Z#{t> _ `rFwvOa6w';jd=YQGQhTT7aħИBZQ7su>`hk"Zo\`On+W&"QaGPGn傾)V*-e|4p&sQ.6 0p!Ů˾OM[f@n"$#ƗhܿS[X/T MT0|B9*ۄM<=>(s!{9!܍WqبQH*}hNV,Ň( #=Gb4z4b0W(<}QI҃[E6=q'(4j8"Tez @^>yz?)53f.ic'8{GCu6iD`αgBؾ֓)^4@5a_ N+)eD+^/|єK?ġN:"N|98؝zdx'4[2pIviflFX|P .q % OЀ'⭁콊45 XMdz\M)X@ Gq%Rx&GwlgnY3]PX xLLm9$o4v'dk&4H)!#IʛCӍOM/]*\N/G6`VdwrT݋{\̷%Z,j/>4'OK]v,F5wFؠ6Zw ?i*Lpވל_̞ef`ݔ>؀kwjfqA~N]:<˻K\5Mr⛅}Ղ ʀ?(N7 &1ٍd# H<>c#]|+yPVIi.O{{NMF4U^LOCkn`Q K+>m9Z=4kO{t5<L 2Cnem0]dX>٬.Ѡ煮qHPTQe[ 4]v tZM K8h&s{w*2u߀!ļg}KxDT~" q!T4Nm˚Q>(ޖdJI*ס7%ݝa-tr)z-/fz|$l|"/ԇ (dɞ)'m aڜT(\ 3wϽhRR^Qp5jB{j^=E 2ًuZ40;g*˲b5Cjf>Jr 7 PYUR`>^%zI; yab%P'+Mp t;srFY /)28^!{:6aR +Sw[qWD AIFE K:rʔh)ZR CWZ2w2( $I} *lP/YjO"a^ JuSaP@Q"ŕ^o;/);4n&$Wn}ͿԅMjNАjrSe]ޠK#L$= õ bF(7(zŇ'o̸w[L&ide>G{U>XUS*znD;N)ͭXQđl}ѷ'B}…SCqN錑H4H#ψ̞n NTy4~۟80Dh'cA{?7sT"fB*)ѻ{oayFf3dYt*@TO@xgb/s7(w ֕Y^762@R\t'b焸WsB)QLN vTiHEl`TB=Ϥoa kpcWC0w(ҎEd6 p^3Mf W*W Uݙ`N }\XVo&AWZmL>c uLfiNZ]&[)pөH߃}LS,xH :pCB%"j=ݞٵR|_PV7!#X1z41긵)Am#7/f<`b+޳ 9/fA!o#a|ڢ*=Y6ɜ9#NuIHEt\yi>rB'6(AA!βAlm%ugHͮ6aN#qjy~h\U4ubCֵ޷4חB*9Un${r&=`(,F (WPgp;^'z~=?\;-{EsE]U&"ppzMI'0#A|= Х0a/ }ϗژΎf4ȁb]"KCyEij77=k]ᑨ+IB$o1_@R6&4nk=i_+=@>InEaV 7.&<_鏨9|5AlCL/xTZejJ?yoB?fd/)3A5@xgtRZ  eP-=QBސdna~,Xx| GZ<` JGf9?')-*库-.s9je; , 9*iصϩOuXV0,YVvOU3_,!V:da`FȩsXmJ:qb+x1ƧT-;?nK<AhdK@$ )5`kRj=]a臏u[M @mnvm%J7r"OK|i:p`Pj,\^A "R脄zQඥaQnVsS<$#y/KD<=Lǧxw.o>v ^ѢLy>ZڻAQv6ABP@ĽInc.(?k]Qp/ Qe?,7MVY2@0OELqDs WMS}^ I+mE^Bx-I-_V*t:\->,eVO'~c$R#XVh#8/Fydۗ+Oʶu֌W?ƽyj͚'i2vCcXt?M*m%GG YQ(撏v+g¬O pprkH3w XRΡ 7՞ϊY/-)VwnB64iC">~@M6P H;;ə_9~T]Ҝ,8؝;OgG=H 08‹r]R.99ٌFȅ89c.C&g]kd_ֳ[:ۡ!L_&FpK(LY2z eQ܀Ktůsr'}l k`}md%aЖ~BzqJ?XSF1X{yydv#ngkSWkM^D\xq7Z\h2ez/F촁k|Q*4R3|^uSU ec |$ujMu& a^ϨhT8݆wlbȃs)aH3@ޣ=Ta|'3^A5!v]Ds~NvrY+Yfh2ЬٟDs[uj —Fq8in!N%i6T>qBm;pXX})_ x̢ytf82uZ`&B~T;m4xӳK@NB XfЬ'jӇf^ ڡ57( @.bPV{HU"ܪ4/SeL-CM ,OU 8Kb3֖qIGڦ8'J>˕J+OpZe.֣cp5Z ׋n3:Pya@T7{_[@(1Ƕ r[\c B/ޯ⺠ȥi!8Ƃ۝uѥɳ8ӠM L?^_e<j,eCQ0TNfh3y9o:bDPGv6PΡˣ|!bdZSG$6VQ <}am7X+)E1.SHiI  VpRkOc #cUR%D Šejd]M=% VGIL_aAzIPD &dOzWM$jTe:j[*? j[ w9{U}<"o184#@`'0=sLA=z! d5Cqs(^yRǫp u ozT@%~ X\SM<->[DyUOtD<Az=8M\{4PU[J^N\QsF]NqL˹;9tEE0l4CAM1/Ry)5ɸ wBg@UM?A|QRѿ ہKouyמܖLi  :7/yyҜVWs˸~CA;TH-nJRAŭY YYrx73#)]jEUHD?̉e:?x&/ 2)n-_ÜaJiOQ?q}WJlx=xn}E- 7ޭ{~4A9>=owIY,~0OM\ml1Yloiѳ~ I4iO!-mD\GiV[-|#4$jwPz Y¢PzOSh̨GL6{7s)ݲQ|VwN.}9Y65b/=P6J|&qwY!5 ʵ⼦-@ eº|H&bv(bHZ\v3)K;qhX5߂ϐe! , ż(MtjTTR|G6Fn!!oƑKhjNZ#R8m2q}9Gfx4׋ 'cˁᙤ;ѩH<Άbel&4J{ .<0qw (+c@ 9Dpx}2;E3Ě]^ p$Xꝩ:R&Xv= 嗟JV)жѬ-y4-9'&^3J;㬽l~ڤRVbe˪~$I_Vw31'F஌D$ _miAgP2LPtl;m}PL{"&9U b"l$,,^bDJ>l04m 4bn}ig\g ԋ%@j&8bMSL؅_:Gkʹ_KR]K`;)~[` sE!^9Uft,X3B$ffpgqT >*g,* XͱB]FRY !%kX+\쀝4^ƌBus3&&wp;{*n@PQI[pٞ,"Tfq^\0&'3gcOȫ)RdgpjQtEIeuURuV[hOw˳ VW8R2./zOAX-[so7lr.{ k&*w6}`P׉|ؑ Mfj?j{X9GX˜6[sfI!O_`n19qm}l[C4UǝkQP%U"SNILdh҇msT<8`Vp,G6Xk,~k(H@MvuAZ*vCyYzCf mڅOFwNJdSI͔I leiTߣi{N,MMU /Ώ ,⢄_og %˹NL4B&k$bnK1Arתhhql+YG;~hhmBC|hAv&wdoi@+枭M'TpzџMBT%ޥGp~Eց[e؀ݼ(E0˟@_t2eINHa~쌈NЗuRpW~9d!2|9l%,ߍAˁw2C^zr-~P"NW&a=!Tj8(ViZGHt&I _~jin'AaeȌݖ-5̔r=]kD6Uۙ@O}NU0dU%|]B BAx]G=` zCi\08l/bQa><^*=`fǎzl:Dq{@}HB$z&Ŭꆥu3̵5r~7Yj8TV5zђ"VYKAUQ2p=EȮfgp="4 1rz ݾj7w?CJTԷ7^xӡX0e*F)y%TlF,#r\}[I B~H5ftH95N#!|1܋Q~ W =VX,߂x^2ꬰḩc7 3}'-iFAcCpI  n&uK¼ <JGMcLFK`3!qLim d4yb[ȅCE;4A6b ve-6DCs]Ӿ B;%2 ڄ@8a3ާOCkmG&2C̞҂~ QBd8'cs-fJ͚4KګsJj):ENH9"'ge+>~EG5"+R'N_F0W)m$\ M{КcQ El;1Vr ڛi{2l4W`[,"\ }糹59|W3>ܞ3iz5^TR?F_ӗMQDI`=1P쯓u3&2hTCmDX~X "Ż)lρ} =N[hX}݆YvՊ鸖@;=0 R.:A|)?ӥ;+(;T~y TL.=F!ijtFGf9M`V)7ym\?O7+)͑$[Yfc6;14|7G?HBڜO[m-(x} )7)$sٗ}F]Y?#(w%VR>L4ïev͸]Kl=`T"FVt}Ϧ&f*5 iT_]L;n9 b? |Νt PֺB{6j/DL9gpC{"oJoaEj[q0-p~ kT5}P_i*L $!>:#xܵl|a^|;Ŏ]甿:CQ7D#i)j1h8\a϶/5`U[pިepUC 1:yŁ?,E dH*x`PP@φVnaX |Ʃ /8f PO&ZX% :pVVXX!,7 '(]"{0;^hl(yh&lĞ/Mf*AUOPm zW@$ۧea i]S';t8FC?NwK3,unYDuݘH}(3t1<y\)thֆds>D,>х^,NF7+Bn$iUnU%H hi@J] a؃e进;mtgno)^7שCHMrq9Urz҄b DGI^H4}mw9MꥪzO]B9OAH?1:Vп^*bF oZíZ3~GB,wQ,(&lKbRn~b P:n oX(; XD9/oPm&)Ru\x/Q$D֯1h*@;!굦0bg+xz 쮟ϧDO sd<`y]2;fnr1EhO9)L9Jz ~% WP69hQ]$]&4jM(ڈU]+JUjW0Tz@~HK- ]~@lccфHi;EubfS'ڦ%OAض/#2t(DJ+2([ԂF _lknGX#(# I\3YG{}ٕU/"\J}z#]Qp'.ɸQ 3PG*Asf`rtr ȽIJc G@UGT#-72l#_vPnf$bdy+}qլDtRt,s] t'OCV/ڡnFҾo/^H1Tu;WHyh䪤Aem&omR׆Q:n&<重dzoJYM yu%u"?~h!߀ &FoGg2WW튜2nQm7iNG0yn̐s;t|'ur/ [ 8_.ts1zqE'3;\ 1vN)oW4Zz&;Q̙ QP1oR; K͖!=.SH嶂4uUPoMēeY@vܝf {ŋ-F肜IȶXtoFݏ"Γ)@O2K87C&[^ /Ջ I%-իkbe8;i lଏ{L!rRYi_7Iw-/mj"8|^5/2#N[X.]3 _gvtM>sInѹ,;--e6:\+Jeʥt +rڳ7?&!JYFm(r2W'1=\lvĽ;'j{VC*[OՓ4 k|l}ԅ|Â#G;r-Q3 'Oy.=85LY}8WDz^/7QK?p}+Ul*B;z Q>c ZU\| K_ZTTzq6+_&X V˄k,(rOE}/6U-+N\6j~&R2qI5D_ ֋`U*I׫vQw4n̬T!Wk=M3`~#W:N9'T}Bn,a:1# F ^C$n򺈭ﷁ3-J9uzt=܅xS)Um\EvTa卵%yq>)r %O|%IWWAy߰ 0ii]_#Es#j2rA\|wse?TJAP 0ŋ!̡v;< 5!.% V-vݦκ}s^wcfWʼrD}T;0AE2f hs[c2yØVo^Y"z)> ϡ7ی+#tŢ~sCmf&[}5)_Ǩw*34CM`o[F3"5Du9x/Ma|x*|F5^nw?_I\?b?vwQ+ܙ咉{G&oie gsUCh/ ȩaDARtFZ}0bUwX]W?^pS62߳>qOeݼ rAbJ,B;>nS,Z^@vⱸcLfukثč64@wt)l/͌N+~$&^G%#nR %U2oD { 0?%e{X죱4\秲 )\z5>$JdbR)^l Lm\^OT6 2&-I MÎRu#gebw'1gk+>̽ۼ! .+QoĢwsN:-ؘbwu!;c˾NR`9|t.$Ϧ#y\.%ؿ)} 1X ZN1TMp+2- nqPGYO~KTŅn[rbpf4ivy] |:6|d% dB( -m #zgO]t8n#"n,Cۭk|ߒ!%%}feQE&YVgY)UiYx >EOH!Td#avm[f:{W)=DyhıRH *^N:4fl*9;GKrˠZhʞ %Md9EԷJV}3~Ǖ-t 6Ncb?_HH`"'^n( }F'FZK@Ht?a87Y7NQ" M):n.uiVJ11ӎ. g"du?d燸ƓO"|kFQ|5{;ml) : Vl q`Z= mFyis}8zh | T^4e)Y t/F34h8^]~T^yE0)Ռ%cd? )(wxZ&8"ݏaThK[$]a{y [=%d(ĚZ剢ф! HǓ $2e_5ț]S|M՚k68,0}QK j ONmTdُ/mX⾇`XNE> =nPv;sr#v05nj(/T0=4DDPJgn\EQ!+S\ʳoMĢ ;3@PʹΛZfXGPsQQY5;{Ki׫"pOЊZ״A(W4LћzXL7MwaX}rϑ;3)&QVP7Z݇M5^ F$>.W%Ǻ(k`iX,L` / ^Hd*Jk0r +usQyURDŸͳ}q"^3]7=Gl_+fmf?3\i&W]!C6ڌZyaJ=nÕxz8gx ɓˈ㏧l%~ !3`:*lAA*BŐۏٸL SsЕl"FB`6 Wض*j][~~"ɔ[vg9SUK:d]AOxz~ /y?ȏ FEa ͡:f/^^ n̖"5I.7 Hv/.$Ժ쟵K#\> i ]0Jz`y0۔`‘mֻ'-;SHOm^ &R" c_ԟo^aլKWWn$ 3GZ@ I)3hBQ8|ISuAnp]_.]# ('R퍴L Tl#4BB"],A%҃;DyF4ZBRm0nP^`m 32'JZ-숐/ ecb1AبP}AV6ҵ`A1ثxZqR,D` ϻsHDhh+D03rIS@J7Be_:_񶊒d_)(ZD S˩Kd}绐d^}. 4P gܶކqOFTbn-⠽;-<+Vp/ W3ەF] w7y 5z+3"U7K.5ZNX*lLN2.8P_29!c`5r.ytd0W5 q*0P셵9d۲ s.ɖP/i&y/bGJd+W&Pmz0b&hSxB~c4:7?wdNoOﴱA_V5Sl5IF(Ƌ<WvLkuӏ.fGTV8쎸c<ڲ-9$lTU~Re)h e`94h[uƧpcGvI;?vGU\tw+I1FiD5/V'Ѵq`=g͒x/`%|΄=,"mjZ'6ܶ6ckG^*@ t% y K#0V `TfNT+f*tI跢pA֗ď$\0k Rʆǁg6GaW~ۋWiEt? ¹5]%% <(4M/aԍ:=jG1AUpp&P]IM;-\Kǯb~kѠ%Koh!=֛i\a'⥯~ '!Anl x·I8ŽUX-@(>b"n$9h^sܠ6tQtP/VzHxTWtqO )p#dAn7˩ W1Bxx#jN-='H=m<'8йXDhj.,ˮLLu}Ij/68MyG./yLBo%h0z64?>P0\,"BlwKD/?.%YT-FDs_lzĶƍLbrn=cI K:37M-`1Y5^1`~9ΠSwO C-Vh06xhş*a!3u]*2HUw 7|C4=Ǒ x<01cRC29_s ,L?G^fKd[>;[ M!V-yVE@ aQ29[jf):`^b9~VmW^9J&{M,[& #` &!U$햶}Jn.\B/aыQ|8b3EMA)PP9z.ъ wM(YG/?V1(j :91s*NLj(eFx"S/6G>zZ]E+/AyZYk1242dqh}^ߓ˙C*$ڊ2̚Jq& -@jC=>HV*4Z{H7ME*%'@j !ʃ^aAmrପx\C*J -۪^BL>#&-H0xq6nIzn/IJ]CDRK!l=P rtեo^0bTH%'{yU8bC{BMFf1;E&;n ? ڻnQxxEa:.&ԳKU?}zǟ%{s%(g:刽b[2a2]Xک(!a,7⮤CM qmӞqs{v45x,)$yEu\5 #w#_UWp5ʲ78,j:s>.R˓~'餘FmxdN#0@dR($<՜[O(O{BsB2c6utDϊwIH6os_q*2egD:F)G,QT~;TseL 0*|5/jtq^aȕDӸ7`Tfm|bUe3 QF(BBΪ! //sX"<.{I*Vz[`ߊqn7Yv˻e"؁Eם'8Y2D{w 8 ?)DgqxZX3I=[m W3p v + 0WȤ{p<ǎuJX;r6;Ĩ|O-Ju;l\b5 =/g`+$b.xƻG`U7o>'Vѽ3eڊm2Tzx5Ixi<8E+{,Eh{U];|Z@;-6_){&zI鶅rG=Ql7$/N>&} ۜ2t>^ ER>NDgꚬ~qg`6.r^KMCB̤=xhj0&EQaٷx:0[syBzU4LL 2B˓Bc|F* d]&L<A~L5Yg6"_o.PT 5M>;R0/ːv/rݘy0>WDGd i>:Y6 VD=z&W6_2(b0B=~-Mrռ1BK-p~P rѝry^g|C))r&@B扲%Zyop.Em n5ۃl y] B.6\>8JА]] an3#Z_mʟrk6nHJIs 6+HS,m0U?KϭBHd (y4m7שׁb]=^Wkovfw09^Oxkk"jf@2ws@a_=[Oٲ@@IlE]m+y EQV6>AI6As\u-]|Kʖ\J}LNLpAOr;,?،rBFU\>%cr½O(9Wƹ @neU)z볿auOJo%($CPƫa|3RiV6Q.!"OY.E- :P. psjwc1,z:Eu0 ,Ēna`Hf]qHaG.VwO|M$:f}߸|~δ!4݆+A#hGebGckۏ~;`蔛WGQI(gO;{gU%WV$5;YG~Ψ :[ yl"Λ?v `9.~!ZY uFd ŕP'L TʧKRU5`nvdY瓰x!UJ`3V*dfIXA%lt[g>Cdq/T KeEsOVhkD"[13{"K+1E4ؑC: \+\hm>U:4ĎQR&Pz|>V=cKr Q2Ŭ=^Om pߪo K{pL W7 -}sDmis)netpE1S0 eZz/噃{E@daLEAT͆L\ċ Ǜr|0#`` |$B1Ңu&Z}N*‰i9ꈔr i\EpeK>V>~ 7b:_^5"lNA.& QD^PYC|.CJ<+}Q $uG*8Qx)C`S?+IzڄWۃ9k!A|ic$(wW^z(uhT$(lJMY@I '~E҇(Lh&BjY10nq;~%U K٨6Z'kqvWKhbEgxdr_ u'qY;ғ1I+*yIX`^/V֧;nqSUSp:Ǒ%ge $B_WZ8c2>p^;A&B1[A_O ڙ~>ʡ7&CISӶZ&wԬ.93%)ٗp?VMO"dA;I7hMU) ^) dx]lrht7tVKy|_}FsGUK;Bu Rit<~PI$ Kг8qT15xT#x96D.D jup #JZA9[1#çE~c~ڝ;XB޼Sf~fzT%iip5 YbiO"ن~ٚ ! 鱶dr+Y~[zj.fXUiw XdF]QC?ߜۅC ӿaµ])5 dIf)Wn͌Z`rIL9@3 G1t(Lt1l(tiXfI 4 я,BB+MQz8^ {0m5)2`- }"s8&*tD(O/@q!$? DMѕ R? 7ggAQ4y$84\J, *U`eԫX/0|mEbz9W.s^F`!E4M)p.j13c`7'n%u, Qq+$Nӝ"65s6eDI.|S !%9&>>n%fe sV؊d/js0Ua;,Lg<:Hj^ lLsV>HM{+VjpUЩ+ڢnu^+ab!b佚Nw#-sA(_XߙJ)|bı/aҢ.QؐSA ?1r9OK=Ձ*NLƁ˥%|uz89k o#&RV/siR ^h,FPu7|PA^0]G㊰ȹnCs[?a%u6nu8:T^L;D1t;YlFEdS%VpCh"2z3jxWK5{fuťp\"HskV8M@kl,el߲8Dҷ!>yԼtLJQ[}9kO|"ŘN|m^0Cq*z9-;fl6HIA&y#udDv@ TM&FAb8$&xWuDc3C VxTjii-{yF9=,^3y! ̀fs=Ԟ/4d ~b7N2 ~E< Z/9nH,DrKÒ-ö ģ ;1s_v\'EMW^ bHU>ThO@W\7W 0HW 8ytΞ2B2vpЄV |f-}4ţJfX#mCaSn,Z]m'Y7M%PGfT:|Ax0! U҈8}'\B-e!؁/-/cB~fwcAvE /һNb⚞\'nnmQj̉a-p^}|)QϲV\J EQ*$RA0kos3Xe;a`N`qxD•Hќ`t)VnMqT]z`V=G_D" MM7kS<߹ Mno{imd*1/p \Syyj6 E/G^bx Qr$fby1(BWҳ3_6(n˄S9CY@ $ׄT` 7uV&BݗA]/!hua5B_p5 mFTtXO:HcGV^ztR1* $؝K+'L!x`<ߒٹ$w0ŝu.e&_H'GǢIӒS%sFA!ap@2P~5i+2%P>&y,#$m}g֌x_1G_#bمN$檑=ٳyo8ۧ\5i,m [c%g^78Afcֽ9DSo㯖NSJe~T%T2cQqT}U(TXtAd+P񿒉#r`ih{%YJMZA[nUءPޙ荑DڰDƮ)HՈ$cOgv\F 1LsQdMgS7L`avE@M]pl!ce7 UFa;"C spZV(35'N2."p.=kV˟ cż+W,BX ;i*\sVgțHkUgCw2΀-O4z[(ڋGBBr:7P۪ZOa_ y#û\؜( mO-0n C+\"RLn.cDžt$Iw}TJ#HGN٭FQlҴI/82!#oVt Dfi (21.'E&fz1i^t\DlX#>Ԏ{ua+Og& ‡tU 4M#tўkfQFBf=0',Uy)h^Uj P -Kx~P613H7K^ sy'aygPaWgU20'cX͍ͬ}kNZ][t MP:|3i`o$,/Q`I>V?n"cƭ6H] 4=_>Jq{jd8 &irpj7,w@CiGxdEb^A~m٭՟\~^D)l޹wOXS )\F~ApeS3̥ krWiM<%s_f| {m Ȟhjq%F)]l;R< FXs]4nɘ ׋m6_kiQֱ>ΘZ!HaqGJtudʎnÝ5"񮛦wo,4,jG(:) %'7Vs7ǻk !tﰛO{틎/@؄}^n4nO[4@ظD/ZiW?ӿu6bl+V {DݻC(wJ8kS0'pDfɃ-@RCÏ1=Q.jԶdEs{xt7^U ۽x2[S}WL9ʤB&q4`M`S?ic>!$42 ?)ͨ2{}‹I0-W7tyK`[FzBܜ -X)KMg2b[Bh5dHVGMj|-|g&\~Z"L'bK1m~ͮtu:;f<`%mvʅ& 2>̑hbO8t`2wCV|q(xvS>D)V]eE*~:fHL,K;i"e %hezNrD~GFQ ࿑a~k{&/"dvZxBp[/X2t25Ϣ,~6'nNgiMYTV//@Vlϒ[%3BGwoxH"FnN&?_{GsnJB{Vܜ0fAۖ wFnw'cjWWmǬ^ m+a=u^pR7n~M:$ns&:x B'칂Np:[8$8G4tWWQ&[~i\͓CH*qžCۦm*Mh/=|瞊j4Z%a ]Lǥ*6܎3I䢮O $)_O8J`dzuC{bKvLvi+sG{KCQTȜ/ޣ=ԅ;̷I:-s؊29v Y2Ȗ̼ƊG^[^FtM4Ytzgi90j>E C(TcxvS1p[ º#]VXfVM4ٗ ^O4ԈsW9t^QiZgx4J6_N*Gd {;sq õ|r7o40#ޱb&)k;@7z-@9rOTy{H2yzAQ7l*Wv"tb\&q/PcPY[F?vr&bO9?9(P]nydlAi͆s ܂À qSIx ~ #v3XGG6_tG}<童B >n摵RK@bfs6Ꞹ{%M0+ 7"N)_ʆNZ:95@Ҟ r֩s"G.@U&'diFa!D> À VZD5m5wȾ U_ [!~sDY[ j 5 rq(g3/Rd?L]+$45<6_Q|3F}\b8-},ekTY~D,Tb9166!a/UP;VΚt.؇dh}!J×'ũY] T@v Mgox5áR]=:c :zXAr&gaUE:IxraEJRI//0̄˯NS~=|Xo)NQ3_LƗ5r_Z) n2j+ٵѽaYxW+҇^`C$fgl7?~iSs  pzګxi='t >?6Su0dHAZ/Iwg߃xeQOAÍ`D$DɃ1$):,n:"IUXac:yu`}+E^:1e'([ 1AD񼣀.?᤽W+ x;C[Ɇ14EAZ%$Tge5s%C6La jM!]B<H/XG;74ڞg!e#C[.˄ Hۓ[d$x/ lv@[,p}]N$ H0 )[̀@0jLҫgx(q imI/ܹG{|pbuZ3u3dP;8z|8}N(WCa禥Z΁[{6m;%dqߟZd ]9{)26-%&;@/uBO&ҹm#cE^15Yd7gp:6"09xEjDF"}^*(D6690hvsTd`[`d嬌7Z56NrK=>xp9|9 F#]Q7zWpNwZֵO6羰"yV1<֞  }{=VXC>7Gb9UVHvCC"I)kZ`[h(X!7@N U WI(N{rwxUԁ?OhM,-Y,Y[~(fCGtr43\AA!#ｾ1\nWk+V7Vp̧<|`)~2dZLZPmn3xJ+ Sy A ,'5S1$oC&]x?TZ5bӔRwGɒ扏S БahΠA-@ZΫU>Z1 {t2p{N+ XmMX]A[,WRw+ikvhmSs1N4/5"ЌaN̤%E|1X+/vQi uL>=queHgݗlq=Pq47O <%WB"tDeV2'/mĘB+S7nbcV4=qp%& o=0'@ qOQV1%Q6SdK]$`u*ђ5b-J-d%8ggOFz֟LRVrݐGUc' HnNID|-3U _>X nB::^?ׁ|+cQy2u w_%vN0 øs^: _ck.[jXC,c^ymEUy!.y7rx,r?QweoF(Rw9a04iŠ٧j'wy\tO3#:3o"Rk(V/41yj:':vR$%"wux*sR;IVL'I<6.cqXܻsL4BMaP5룫$s8!_˼`!G4Cfn@YHi,G!Pޱڦdú d_ԇR6:uu](\5#ŷ䒝{(r|-aO\{\k3?k.  RE nPgpwZ-;r1 [X܍BpI7Y"> ǒig>~[#gN;i} o%hFJlK_Yq6g6tx2û`N>-(^_^- #¬kNy{(n.+FĉaQYJ,=P~$"N)&5]c 7+ |{T:v?t@ue$P[Y{T>*xp8%dƒ?O+/ Rd3 0u5n`w>.YA.M9C$־8[2./evu3K&[˷u |XڝxnQҞh#s6re%]%@,+XEt{z, ૭Eu1HNwVɉ йAq;ɂxnGjU&>7 aJdGkVν ՌАԭ6ϊqJkT$o,;sJ/~'.GmiȞbD^Jm.!8)_!i- U`029jN6w3>v-RGD$tr><9wK?z4}tX$J\3tKS<b* 赱wG1Ƈ,GAZ 1E=(_$+"\fP0܆ 3)<ؗˉtFDBaMk[~WX!,tw㏊Aـ O|uZ#fU YN6%9@\dH5Gxwf3-Bkax8Y0]Km7D+0'ͨAn1ΕЛ+ _iUB:~o_@ql'~+8N.c4W~v#S Jrm|mޢֳ[O;mḶ՘ʡT^ k$2lt$~mU֑v#M!_ԳUy&9!Q^vD`Ӻ`O %|@#;u =tk4P"F8 Kl½^w;.N \md kf]]o (0zo"b7p-WeL(NM`UO+5 | ORIO 3-[sS@teT^\GQ2ͷzMD@ʯ*M{ `d-ؒIp<6u=#"(X!߫ѝсd^*}d\ [Jrtt:8&1h%E<Ъm (E:Wt^T8R˾-X"-/g09)7xV lܭ1@Tʵg%l} F(W)V ~Q䝯9Qw/\,nW֢!&o%ۀ](}}@S.'V¡"DvP-<7 0JP?:*ᡱE5');Ǯuͻ*1l?H-0]JR El LH_Tm`V֌~]TG4Ǡ.~wZf_Ϊ-1%d4JԽ^np"7lBq1vLq(+\A';%+ڟv#~:*hc0AWdRB ̱d? =Qj-ǡ&$DUvJp.-Mr%?^Rgkh=^YG.i?l!qܰSQ)s9@*_+UEc.bj u?CI>+0k7`ڒ$MұrT=7m'!_ 5 f3/kNzU;"Pԏj@1 Wr+͡Dg+ `[{ڑnF {˳-~;0h0}-){_oGARgG90boyɭ>?}>ZG!4uLZtw2j]Hɔ2,|Cf s+~agh5(4ZKO Mlk̭2lmhMB*_BwN N%+ddDppAҶGwE s:jϾiϳSnȏ5W^|&AmHk>w"֎`ܲ9LUd4G0~ν$fFE beGnB/wM/?z٨. @joa^INQ~>)^F62ҟUPH&^xZC ,9hzY8@0*ZK3TeˤQ'RaS23e+Ǻ+i)b^t%]hء03]pn'd5G#)[ @Lx"I9(R*!qܾ55z[nG@1i2V8Jt߅Fd ~0HKW\msY9)qMb71eStзC%Xdϭmx3JMU=|~#J@HEu9i1_zE"K ]Tg\f3$b=,.]6{:Ozp9ONxeS]c. zmvAcD"oTA59\Yѷ6a z ffЧqg]4%wƆcPDWA|CIbc͢3^*E.|o;].wSgLVGD'T6p0VGh*n<&ȬHHG͚` CN|}oS΍I;7-D`;FqQ:9ís]"ޭ.3jt|# ˰@Ύ{S-'4 |k ,{vX3Gǜϧ?@b 4nSX)s[z?X? ׀up(sbTLSjaB9>E_fnVv Y܅v%hֶַ%{2Gs$Yvj?dZ.kX@K0=]4Z|v|(|QReH šS8KgiMp;M^tQm:SSqhECm7c잤zYcEsrЀc^ )TZd)R8f"O/xc\ v\ iG}Og>! 'Mx5]8<ɲoy|- *+2YĖ|L@gdLKHyKSGL(9WK!Mx%`E9ͩԥ&+d^C*_'cBjG,֡$Eʿ~=1ҫ=-u,HP'sH%[:;3$噛(jM xXy*u׆4'7c `mpHI][ ?kf¸/A1g-- LU`sZQ_Zm/H`Z VH;: `S^";DK ̭nZ.LRN;o@g0x%+}iy53)s iql D 5%~7e>y2>FOU&vGUKKU섇m4S=I5$tZbi$XdޥbtiKP5eWya3$^fEC*QeEf>ゥ4ex7yvN4i92S+u]"4485u-P5[{\Ȭ7M"+iJW5#^$_hFmk: ywU!ro' !=[$!63Q&s#΢w>&^ֈBa|al߶'qFDQa.pn.?9X !s_TpiǠ#K|I~.aqHtOΨoryltӠ9-͚o6^6#sr:B, *8$# \g _u܋s)*fú"iL_bIiaɕ-}0u3QY8;I%1Aǣ_ TS.N4RS%0R$[qjn@"&9Sv0"ܟ;PGA=~ȴ^ >!_hQ -yxm@A!B(L[-  vuh$n^L IC _O"׏:GC Yڶ{;wM}A-wTHi&&>LiL"7Tv#F`R]!U QD{l =)p_fIWbfǪtyCk^-]w*C:B#nvX:@Kz®]*5|22ں3-&7vٚ4Xuxz'):'B|I]ûwQHr2<7xZ.P#:{9;I`xhO3zġ-'I+k?ɜRź=BLGՆ- (]S~'gf mj}#2jrf"]AN֊ۃ+2.i;Ë~QLD˔ FKa[k­efiϓe=E`@94gu CY :|3"U!ܛڇ-TiM=Ŝ@r)D(|{To,Ə%fiȬJoRY[Go"#fJ~K 67KIS7D0Ok?#e{ ᑶu-rL.ݎ4C"펀𧻓qQ k-bL@>^-U/Z%'8H&0j[yÊ9l@2\pf5C"(b,m<0ލtgD_rKZ)q/unӥд"t~T ߀PcJp'/-s=R6z(c/3׬1TZJi-H<;6FVm#C|f&:]"o}0G7e=q){:9&N|ʆK-l(OʋАx*Iav5-}OЇsvMFY^ `k[VTĒeK ?oI=%8!ϟFZaw"["7zG%lY+nÖÛtlO:HnS`R1E昝#E eH<F*Y2,ERv祭R] uy iܽWr*#q#R% w1&f_Q BP-DҽdBLƿ InQg5;*uvx\-WRWxej8(*<;ZT;m`#Cԍ%P; n󦽹:TBv:&%"Yj-BTxԭxNy>ɔX52RCYZ(,ـbGyX3t[r3F7~³p@ht#yVqXDA#!l!2n632(pIT߬9x(̂zil]< \̓ϬGٵ2FJm`U=vKi540TyQjq̹U5Kdu"YF`e6Yq,⺡#4Yn|㭪J<xO IJ@"),ZvVI8ojipt7slT&| }n m)ZI0$n>z2.1%"VnDB99VBF$5CUV"RMK6sKMyyv 68 lF<f߭mmf6 ڨ:}LfޤRWZ ;G)-Zc-ڰsfYכ9"Y8(ZMfTBu*uf|u_H %Y\_WO0RR a0DT+ETD'LʑTG04'gxKAe{NF8`m*aU,[xv{8>ұ22~2!W dK<so~>:s͕F\gf{ l`JGR$QOJc0k#_ՓRe?cs^yRX=V3c]a| vM&R}G_zJ [9mwE/*õR}& u#%d^:H₿7̼kRh~y .mWg5%w??6:.NyE?B"U T /CIG,e -",ob06IR0q~gcD2>!vEOj*e.ѾRу+aP:qІ.;p@mjI1I ɂ"2e㕀vsBe7NzS?.Of#ڍeVguA!o7+.ZjՏ'Ѽ'zd>[ 7T*y +zy8J05Nی -H\Un`up2$j+itPYA!tjP2aѪ<#՜bjQKfG_}9'<](/1Y"((Wm9Zbʄ3xv5ͱ-Qs܂\]3O ̋*ۂEP8)$GFL~40#|یKf'}LnK&Y}HFDb ڼ`B^#,j$Qe^5zLgӂ2PXFԕ{# z?MGfV=HklJIE٬QfN?8oE>`J0eY&;\>^]`>-Ń+;נX;%LAX'hy.9 r0I!V^3Uv{L߬OG`V| U-v}M̈́$SYOD(,?q q9εXyAK;WR^zi SB@dUGߌ/ȡg7ԩ {3QOP#kPa= =9 ˜2F֔Fw/H;UM"mmri'Ԕ/1ǢL?pIsټ}|MAw&OC&h Q7sΠ dqX35BQj2.l%!-E̙- )g Km[,57ר(>ž.=SnC @.O1[UP= ⚛w6%.W)s6,~PS^4P0&Ssa՚_^nU:b@=C^ +@. 쀺7ޜBj /t5$/bW WB(n&LtGiwOZ1 3,+A;߉X N<Еc.HٌWUjIOVq*1 2_=*Plug?.Wks p('CaHm 6s1/vL"8abJ曔`=ktmt,]:G|c@ğ'W`sɰNrK4>S& c ыI$[c5}I<퐪É3\Dk'D/kXuҨ]A7FXoRsmssSꐲ}& ƅJ? FB+h55CW_6S 䩗z28U(VH . :`Ac /{"NdvJt.mጻBCeWQ_/unu8HR]($V\*W/ wE"5'fQ>Qgo(X\p8΍U"3:,G N` B>|rSƒGԘ A|էc\'Au4;(qRBj+j$DP.M$,3Kls?Ja{CLUd 7\jϺ890hs{AwWprC_1;ν+y'2asz(+5 csžQW5`^(,MZ1pmeCElBN ۍ55!zTiqrZiD MX6_k(B0AƿjbH۸mCٌþ㍨,W'"\-\v{ JnjS+ε1VlN@M ٌT.sA~UCb7}_dIkV"6w/8?c,cj6KYehD`3{.r͒ALh)}^̃< Is/'+$Ѳ1fx")%l:JbiNhry*1^hπG3f#9.P:nBZdf[TgvAMq\\t5 M^/iCDک l?T!? 48'H%;+[W< Y$=.k 0b6~"GG69C`ENw>Uv' h^֬AO۵ߙjZͦZtYC,KKG()b}@6DCj|$f7^h{g]D&1ʏ47<0Bxa3: P;#. mw,9:{qMVͨC8}ՂFyWiIh?W.ōZtÊ1OңQ2iae|7Ktr c. =06'^Zw͒Ԇ  Ux2? W3=nl3\"Eמ;Xm*jwJ% ZK-nЖbmI+U@&պP-M)1"w+t[IU+zX[0l5NzAg#fp`XϨ2~-_Ukl@ V1)ۀGI=LLAi\ .gӠݔbmz ]<*A.fm a *mlJʀ~¼OA Jc- *6ƬF~OY42|YRaOzf_'ѴpgZrg ү!(huruݟMbz \G'JOC(\4ޟp5Cؔ7I`-OMX,IIJyIJ_;WɝӕF[tz@z[l,NA10*j+QD%(WW3c@P_&f#郄[WAxHOS'g &_5GRaZܱrx,^G(^*c/q1L)UJ`6rFf!Gd[Ƹ0Vn0z=v8EIKÞg8' ;4 ^"Z>rQ8SVW/abO wk$1J wU(tU4TleW"ZF4p?\ ;4R,%& u^1;e+{(Ht@R#ܯa_utkT57Nx^\iTJ_r?9T% y%lɦ쬁2oLl#Cӡ$=ozRtȀ`La>^Ԟ+g=S\ΎE<:Lsa[y :Ē^ǝ=⦋  6#>ced}L1R#%\B DuѓC؏(AiK7g-``_>L0g'A9 alkfXP &Jr\X.$+xh s%dO$qR{z~ L{s`c=׺0cڰq|ec pBE 2Gtbyqͼr ~wHw`a/WX:y+o^+WǏZc'$]DC ߹+?ߎZ#){ @TāuGGA3,NU AbN/I(N$!C3Sٝe-8䗎A@hJB {හ Zb7d/@\R= ٬5=4vz~ay$ 93%kG9s{|b~skK{z|"E+);zz(DM*~w(~S^ӼŦ _J=|r+˴䒸gI,kUe xIdQK&Qi` ;mZo+Haߛt||Ư5IfO't[*4 B\ Zg6GNj⍃NfX\J4B_x=Pt.esr*|]ɒ,鮅GmXy/ EL䯊&L]"9dm7OQQk҆e嗔OI2cTצr6ػ]q[h`#TYsGu/77 e|5z(Ź24ь@hg2nb+U)|t_/beȚ{@|;x7:9[UʇDx ` T"!]nB$µ-|'0,#T"x?9z^yn1'+B8/܄(N'tE=Ct{ )adP)[5Rl+:BG9SkOKۄVmEPfL5Ww"橉p8 IÁFEsr>|KmgZͱ8osh䙚!OmF\l|w/ӶNoE5 [7ܦDhYK= ȇ|#?JoҐll#1)>qWH Z {vn궝Bpy#Rczc+K3Cs|~V\%)հFLRCw1sme%| eBۀ6YS740S|[wUDtD߈ JL3Ơ64WsTL8CؚzJQ>G.W~[`E n+\Z[&R֜3)G⣗`ׁQisDaa #0׏?lBQЂNXFĒv2kM&V=!:^߾Kow9|8V4kW dW`xH@hxp`M\=68j`̶ݖ."H ZN&F_E/=b'ZcTRrv;E%ESSCb\% jUjr[~@Q$. *+Y]AX*H,1dU}]"Kȋ[oJS9'phWbgꯗN9W!R2 i {qQUIW 㿉&/I *N}ϥ-HYj+MD3_5Z/[V=ŕzs5ϲvPsa" B@>{)Q_Q ƹ|2⨷'l$_DyH./0K1`) #cmsH P?#MNHU,ƻ_rޱD,+ ,QB_y֎>iy~m*`:56i:i\5ܧ [ ,]: ' &/$0 *m,tkS8Bj! qܞA^+4nՅK{1hӺ$viqE?G >ʚ% Wc>YUR51YINziħ<.OS $4kuh>zioWqȥ?&kiPHz|i=ҝ 3͂ }tT|f+J@,f|:5iRvb粠oWZ௃#@S=N|!4~gF=q%)*q7eD̓%S,?4I}clHjF+ _ΐBٕ\n%|BSywAkZ˜$qāuj(h`k5!UƋenU҆JuL;\jnm y|}%wR%avv"'R[-+܏O%$qM)XK'+Q_t1b)nor+cN[v?.mG mҗα qe6wPcV..P?U>-hFo&fQf"YAkܒ\#࠰rU_N,B׌KS2x%@I!E# yWK8"c|G=X FFqTsh4Fh[ʦprId7}iŘufo1-}pY!"m Bh|7GI CPv9dt r*} R\VD|;V,Pes`Z^ S/qVUگmZR[ ,wdcv!RJr9:%*&3ɈzlnEE'Z٠yy . G0+-IBb̽oh%-Ggq.ԷH0, L۽wJptJpxx$eɼӰ4r( _MOkoTG:BEݵC/,nwrGΌO y*`:eb&{A-ҮgN|yv> iEyA !VYd+N#)?6mC0Z?V#p3z ;hشK$)>#V?bZE}% \#!qĜ2<@P!MHON}BKoL<_!}C*k8tK2㊻+Wn2 !i _mf{gذ3.aB~H苚!(M6bjo0g ,)jw:]V8`q\7NJwIV8ɯNhb ras79XE $L鰏IB:+O;,&2Ef]*lfTՅ ̄ק{pq!ےѮ 鱮ObV D=\ې&mt5H7>EmKvvC3t )67`#F ),֘.96~ȒiAp ҎI|z4ߨ\d N=)߮tGP^vxa1%yhh5oe5XŻֺܮEbt)koz-B&G8A1RQ";6:9&Or 7J)4钢8uJ,2}?Kdss*X k{à%IUj2-ޅr*}΅Z):57Fzc-;#6Wd&c3xVđϚ q9֒ϥd2ORݗAvՋ?2ݍ6^}MՂ-#B*ї{3(0-N"GɝR8͉0юe]Y *;SP,P ڐfTfl1\c((.Qnyds1Ւ$#IgnfEȽb!F^@4E%􀢻=()Xvgʃw`p n idz>l1A򖫟\wP9`7L)@uK-Pq&1Vž!T=Byޮ>է'Dj!i}2s|Q/1ڧUd!+VuU$+rv׮F#?9єoL^ u,Km֮+֙H:ZEL*J=+tAcY%#z$R] y:ysY)eۉ!R|$]"C4 uj5rXO1s m$[FJYӀ*<}Y$ux LUo݈ܹja4KYw:f8玱l@@ዺ<#ic KŰQ)L7BQbxwоr#kqPGt yV0^LP`Iy̘arY1'YWb cщc<oҤ0`i*]꾭sEbuL0>Q4|>U9z{Ïr^YGI ; l,<{O)K4i\\֪bt"Z2f<5K.cXw|{dE;3c/(yƤ K{Ax+JV$()ɆoLBd/&G/Nz6Ԧ˘c]R)+S.A\buƏp6DZ C= 4REX0]T03I*^2VS咦% b@̌@U5duOGS(nPtc* *-K5rCt(w\DV/ ]y֑pw:B5q@D%2 H+ :\<ۥiҟʰ>EΌ1pTxMW4\vc6~MxJ?E& 2mOz{}:$~ѴW̐pѽX𗵉6GX@{49s;ð$/wŊ.Q7)Ȯx) ɸPoDT3;˨;2nbэ,pr<`k/L3zɽ'P[ȯbK) EMlZs2 ԛ=k0tuz In/NwK͕bRKy"IXB;&j)Ny"\'( |hlg1^;Sksx fj pɱ_{e9:.l39Cy}EYB9EW8٧3lx9Oh6C^m:zM 85[qiP޳3/oymi8Hv OߠM:}xPdĿ4?H-:o_7QMK] ?6_nl_.i*_E4k$a. sl;x~;oR^B^O!x»vDUHeDGeK00vAeWUL.C^.S TPݞ?@fse2? /u7 e4Z*wv MxO:ns˜پjk0Z '.rDOF}֔O_>'[SUѷ‘( $,*_"՟1@]cM6^!M)y*y[3.;CRDi q`U"#u@$-RF; hZc.4U|Z# haS8~=N\bM@}͛Km_G)5NSɧ|vc$fs[)):9- CE$>8o@9:0n N`|a(ި$ڪ+M\YJ.^d(6n9.Ǝ]~i(움ZƁmp~5J-tB`TDU;574CGViV?e/3@kH0 [I@z *F[ѕTHo;Zż`y#FFHNRb>%Tv6 鰹o96f`iriُ`4떻TvBohC,7KwЄ}3& win W;rLCgia kxƴʀ=jZԱ7Pbe _φT]*{j ~3eqU>sU=dE(QA=TB7"iTv^an5m] EeFl:JƋ_ĀmwfwM9mζ3;7SYN Jh_ = 엧>z~ dMsH9a=(Ɇ,d#l)7ZzWl3.cfV=V}f->IғC)ƲGGTBVzܫT-ty;7Kb\kvvPN8`xwrdR~V śb E3ÿR ٦^Ĭh%a3( ha_`:x>^3y;.`UӽVpCylr;O|ልQ$Zi]tcMDjYt SrbP+Ͱ'wR1$3om𨀣/lGbԘe4,j 8Li$_f ۉ >yM2Sk]p3gO몣θ4Yp;:#zXNw ;r>-g?S$sx[:z|B_&3 E/̎p! ˽fv8"`)izg2+;TB>zNN̬{ f7jꭏSQ(́*o"/ߒ0ڴsw"~R" MVGet:+ Lrj5BAL )+(k $(4$BIyE2"CgӦNFj y {݆“m/SǬ1ve Hs~jc.\~׌Xq],YslջI1hIF1e>^dĬtpkL=m[ GPw2Q;KQpvkˠw6pwL^‰}~%h3Qjn)wM.H߆*moBMk$}2ha-Lnw& QLzUm񄲘aY5~G/\t6P3ԔhqGR̨*Lˑ=e0_ 2xAxH+Q??jcr L6oy9x_5j7,iTilY?89Z_ ȓ;5esM 2/+I]lUw f {)dj8NR3,0;mBI3L,s⑞Zs#~,]1wIn!gEHKQSݦd`e+` fLrk1oI^kkl29G|&{pmnėV^unb}ygMJ84E .G{vxiuݞpxUqE NgLcBdK‘U"3vw -~+vrO 3|D;W ;|W+El9#[) 2t:wРD@Q[µE 9'2VJ1|6~Hu-!ه^5@(v'Rk^ jϾm0p*nJP_٠7D$IїGW|%rfɽRAg[IV3+lf1s*5ږض㌩GglDž5uEӃN:ԬU0<-ݛn hP95H- zѨT^vStK6uYy#)p"}78k[O?3Zǎ~R x !PDbCzr}ݫOs`0!ܾ),T=sdjnEiT. >y5BYh~5smq6e'-S^2@;K 8"r1hCPR}GƅK1<\4ˑ" ^ OQ* W7 ͗ɰ4Vu?ϢP’Okw2en_(Bݾ&ᄈgoaP&C5\`V  ʩna&а+`E+8LeCEt_xW}xf&]* 30g24l kˌbM<N"l/ME}.$=5xٷ`|-Y,vd-(*/g{fe>SCh5&ENle3]H **>٧PXslrbH"|7䭼/u0i#U5:=įKfnnRLoWᬅG"8e3JS~~8p,/}vVҊ~ kO9WV<~=wTJb7b\Kdx)BE0y4L:&ě8yM%&!$>>.QFVŀJDַ:uі5ԉ<3I{Uxݽj A]TQ.tT֊fi8JFAy:|nMЉ@?.?W3|Am1n|.ҕse:|{+LFp(Nm0dAs b8Yx"v&ўՏZN)t*q#­,8Fg: -Y*yS)J|I-ecV0JyyNU+?KIծ2;>} I-(3Jze0]ҴDocȠlYY*@v o)ԼɁTy_hO :%UctSCU~0=ÔJz&nQ8z 6P1AdM=rA'=O-oi՚c8e׳~IϢ*&`FK¼̘_5-Ń'6p{U4?o_z0-!v9gj5nbUr^bK0=`W%Eq׭Auҕ_fBLbj;>EL/'9{m86kP:1Z{-cʚ%az!kaZ`|hg糭gaY2C8lduj1;Q/- [K+{2N2a`JSns[t%|YDOӅOMk𗭶{R!;@j L/G j/('v# RAeo)yr8R/.b%DyhjDz.|^"tXl <ݶY쨴%Hc _@v.FO &]%ƾ6["Kew 82?4wQRVن$A\[naAq6d*۸ ]"nF%I ew޻_,0֒$v5L 4VJn l}[,5bR&ηi; b~ܠ]׏y\T5Sm3yaxڻ4:֦<^[e 1|= X=y3x%Mǂbi*M O`9Q}t#NJC~Spq5A˟ld#eg_J TǥiF{l6nAǒ.q8H{}xg*D NasIzܞ?1s@=չ@& S{sVg'IG!v"İ*”DO}^9ESgXjʯ1Lfft;nqmY7LRpFM(%Csh'6 vVͯ=^GI#76qcb7VLӺãzRʫۤ8t CgiITaT2Fp%CaD(c,%#efmcIa,eS> zn:mVXѶ(>@ ^ ,&]PnE$;$ V˩@}5!?##p#y2i, zYn!_vV^2Aǚ,W,Ƒ.(.6jKB2e~xĵ AfmVl ƯW0]1G)0˓̜%9 ǀ3)%64{{l ?;ny IJ4+q@Zs3><FŖscڡ5ɼULo_%;ajTGk5xo)lS₩;rV!Xg;д0'1vA;,-,RAh+UZ육0*4hٞaJ֢yn cLzs N͡ @;Or0w6P."f;]{ JJ$?)_t. [w$9^(i.MºqWp;GɆoS1evC@IpP!Cli,%F p.)f/xgue"X~ZSW2GZq5ܑS~Z擮;Ka\".t;`3& JR4IM`).]g$> >aaLH>Ot΍m 'M;>,|]k1J3= qL"-T`EXMW&}-lb[ J?:ЧI7+oejU516JK{75S`Jt|tL-Eʹ\#vbI9aMC4foɐ&0QQL^jp+!5u! ΗK5=qUbe Uy);D,~=/ 9p5W")K)~hW#+qcnàէ'&y^Ӽ6 ~"Κ[w7yEjUZ|9c^;D#"LX(2ךA9BʥHlY\g̔&pK̷9=0ZrC1x_ JS[UX7aTT*ByE!6mE<0h^75&\-+zbjY:)8h8 @v\2 h0J;Qj[.IEYؓ$;DuħKF}C$n*5 0P Gfz=5GE ߋh 4O+}$`3lԍswI\/_ ralh"@R<l.}ɂg҈$rٷ_7ff!O8 lkB[G^erOT',Ah-50fbVGqƪ87 , 3r;SL[82 K>3ke s^-ŐBi>2yGҳlP5,߯{wckցWmQ_)Ƞ3HHT)٬Z.z6X2擭tuU_{3{tޥ (!,h16ޡ榝І;]30q??vgK@4 #|i^Zi<N!)\wM|KnJx7YTrH|@GxnعW{fx+IJ1̑};c-D"tS hn}flZlgؽbc;yops+pjI]q]Z{8&Wss .8%A-.uF,F ̭Uԕ'^e`}tc糱Pq NɮI=P(Nz;m]È=$sA.+x.JD4Mʙ1_Dfqٻ~+ D"c|}y(r3}I=^e.(opDB%"h%t+-, )B>{ͯa|BuZĦh59a NC3:d]`,8;,N"v?7fz}VрQj; M'$ە':EPA.q=%/0x6Hv6i|ՠZn,DH;Ϸ0^Ќu m?cX<aAw ŦkC9EjB+k,b/C{}(aQEyLЮ)QP2k?C%JlvM·u6Me'\z`!{hǨ(Tbơ&݀`ZՐWF;iTfJbVvme?i,Md]zlXT,.|2ơ2JM< ݼhKOBfGL~TӰqv%H]ԥ+[Ё=}JjuGֆ#9ي{(6~ev~,$={p &ah7|")}њ?6Zfd\T-6^9hl/PԹʰ4+!E4mɸ DЦfVVp6DΛ/R~ܔ9mwϪ> S5n{QdAzy?.?є |^T$OXd7SW7j; 8{0\ۦy(ZI g|Rj &l\39OZ0FK#hw = *J%!C^Чrnp v 5m(+J@ḑV5mKa č|c8c~v.7`NcFE#\p+}P GMTȄʍ{dU਀Qtն@w|wTIYX{ODr}ܶQ5{_L}1!,ѤpЈM[M;` u>TwdNvŌC)8&SRUZwRK F&-%HP+ I; m2)vLSP #nr 웚o ]\#y[6Nt4ׇ!ؠ4;٢pg-Aa>R֞~F1R7z\HD)Z@-o|cǎoom/Oifhn"t|E1U l6u0PLhF*7ꋮIvL֊}LTib{wY4ڴϮUo;?(#sV13b}pJΏ \ ;c)Hwz" _:袎F.~2{n Jy-*0>ͫZVQkU:qtˑ)!gbڅSbjl(j @<@ v71G nZP 鷌i lveL࿷HB)]Ers`'!83KrZWPhh 5)s)MC10]EǤH$P㡏E;uyn=)YlMAwJЊt'=*ېZȅoF4+b\ʟze3°1$DqzO|f=Kn;HU|P]fƦ&]ŝŃsV5` P^ORa־a7lϣ36>&4 :Pz~nw8 tV_`P]#]6fdKz1t=gbfՐ,Igv*>%zd^FVIr6pJD0ʌTsS*0ǘ/fq|,<fc Tauo'bZh00Ϊ_bح?'9pEP;JQ(N ΅98c1OX1gD-/nI}ﴁPY"Fk)kiԋݞлB@cjh5;,A _x(Jg =\7%zEH/qd#eRb ]ČMIś G6I:s%`|O%,QU4T|TC*ު](:WD˵rz|?-e1dh7ts_D=n AOvpTDmgvbX@Q+Z@J̾£9zc(5J 9O(E.t~==ۙ KތSj2aE|}@yjH+""y_;-aB4 ѧ>tX׬x7Zf6ϱύ;q(C"˞Մ/zMvMMn`9ghux嵎-~50upP'(CTO]pɫi|OX} H[M)Xg:C=1`3\ÐF|Ss5V!o&8 D-msx=Iە•X֋A~׍:c*U0 P_M5Y"VZ eGWӗ\f%ŽCV]Uظb].3%! '-TF@چK[+*q/|_iC8p}_-ݷ!i)2_v˴l{9wB`$4k qS `0ڿ1Ze(=ʢ2bCK#TNJ%+9U}*VBpQt!wp'C䡵drUY'TU5&3j9.I|G.$Ѣ%[=LsJUZF|2I'_(+juD3_Q$. ӗvƓsQlAΩndž>d[\tj2wdzPJ' ]XW3ݑ[ɘQ:9LC&;P_pc0f\ăZ3ʾ2c`"tlx"sW8\H>ȷ}zF0%b%a3sc;̺yh)φFA[o)܈M$|?RR3J߬ĂjP`vت3mIaG]0io,,IGN{K:Ɣ~=@:MnW1GYb`Qٰi:n&#̮8.ێZxoG\jn5?v 5x9/A=5\x[p|1Lf |8J>a"שFp5f$2** vm᠐.fZB{ M|IàSY /7B.T}9i"@SmR(_p=g!|\=b p,iybiw>*{qmF1 ([&ܺ4 BiۋQʿq2`Ztȣݟ8nW[nq3#2j.qW#KL|vL76 ߍeaUm?PQ%RC;;G[nh(y}h gD"+(!nl;&S mSiy:߾bXLQ؈l= ˒e *.V:W nub+,FϒRY+$hVt y~ ե2-u',BOڽcH#n_Y{וjəבYXIv0,) ^waUy-ܡN-9͑1η@G&8+ԲpC>oO/DQ|ͭA ?6pSfeNar<"T'p2N?#]._q66뤒yow{m*x:(JzK8kJe92T܂Yaw2fsB]2G2lI3!?g|^/>]8fzgqZOkUϲFp!ɮD/6f1.Ԧ'SH͙wneŸo!&ѣ9k??) NG]gO5\$b|^mW{ǀ3Qk@E9P+ 7 J;7jmvm@{it r,i S:V ݛd R$*^@k'v#|7;I0W"V- L<&z`7YcǛ^J؜RSm|ApEjTvfu2:aM|>61_)A32PTcgsuhA[P{?ui?6u&0~bd脛7lL`j*W8.=0݄"]ΔqC+<~jNNJ.-{lyZJ,%JLqN&;XH옰 Ivg4oЕK]]Xh H(L:`Om.|;w:;u/Y>*]R7uK W_#W(Ӽr0$ "AߑS9"-!\p>:Nt'ZoBY k˅6"17?}U̲YaZi֣x\J3P 2lz9RnVbˀ\SoGl3ޡ'h?7hۢA)?{_"SYM~[!=J@2:I]lìa/Cn4Lpw 讶>f"ui0}>-`Y3,k]pqCW*TB:{nuuWz< fWbEz6NG9qp"=6=5>/ 4.96mSTOAH.Ldl !M|w,fCuΥZEC1bܙ2#%{j8 )]л~d؂,*VºAPGUrTۤ jJCy?)Er@g۝݊+Z{\IbEI4"ن6ѩɜ޼uuڮ)&Gd]]GzSD%2N$˚^݁"Q-宕'"t\َ )qF#=Rw)R :GCk%5r C^TpSw G_GD*LjtmduZZSQ2 DztQ5Q\R?IznaHc+ua>GT611LmUdZlXgK(7փI^u,a^iYiƂWtŇ+ DŽxh7ϒtUf灈HF|R И.UZVڧ.?bPG5T %h|]?Y "@xA-Fֱv U9r݊"jI'pk)}Ӽ2|uȵnb L|5D~{ AT6{/z!]w J]-s Ktgw~~c6ze I${_sABi^N#ڈ {C@ /-׾cc`pS,)N q|Bxy3'o[r`#ھdjIV&\Vţ !)]qR̥ƦG_K5]>6Tpj![MT/1N퍣D4pT(nPB5UHGְ4{Ηp؀O^vYЍ: iw%n2iXpͣ[Tzaa;zQM@@֕\7DwX>c:/[%j(@l`Tė1.+Sql. moG \ۼcUPOZdY5nRxvgzQ4nLf*sּ/LtF%&T5,%VG%ט[myIrHyjCoAE@Svc"/G0p&hHWӭui㊄$q' Twȕ^_dK1E!.8^V:n/E%Ya& 4'8g 2g:@B4#\X7XpD+/=NUPT.N((-p^J"#,݋MfhY७kC&jtY,f ?g{@j65xWy ֑oZiP񞆍S#sgy :`զo. :[(#AMhyg}X1;!w}}rkmΡDg}f"F 7<4sLλ-s'a*DB3[_U]_u鴽{,ŭ"UJ!)ߔoٍ7+*+]ɹoX6 ۱JF!;J̲Ԣ OwMJR,2l{%^pF2ט3''! _{B{ur 872cJ[IZHMl8wђN\i]-Yyڿ"GkZEG&# % WzJ|x;WRF@ eGT{i鵞 _,K#2R(gܲsNjlFcY9h&S%+<]*kxGQ`nf@XjQ*έ cQGk eTF~"zPm.w~r/1kY;w+ 8Y"&}{|Uҫ?l:#0?OtYܧI&KGyRe4gQLbk:'tP/.-yӤ3-?IőZ!E/5ѤH||qu5$^>} ]__ZZ~Dޏ[C]DA~A|G`{UԘՔΚ3Kbك`U#-D* ō"hki<;-a@4J9ۭ-SzJC;EA t8`C%NׁpЩ ։ 2 +NFA$oYn*ل^ Y6q.,bh ~Oc(;Z V)F/~z)+o+^対z {`_j'vШ@7C+}IAZ<[BP/.!٢wacEr{lBB9< r@~J>g-~ !ȋbxˬ(lX@ x;%[Ol,W埝(gԖ18PA(,t4묜6*Y;i~2JѴ^`5>@{U? DY8 e Gd7#86T?kmNI 1Sz;ew8{*e~ yFCBN3IqJ_9$DrY!ċjZg7f3j<k˽Bū(], 1?!/IѐWڝ" F%Kdkkm"(B̆ y)%u ,/:JEP@nŷe0JW"zWa|'JY[F>=VܚH$!}P8 w6hO\((K}dLAxРy{`1{&6%NծWZDwy`2! ;&'Ֆ2[n1HM;=+El,<aHSuݵK3@(HV$؊2,$,sWD&ǣiI/ɮSARB߯w;ŴFstL%c( _TՕ$a 8L&x s(ޥ۴ZZl|>D$ޢ֝D?0{2d1C0,2oW{2;9=u!w⥙n>uq#$T$󋴣#m>LغC8m)&@qUcBPMEr"jSgK*G^` K[*K}T̛v4 -QobwW'SZ@A]zHŦe*Z|hzH4jw,~FG+V'w`ӻ.*IoI0VUL.^gqNFs1\"MQG"&K>^V\evUvNE |QeX2y/Fo'-x_= H ol';|4 LoW J#; 3CUm1yz4l3Ͻ5Pv`RN~dG"ad3JLmGܡy__c*OfмЭtK0@?Hᛀ-@_t'ijsq3jΗ(ٮMZ W+1ɨx&<+d'YɓijAǧs^?lX惊ؿ7*@$Mv0^DH ȳ ψg9EFTf#tf}V~Z&ͩfV]s Q}z$]a}8J} q|s5O_؆wF\r<϶?gt𘎲C~G'o U<=M$m5*FW/͒Ϥ7Иn*Oҹ ̌8ӳgqs#v#["g8" ρ}/țu/'8N[%W>FV)Q7iR tY9し.7YB:1 :HMtNhGaZbP)n Ӷ~=嘥]~FLD,g<'y>{Ixsy _\vV*j4ѳVh[ CN*|K!ĝ/ ;NdY΄8no젻j6XgEy+B}45$O#ڋ;+*! }p]j8_-^r -cC0^\JEH$ >ÙzFC':k  ېʌhQRQ೤oiGB ft0&c5`aUd?}(C\2P]%)ƃu(*ªΖ۟sSN_f>RwUH +U7[P%Vb&|N' &~+F~ u#2 ]?!R~e0"y:' r͑)0WE1TJ \]Jʅˇbr+>bHj(*SɄLB2|6wZs8 s1Q fx@Dm#=*8NDR%1mʤ>o@'JoIlw~-X~W@/O m3E?[Ŭ.hi| o<ؔ&H7~Jex_}Pukz[~xV!wž[GyPzbWYLcZUr-وz6;`B" FLO|@|bm!~~.7{)EХOa.#?554|kEkM?p@{ v黺"Ʋ}a6F sHHS ]NEV}@D<Щ\=eTYO.ZoV/vTPmY":rP7x6h3$-''W}n > $jW+%>?4YRmOnO;%h [?HW*wl4Ҏ6)NiZ: iibHlR /x} Bmќsq6ăw Kk JK nH#Aλ ȒiC09Q^JbZI!>IOM3<3vʉ"wgjTF79*Z=dii{d1Rq?GMxl āT##{n:}@9u.Box{a)rQg`2Ek_J|Z Y@gD(lܬ#iEꫯ'<9;Mw,L"8F_|\':=DY7.R:^uGiYu)i~:嘧Pc `UCV [ߖ"zouvMe*rlv{v$=˦؉?.1!ϋ#!v^pn#}Y(Pddt)b q:7Z-򌧅!ZWYdG  kGֿK զ_tM]c4/ZE^:KmZn2w!fäLjTp[N"(?5T .WT~S * C>(t;)C"k*k yγ^0:=47}*!i=cRnAZ8'bR${R8f~3gl~Tadzlڠ] *D 5[ڱeR;>J_]DЬ( 8P\'ɵYKm}YƪY^\˩e1;C$_' b0M vN%l ^@ t2bsRN/vN7"#{M6]6ӌ͐WGcJ[N8aU0ƥUk6:^ ŜpMh,ÍL)ӎ!`S*,PGӨC -ПivMR(n;^?o\>+B=hc3V Hg@::C7OMSN~V9bD*-\^R~1ΐT IXWMFAT<# 7X Pq t9-ZiLlk}ym:UGK8M@>4}a9 ױbE{8[^Inu!T-ƩdE7d{_ԈT}& 'SJ-loɐ m3Nt\H]v+n;dD^mic5'g'-  =?e Dnد,. e\ELhWXN#7F&="4NrQt\;>8%MVP2ۈ T^:O.+N1mV'0>$gJREUZ%ߓu8#T8v,|*Y 1!KY$+M6 Fgƫ%{^kJԖq.M)9W; LG=ozR~g:YJ] t0S$!@"Yd{gͦx nUKdfӇ$&Sޱ =VO(׹dLo1Pjg.+z?[lVe:9]B"TC1/Pw(Ho.h=`04!X -T3sy44o U.Ă4oYzא%AAۭjj@*>Z D_XHGf6ƸXw艔|'8n0{fEi@G+2 U+nm20n0:LaO̥ƢAv8 qOq Zv3e;5xH}q<.F pوm)h jJ ͅr ]OuwΏy> %vxjzUc\*!Cj0 :.I3|m}Ȫ.Z\<>bM|);Sƴ{H;i˖L/Pn޲jr^<l.WX1 J-hr6b$q?/w@*crpW{xm.8X98ySw-\R]RImش.|KUS}bT`3N8]S WB2T0eXxB%oӋ~*/D֘Bq]hho$&EbqaW:^^;B2zE\y \i.7<1&Vr+ԝoEz\\7Jk? Jj`S9^AEbS/gϪ8_07N VJEL^ݫ/0d(xcjǓHn?"[zm5%7YKkHY`}1<*ִ1DB!6 %wm]αO=D9ͲQ({'&'H@P/FwMc;4T^WO+8L:W99֎'}0_ (!C3ĐLCq,rˀCrF'i¿ Rj.-IO]3Lhs Rv4ip芹.*L[M;LjJhR cx"DIIh7 gڸ&X>¯ ]eu.G%Y ~)8 CA%+ezJņBk3N iWvEcwB:<QkHη087˗Dw!mEx]utMoxiUz{V#6׋Foؾ[oJ{wm5 `n׈pE_;b^lk"u(y+R~ $?8)ثPKa9[GZ!TҌ +)]+_J2y+^l*R'*%ьYX;>7Ӛ W^ Z?u+d \T4o /4Ihnl񭞰q"bQjC3j (jzRa:*׿w7b U9)RtGglg_ {4F/-6J+@Mz]Bk*Yr}X 9L䢒g][q¦0KNgNPmo1:kXëN=^zv yE<̷܌vC\RO\T"ja~Z@aH⭙r.1>*B[3~ XNP0mRo4@tgAPmkކ$i }gut!9HYRm,phփOёEci|ݧL蹬W1K^j1޾D Ϸ&|s}lR{D{`5ޓJSǽQi`9|_Zѵb*H ̑l1|-)v`džVtO PEw^/[ YBt0֓t:ʃNUL0hfa b>ɀ& ^H84'I*D}vDԣ`Q|2KcXl(tJ0oV 247`9dP*DE"T 6һ;ACѡ9?ͨ|IiHM?noόh&Z "=h'U_22(*̲IҐ[a`ӚՔtڱ:Y: QZM 0EVR8&g&%m.Vui{['}v1)قaf°先ULZ^*Bzx;"~XV37P,֑uxo.e#6Z,I.2Kt1_Ŷ9HEK'GAڡ̹rr!Q{_O6S+hr^J̺Wk 1 # 4 !w˪`&M햪9)X!a)QYlΟtr`p\lD#JyYX8(iJ`4>&U`EUOuE HAl@gJkʲǚtª+ǔG&&>9"}pn14'yp_5妳e`xW7V )K@YSiKsnU9L}kp:FSa6ɸf8 /~i%tۯYn+i` Z^NCƒ7!h{T9MGc  %9B'/㮇ξZ,'SATQHaP`$eT,aVt?ݨy &#h%>p̲C8ŠO91icZ(nV73U|g5 2imw;xcc=kFXGZl.7຀$b^Ne+P (! 75͸lix F`#ծbpjYsu:mHsdtMO(^'Hc Ʈq(rQ8$sBhzk57zϨ\ŶsZR % p<%^e`R-KihUG yCU@-:/-3[ˮzya j+P X1^`x_y:)Bxe|ꔷAҞKBOU'i~J)@%H`7~>C݇Lƒk/ܴaF~s4 r~!vi(s5+JV6]ԁhSՉYjj)ln݁Ӆ[廟a3vb`z|6>JQ+u70SrgJOa@[(*[l&rhw^wmgz<*Y"%!9 ʣ4APȕ-bv.42t"*IOn8A(?s\TA s1LK'x_صdcP7ûcAKjgҔ~)Q]`_(/7FCkM(܀V_f_ްq6D&rZܻ[rrN79J]C`v8Cst8< <1HT\u azN \ۼ $g⁥xCC$07(b:/OjcC]3GhX?2 ʏ>Vۓ0/lad&޾,adJR&!_"VhJN'H{#M_,Zm$BH|sk\j~('Y%UNĥǻ;`PݼRMɌROg\B4 GVR`h?""CloѶΫMd 2RNnC5_jҸ#,tO[G9qĖ/O k싱q.Ͻ#oj Gu:q۳e+"yV% l:$l*Ռ^rgI̊Ҫё{<BqRμǠXM-%38;riIBM[Vs0UX߻ϴ mZr){!Ca` )#150UWT"Ae?t3 %: q֮d0oEz:X/|Ir.Pf8;?O]a~zERr_8/ d{7W'^;d`Ԩj9QmH?MiR"O҈e#CmCr7OD037Ve hZri®4QqTrUqe}oS>}^Nd„wQ> xו6[+I<;;+ 4\P K`ݛ:+OA^,^FH.~a sVMi;jGW1hp5*[Z P i-EKgGmWX$q^~)' 3]=Sm HN%lx*lz<:Y+/S#R_' ku K1VbFt`K{nQ+ŰFt9u޼Z5=1# Y/@.q+gcwyD+1 _( bšӘ{֣ ub9遾c <׾9cd8= rXn0'X``fP IiR]^&IF#/Pv g>)g}ћ"}ڻAO.na(E +E8K?Sucg^/tQ7X<\\?@ۙ pBlX%4{&V=N-V63mbB1>S¼@mi,6Af"Ѱv!Mm6T84/?q没,<(Q"@|3g＞>s5k&z@5^f *f>-!N S0ey:|)v7h&R쯹bB:+ 7OOl%(s4@ A֍1՚҃< Ox^8yiH@lϟ)70+z^j-\fk]TlG݀ZY{GjGs=esW]inY5tpNŴ`hm"튇nsN ¸e\v WƸ恉"uUuVF51"?/?h~Lu B η7۞wQƔf%{*ISOhg,jz $;9Jd 7)oH"6_X f$tNMÔΥ U>aOs.+W?} +@ c9 q5+Xj)zIl4i^N=HByAgNa gsgmh8쐍DXؚ1n9zR 5PPUM6 'e|_ŭ*?UdN$`+O ^BmWY7 ]US wD= >ҍ/ޥe>r U4`vQ)]tj#?Ijghxtۍut{ NJlOu'X`.EX@ R þ7kiw5v:_ MC搉O^ x6BmVOcfp:bM8GŸ'랑} g3vr=Q2 hk$>?\O?T.398F>Q+oh;x4+ӗ2=Q;WQٯ91J`WKՐ@_eJ,?O): 9 k6}h9D|GT_g< !D<[n;p[dml]}.ٗm \juC*퉅 VюoCH{>x҇vTL,ו )VEFļ*psS.a'&}_b*I] :dxT `l>gɱpp9ez;tB>.>_Xfal!;ߟJX+c n,FPѹ@ML>VpNIܝmE{s(m :E@lfD"q&|* Khc,#dNK- [_J͸ 1r:ݪN ^-BHޠIt\xZ뉑uTۢ{ !RM&/=mpl+-2?nI)et0hsL”zNB3ZFT1|V hMOK+>yZRW² %҈ֵpvߠ@b.quʣ};@fCosߪ,Eݯngb`5lOo}k\$tȲ).+;)T֒YN<َ.z!XxA@?e1q#U tlDt[П\v8+7MuI0V-| cm4Q:Bbr_#NoWjH\w;c߆"/R)/Ʒ(pX2 |4Oռ_B{ΪV,-dQz`(x+w=Qzڨ{U[w->ST sΆ3AM` wjB}YNT1-X3d؟ f2`+&6cvȦy v,GaA#7^C/]&mmh9?+7>12Z}YJ&+SZ&;NN܁˨ϝ8^'vS򸐿6rc_=ml.,6렧7jA,tʦQ Qt ܔڷ.oՔwoe=73\c:3ܿZ#maiԥ]zի Z|q4jb߳@3&j㤐?C+hץ;n{e ;MUC(`6ʴ{6J3hEtؑnd=I0{eUm=7ꪑ yRvuV$*2GCylZUt9wc7GtAϗ(A$qpңby˩; d|Ig ;o΢X;Ǥ O!T]ݍs)[=g?FF/;:rGͬOϫj8k|A~=nؽ S{˭n5 ("xt2&|w~Hw#F d kXn{lM85=Zb{fG՚zZB}g,]XrEyvbY4d0&[&lid$ Z3˝]`w4 G ZM!uߟ.i*Gy; |Jn^ -e}Y,j#\@$T@bNf^DkP%VGo[&7yXՊҥ<&rM] qs)Vt B&u|]8Lú׆`PT`z5ҞN(G=gkx BŗutIkR֨Nj( Z+$9Q ^@ l`@&y n+v3m&M͠oDڴ-JOeaF 5Og"ՐM-? u__ڜ҃J}l~K2wz[:sEnp*{:޺T58 wbX!+>:/Ј[Jk%w+_6Z5U'b a9TSq#Kd(eP =#mQk&jR:Jظ:.kՙahu]8U#<~Y] B6r˄86Vd>ʩ4bgQfčg:o(eE!͂iT"D|YQC"67UiMsufq7v\?WPШ)]%hڊo[ї}[?Zm [2[+o奝X"tQ>FKY)8]%u]Fҝ YCSQ(o4Z3]^|qf#QDB>\g*QdzvȌųӐnH N`?5gBgfIrG 7@J9t1 \7p|Ԙ#龋lW'5_iWM?Mz;"k bVaHmd6x&ނ${mRfC _U+qzmh_ KL;1 & /Gr&׮œb= mjkMg,U5m.}BX=8fCr$B_MUr]sVȔ ܉}T%SY$,;G$9=y_%1,6$gvY1}*cL"KM!~VZ*C{x](|4[ѧpW2‡_MߗwU6PaW ܡZ1aĨdpj\ӭd8MRͰ&zo%y\ŕvtU{+҉ǁFgV9))^DE:oITsiϛe,VmW"NpsWZ z~:#}i*G|qV^(۹b٨~: VײտY2 P?j5'!ʨ{=c#s/'.0sJB뿯 a M͸H 3B=V un*ʎ3m\oZ%5K"БY0ilS2jyMY˻opH5g1 u#y3"ϡD_f}v@u`v(ʠbuk%PFNZ쁃, =Jk_ =B6eO&U3B䋷yڄU;W%[.[#؄~]g'>Ҷ[Y 'cF4"a S;Xi#)8'C#w[|` _ nȬtY>*1U:/PK}WJhZӖ?P}>I5DѝE pgEpgRxhB5B _!T큂,:Bǃ~;`lp9>g~u҂Dfm} dYp8:Z[z`<.K,X&NcY&7^៿'i&/Hoy Fp |4Abrq,\jo6?G_QT=7VQd / BE4|켧YqUËb+4Df0;TD^3ktjaPCY\O_rsj EI9l0b$RP;*Zo ^ܞ0- u*7Mm9KvFuIZL}Q\7bTK_ I I1+Pi4⯨sDqM3uU+ml[F}=q2@f1P׎-3(v"y1ݡ{9j65rjxM81 '9\ˀF~$ӂ"'J9rY܉ Lleh8+c$_Rc_SǾLAk`,hm7U{Z*m2vw ķgy[z@SDKpQb3uBCxFmа$v'nu=HTrHȞ=gZ%*ihYi[5X6hd/D6xFSA|BF7ԟͰ?Zۀ*sdT;W.0DŽR=a I"=fqmXq*?Ӝm| M`7}5lA"MLluz R[eBOɄZiEi;ssIrg)^(v}.@L$|pgZEǒNPXŔ60!\bgNmG`w5_boQtG*3W?U.SKԥ0WA}^úmVÿHc.̍HʸJՠ +yoB-S:!xf#5_5]#*rSDzv1AY+u/=WF*'B 1h9h߷sMf;M1_#n.HjTl/C c:wv`}n lO!;*zKp͓~O'Ubh$̗tn$N1aO@Wu.1 e>t*08Q%ij׳ZuU*w60%6@SV)҉IlJkcE2-E!CRi+>]YsLXQ~Lc4>{0ҔƝ14@3p :B6:BMmuIʱgVKȌ X&aaNЅX֮qӛHWX,HU0P!MS@ r-x2Y*E}ҶCqa_Y0A(4Fj(a`t+A ޴7 tqgQ)IQ lݤ0+Bvo Uo?$9GjԧvA Z P0h G6,-E{Yڔ ].= eS'M.9)pt\j츠85;kyx_cܽ8OmlނL2%~GͰ{c5z4F+j)cΫb+baҤo5"A/ tdt d bbOߞSs@aX1C&=4H kJnat.PaVIQ6#)OG8_F?S"gW ']ʘ*ia̧8xڝbיT᪍f)H9Il-q@?':Yk%~МCH|N;2|,M}5l2U,ӫ$~y^`ؽ92bmChV:Hؕ࡝#' HVH̕2WkZ[x.@ w$m_k> `ĉ篬'0 6(w(0JX8~8(^maR_Z4Ve8 j2?(m,+SmDV&=hCFgMw:$\;a:m۷maJ`<Έ/#p$E&9hy ezZOr+p}*.Z!; -vmۛ[`KLk̔ 9HAmOe -?>GaGdvThsh|"|lx)&n&޵pmgisGQQ[/pz/:t!U+93@0dÂA#^v.k$5~8E{+3fb?\|h)wcC<.TQ$P0$KLP.jT"YTdž3n ie:$ O*wdmS ؈`Gm㐶R%_P|ȎF7P@|pnNܖ;D@8G^tƺfW#j<6;nVpЩ&y3tܻ ߊ ])h&ɴ3{]JQCZܱ9_hG ~1@1\Ο9:x=Okj2&QU1Hrպ{1-B?b;oRh#q~W)Jf/t4ɂ&55YwSvbk - JirɎ.&#JѽWM}5űZ-Jdkk&ZM vŪ|(/=w7X;>/Us4ۚL;Yu#]#I،K?m; lYgOjYnئg| :ޓL5EQbԗ; ^9 lt6*Yk[L7X#g;!^xpc޵j3Ä~SBTѳGNXr#I y`A5ןz\On0re/ T.N(pmf4_@gD@FefeV 3[ Mxzm«}*##5sMdct6RreAg9N"`I}F//srGwHZ *pc Rkv8,49yno% ߧ :⨉kN,cᨆත-fܼY4oiYЄSrs]u tlu`;܊ ٰG6$˺mI+oJhQX=TsᗏTf",']X[k99h3A~틸Ӻ'#NV**Q``d ﺰMJØnG3&D BSsb)WP-/L9tjhKH'>T4F׉j=3ONV8â Lɇ\#)T ױm/yx&FAY}ypjz_ `N"K 錭Fj!Z>.{AeP2AG`4s>9 <(Ln2QQ#$m4g% .ĝ}[ź1*# #E@&wDvOуBEU/#QZum~ēɵ ܰ2I{@:4'$8ćH$C#xriDrԄMk哬~AeD͙IZ uٓȒ($;c;&N_։N,`aGA?0g%==gbR!?:((Iz~u3FҕgF9͛{dk}"^}9cnktb wCVZWQ=N̲SR crN@@ZE! +M/b"]na䁢{)\ 62{UMلWuV}SBr߆cp>ty0ofCYyTGsҵ-NM#lu" Eٯ| z'nj0O:SOȰvjc/1K Rs?8i~.aHSB1_1 y<~XWsдa8iyvnm2 R !Q8E Әi>5rAЯ D̏*w(S?;2[5<7-|u=]bkxgUrǶǖr̭)½k2#; 2LW /]_ 69 W+zݹ`pY-b+"Scc U`qj@ϟHȌ]ٷ(&N.}cs:P$p Z'$qmtnU{SCFs<5ӕ= qcϵujtEOq/RH79j F-hWTpBͿ?W;#AMy84S$M!p{+:Z1E]5Ȉo-TȎݱE^ctk1Ɍsf%&.w+C?AԻ8Oq e}.z'%4H5:p9y؁Mi=G5_Ȏ`Ȭh`Se)+\"085DZb-LʊƇc8,ýtru+o4cO=):5SI;3al~(.V}ºh^,UIed{_@F^aCL aܨ-XONEa@ӒY8*@Z͋+ƻRj5DHi bp5_eh٬V?pNVR"8{ ^<$PCz\ҋ&x4Cp*#)+0*b-M '8,SX5,&3?4Cckf 6oUv!Fy5ϑ]押ky3)G"G(hVp`0`3Q$Jbȗf*n7B~e?0ȿJ5X3-+l0W5UAWp^a*P[VSG %\|ʙm [97HjR4%YJe Q&oW8;;)8FԒ{5␩%m#C.gΔ#W a !X3_FǵZdTq*Ew|#י]JߧjtvI,= ʨ7\T[i7? X_w6@P `W D!.V N<$x[toj4`7?ԘW?RrqPun挊9n8M2,raݼdLI2t6T#}fx-Nת ~8mE85RbpA@#h`@$5 n5z!*Њ;w6Pm;fA5kwd>%1V[7{S g5c4AQ$>]{vU(j M&`{9d; "9#(MF= Ngw |3ZlA)2uȥw\k| D l∘~.f1O T@  pcEML-yd{~m?>{EWbe2橳w;Cή S102*MK+pKjrDJhoɘEY/w .^)Q)7PzޥF+};XvQAY'7WW~9l<ɉR~ >1Ꚅ|Zt*(9\nMK}m2iPwӃ$̬ ̏WnUngFHd\luQN@.U6˩sئ}aCwBF`G^RT&5Sۥ=bi3Aj cqğ-M|0z3O^_$-dqwpe"_d, 쪲v0o%wJ8 \ƚ$l԰\`˘V$WvY9QQ0q|35M T@VƬ_bsybQ쀺J+1u"?~l ecFbN: C\rJj)C.l|mZ6U`!S0:_ HE,u+)@# 85Kr҃)M}C]mn\i+VqK<ǭbpN)ٝϟR Y7ŪO&=afE7S{Dե~P}ٟA/ l@LbX P鳞]P "Y;7 SfviZ{ /U†] u @] v1{s Mq [EFEXb}s ~Dp~{,W+)kr?gq'SHSt"!MH8mΤDDܰeH'7 ѰN:}F,n6>W?( TZ}=˧XcZ%W*gKg.K^{(?e&(]?H57ܮGWHGIZ05C5o^7|d *1'lql_m=LS{R'8x򳋉iǛXc&̕a+)]vgE^2^zGqLں/SlA# ?~ )oYΕl3ёսĸ D0AAA  \F:88.Ƿ&4+=ӌ$$ϛm |qrlP Kbsx<*#^K'Md \k;xX8{R'h5AUF@Wd-igYmnJ°uJX+ rq*kʭ[$(H (p/lq78XZŽ(6yrJ+0k``ls?,=5vrBϨR3y=88iSD_Q2M܍!*leFI%HPX᭒Y*{. 8%z :09HR@]x_T7"$WJu_Ҽ~M7"_Vq%s@tf(z>7Dh޹ ̘z {dc#7>i5]rټDQu(r7A4(Q83 j^pgF<* ^$Õ* j-L;eX VTrdm΁ +SHv<c6C?w0) e5T|>|\*4p;SM4yRy@:Eǽ-{S B8zEqР?௅Ɇ*?~ׂ)9,1 'cRp䒾 7-Rhd[;ﳎ.>r;i-q@}t$u˸̐@mRc ' ,Ho'\$҄B pRiӚ9=<\̛KmRD +g²̗d/dDPVWAT.ٓ^#r iX!n1&w)/v{:FL!le/ +]*h#MCv'';CoO8ǸΠ AMt(LV ^ -ؼvcM+;9Bq͹\ 0I1&at_Kq>jw|ߢcgaKb}5zh ȞE/Vv jSgXkr,X{gѹA%dk'n': a Tk!X"W3yw4MG5>`8-sޙwZ(bo2 -q\X ˩ڑ-I Q@9PC0'jGHet> gј\0*3'/xO1/dh N|vPXd`rH*wҺW~el$P?zM ;Dm<3xԚ#QR9a!""7^b |5g k6]Ts3^Oy`F8?ٙiTX,n{01E$f-;)A lג7Έeε)m0k}xq#R[ސwAx\LhT+ۉXMn7"EuO%{pp+Jꮿe<1P&UgJX1K6{c,`cdši?j]M|w{v_Ё^dzUP{{P݂P<5^L3aDc":=rgUيjaqk+0r0PX+cQ9{&D5r`Zo Q۫2REZ)ь@,m8VEB@rGa00%|cZ k"l&sE͛|kyr0눽H8az6܀V <)4gw ^xA8_6 swϠZs }6YBǩN}\q;0P)Hj׍f%rڄ&DndPVs*T:`:mt 67\/-5s!L 0ҙiPp14Uz׉Bg^n HwbSiRGU@u[ȷE%#>ݷ=ۅ‡NP2=kvy$n#{vOq_nGRw~'-ꂟ(c+줛̀X=-al a?'ҟ*GRڅdʒK]W+yho7r^U&+Q '܍KP w*b s' Mѷp{!DXpJahCRs1flFARX%R<|XFMc 6Sկm+'1(dGĎ8*jiW[YxYu&#H|etnɾ 9 ՘mW3;U6|i'7mW94Qķm{#0ˆ~ЩҌ M̩`2z+:ֳS?50{}2Ѭ-˄^F8M3rHh-rfIoJm\R o%wndz ͡Ze4ʸ|J$OnFL,<( R9h2@ Ha#D&jO!2;jV$pW+Q&h9<(zpz+\iLq^I,_>ب٣ׯ9 /n3)~W#%|AZ=75PdZ t` N>9ͫc 4Յz7"6lV9c\ʨ4Ɵ:e H0 ?RdZD/4dN5TW8zSb1_%ji.&5hau/.6.RS$}#6QpV-,7&ǿU4j H6G_L+P~opE*jcyr/"kͤ{4>)ߔ@鐝(I+Y9| 7O`SVdZSPbwDAk `+FGU֣z K][`]b"+Z2 ŷ!1%h MeU+fP&:k 4\6\Js?'`1̢r]ܙX9*MIdU?<-:eɁp::TMYcv-4@Gz"``[g&A|*Mg`$yNnt{ejO*T4_KLj2 04&!dW/X AjV۬Pׁ]<:: jd'zdof) WLFuzϷ~@Dnc}q)(BWJWKkܔ6| Z?KXA4B5L?$hiw 1qpVًxq yML?Tkٶx~(.Sv2nݽ5\RΦ;dXMV-bt/&QPK,Q;O8rq?t`籷FS6L}K7g+;O@#l: 5+@ؠ]".B$4&"FfcxVl_|>HG#?  ە10#%C>W8Mbo\|T=wiZ Ouw{#k9h kMoCYƳvuY SZ(jY4'pȝˮ^q R[3A%[ CfrFBqa5l4iR#\aI ` 1L'Oͨhj ti,!łJXu5s\j.͐O琮bV1 Vc|1.?!VoBݹJ_>`a0xDǑ֮HBUJܩ!n/uV{Y>1$6ڍcOUJLX0=q=&Q?d@~Js,=iی$ZuH&0N !%(,s'qWpfv4J-0^h6Zݞ/ |MЭ)]&_ߟ{Ho8xUuRh~Qg8&m:]YaRXōd!̲ t_M$!pݚlY64A,.e^xЌbLy6nl\bEn&\F?"ӜU=%_ey{Tۏ/0[m9?W:h߶iRCSVLkLWHN%.=ɺR90`pYE>zF3}-^zg "r(dd[7B۽mcA(F8xR{`:[P"z`D\~`V`ϗ8 oY@1c:txjHgXS״_&i;(9fUJ:Cص{ OȽW|Z#L TP/kӓ[$Eֆu(xϝ|ɕbƙ" X#j.ӏ)%׈Dq/)\h}|5>6"n5l8\g4V*7-NnMSjj&Hgr%8K ZD}UM3ӜC,p&a- ðXRZkvEI &8Q4V9K}edd'0Ӈ׽%?IGjs-Cx<҈~cY[n_7{t]rSCM t{]$f{sFB늷*Rj#CNcHC bFqr7]g "x #SAa.ޝ,f:piF,,zxG>oy]5d)[e4YEP2 Ûo$rV x̥lC5J@dI _-oRͤnrw*/j$J\&QeG>eD՜o7mVq{K9f jm;[L?fT:b>-KuA #؂ ~PKoHn!r8j*X )2f (iQD}+8o:оl6GC*qGF-bc1$ m0`DDd*hbaZdRr;^ic&.W8\|@2, iZpV!744Uhrq 8=,ĊCN$y :zd\R3c(O[/\ߘcn\perh-rh&E!R ӝFmf"õoQUv8U͘7 #pT 42g8R]XN ^ v:v*qX)GGOd OS9L/|׀@{ ux~\{&'^;$M"ô12^ Eig8rWN MR=\ñUmz;HMenH/?v~OMu1B2mspTfIj4׿ Q}]"T@+\5#v:6nG_[<| |2] 5UWK8LGz X^{=~QK?{X2O0&س,ˀ~"Qh8|ԙ!`/[8hȱ"+u<4Px?ACIЯr0WR@D[Wa׀hq>^ E5%u son˨)JA" so-m^\̔TRo*FGV߬lL7T]@ PG:}y)fX$94!-M=<V 2yT,pKuLJ v³WjbN9KǶi%Amc|ݕΤrnΎ( կ Ҧ B5ݰL SXX3ڼҢ@RT6If(IRFښJlӧXvHl[hQQx3Cf;PԄw{<?2}3nWHbF[R^AEKZrs<_$eW-cY3qv:*gZ ? xrOElÖ R0_ SV87sa ]5A}/z_iǣyqQ0/^l̪_+ֿ#\;ia&_zk9?BVɈ9KPus{Z嶣 Վb=Fuk~%5C6v&}g3pJʈO#jbvɰZp"ǹ.zRnō{-: h R;Jaɻ =N(u/Xj>uY3si?g4 7] $s'!(/^EeY0Ѭ #4z0.7X[}i윦ʠIMk0.exf Ǿ8sQ{9q]12*Q7gG0q8hdW%,-2~h7z. Iic`˘sҠLOMT(;֐쐎Ȑr-/tsj51',](RDX>܉v$ mp$B#,2V2gq(?85g[-Yь^?]Tpr[MӾLN˕f[C̶V4.a $Z@_R9X@͈VԀ Qd/cn-͟99J{ "q@2vP n.x9{ˏZ&1^_;64$L;اwŬ+G1p#M;4"jIxL{a޺ѝ>6@S $/CE(i@믕)x3U緪k#".s*d"UeyS]/.F)C#-&ҧkŕTN:=|Ƞ끳[(Q;PHO@[W~a[Ây{`Bu]=H4{$o*,89; G :\WVER 4GV,_|3sq Bxl0*v9b(5B=t u Yܵ-7#uS77b52WVpBn Wʉ7v40P2}A`/] T!RL_aP']oCߤTvә #"{4]z)Қ0Fgp)!LjۭB8|u@k"ްH*,,<ҩ()+$6P\vܮF8ѹn=w+![eP3%Rk588 "~;h_8̂Q>k&]`ѠNnC}|vf5?MWWyY2MKG6:֬r? 8CW폨;T[DAк$7d\|4b`LH=\XF(oSZcQbk+JCki(hq2 += }Os2"N1_0s靊\;g&۱neh{"+Cw2 5Q .o\zAZsqw88Όҽt\m\VާK 涫lB(EIR*>K}(/)7/ƻ} rzI!8Z | ZgkO'}WY&}qoD:# ݣƽPf^lP*\4jDM]'`֪<|}3') [%+P4IJyEM# JQ:X~!lmOR) Ь Nʐ@h V `w)~i%͓ x6-= !Hh)3c.*|hܘ.ɛWaL[C;9W ks㴔= JoEIw^@|œB.񪘠e pfW c+/h,ZYePh[ m+ "?X2Lq/)Wα*< Kk&u<&tǯ"4Eoǵ,q} |%}Iv$r!iWf}hSqU]11 v+u'.1r1ˇT`-s+*X|B`x7[Sb,Y 73?x66Çuy]b)s,.1WJN{񒄑l o BX1bbf'U:~vX_k Cs^L:DX~)kȖCI@8zm0%a+_JC}I.wMcu J\+ V#20&qZ-(7WQH|sl؀f/ya;j+qS(>PQFWst)4vy5;Fn]{!|[w&|\ѱIE9T`lG)YOess|ř6B\h.gBz1x_t7 'GnsmyiGv64lW&A|%u1Obu-m4"b|,tw9Z+}4󙶏"jzwrR['°_-Sh1he<6`s039*:ޗyDewgz/xvoJ2~ Ń@1^3sQ>o~hy ~ zmlf0sS"Ձ m֙XC1T\aGe YD6Z;V(2Hw>2*)jDG#r%8Z2)vYU3F!NC!u?a5II$UdҒLOF/[? I0WVMfH.i=)/kC7Cx딙kHS:F,h`Ec!Ӯ1W\o/bdԪ\KU\9h]a{~mPK 鳏]ݩP^,N[nZi0:b;ˍ@fvˮH @ܗɴP:D+7P:*Sȴ f5>.>5WRN1"-%J)Ŷi-![{c^K;5I4OɃQl\ҙTN IYe—o)DX1UHVЛϙ|ׄQEl`* _|zP=֭Hm/rݝZj\٬ C +ٳWD yS!͞)ʕ&7KG@{.Jb TK ]0SuYyFpeݪ^ʍD?^X!;2ϵ y='2e)HsſH@9өr^1y&mD}&k&ų+R:L|!Iz]'a*a%x1:m^}sHݲ)K>o$ۧ[$`4VK&hID7YQ*`CxgM}䫠yǦVR%mLSbFW,D)_urcQͦ8߻xk4GƧPwky `1 cL~y`hvqLYr+љYO::D_N>)&"@G3^9J&1J,ED~sUhwSI>KRMQц89WRR*Fl0VwZY5frnϗ!.Xh/,Ppb-2j?8f=t]f 4úcJV\-ʴ3Y%GLWM9 lhGp߬o3AT+o>I]vM=' 2$dBo6\_i`;`RU\_QDD{K'q77,o:rQG35@ f3~-L̍Ⱦ:3)W KfJ nb?cg,#4fVb{п8&voVL`qaڠb6NB"g҆~ ) e0Ƣ>S\8@%]r=!i"E0 9i+nԧmol+ TjiVJs+&HW`FH%s5"@{x4*\uFg iRq#̦M lxT,O1)҂\Y"Y9݅r;{A8mچy4&p{(=a`x1 kӴTIm;X-< isPL+cD8c֘!.lY)A+k洌 ;fխa:U&Ґ'Ț$ts14O+WNh-Z?o&ؙƁ k Q M-X$A8N^_\׵kEŀv CG = 8Bkg_ eY5Zs X뙳NC+͸7=$mKMHӥ";RcH|Kh9Ni (c |fTٻ^i@`b[pWڦ}ewe@bٵV,G\i 0OEg3}ݿǎjC7c>Dд]M>a90 e A]Z) Y+4TvX&w 5Bn60ٙ?$}fQFh'bϾxzƹ`үO`p\H6TO*4@5䠷]g@@*N#է݈[֦*zm&%i9`&b e0KJ1(1ќv X J ນ5<ޝQialA+'P6 n݀) poGrʚG Yﮁ0["ˀNG+rtxq>R IT m?jAӀҠ׿=+~Y+AD'\1`"?<~SWYYBt7G;ڒL16sc4 /><(]xW2հQO>cYNUWɊ)4Zs#!5q"5ZB{9,Fˆ[7_N<J8P|ԄIɄsW(A?h#qރf!gbkBbIDQ5k/Ct@تE 5ￔ kpz{)+sWHXQ̉/.@1>iIyq 変z(ZQ&.-? ,?3@+3J'rSDBnIrS;շU\>D6p2-RvD4қ!ttF"g7~p*Q,+)Y0 @Y((ʟ} †낾u~3i"kװQK^;/J6ɰɈwZH)o%,2zqx`iz @_#%{.Hny4Z.}V7(R|GŌ?yW3a?9ԂUd LyE#K`O)4TQe$c0hwa<_u4zԈ4畆'+F1QlLgCĎRkGeH'f +t=N$#ZG,pҁ[\!*wvK*o_e+~RMjG͒?v8kUM0xoe\% =-cFI^if&z+3*пE+־E1o'5-OEm*cYҨl-Qi_@$/9piXdwNyTyp2ua_Ə3[bϻ^G ܱ6Rj56(4]´TfV\b}Fo=ܔ礮e;wZ/,O300Sf93qA&8(gg!n!Ozy"? S,]3O+϶@ K|GW#`}԰nᙦڝ]΍ټ{WF> eWb΃uS*?և&,"T-2FJM yXZ=g6+1h5.hvuXYs )(/.0HKސPՈ]/7a|:J"~aZn1(8PN;'z&wj |*y hf-D&|RN{Xwޭ pgo~Ԡy2WĐrqd^-U1~pq`"Uz>aICJn ƞ5vp2~?6 5FqP)N1]:T »p2&\cVDȁIG’iLeh,fd!lʞ]j VHL芲McUMr3&0_W 2Q4kC&@Zd5=?YB9r_Y /!$Eqb֕5 ;;[ 'cmH9)XCrG{`o:6B@EkQ*USiI2'{?ܶs451z6sKm1./Ws :~|le8jkɝpyh d jgeldDC+c-W'H[Ȓ铻8Pi6@ȏ sŢ}KM@ϙ4QVz C+i"Jü SYWHxIw. BBGɹ]$b>:/`:7T83S)ëi"gTjhf=,%!4KHAHeH~4'@d?tL.kOG\IzŜg9e/qɄJ}bڬczS1, qy$q`|Izg 魳vc'6[v Vd{$)Q<ϼ1{̦r>Dn:& :+]X >zЊ;Oh2x^;;&*, 4C#ީyCx\I)U Y eLR 99ط!GVI9bߔBc}0Kp Eଖya*r~AGEmYc7F8f QJżۅ^Z_y}JmUi) Jԣ#985vRj,<~mkTJֲih,5(ݠ!k|svшaa|;+x $9-y1 Ky :LdUguGrdgfA(Z "j\a۲U  <:Vdx9hy#jJ#wֻ?,yZ^L#p?WyZP_<||IUOoҦl <4L:1QmLpoayc ?AF h#G1!rž 3J pΞɚd"L2Dh%bh5` 2ˍ؜eYx/AӠ=QOœ`J2ƗkI>.Ӹ8n4t| d%;C !:lr bf3)8,Jyҍ `Ѝ_lIR"ouDs4M^-K->EAUÁjlA7 00Ñ~D:53R=!K湀B>>ӓJWOA):0`@z[qe[qbj"(p5"ҁvB:2'ih`TNw6'tg,Af,xI5Y|^}uzC>6 -^Y;`"ͭ"ƶqB8EGI'L̰{ .@nK󪔲1fྠ%?`cKU@k"G.};e+I@9\G?}Dʆ=^APA,f714D A^}t w_ȇ?0~,;3^h)ާjZ 5:5J{ڢ*}]%33[Ь2Ji?6i~l!.?*iXAD  $zjDOK;P^EhţSd<ݻ3jR+Q!L^OL>Q@bVW *+@xc06@gg&O/l7kse^{tD6F.JLN|f&G;zTdr)]5=k 9&PJ>Qwy?PBN@=Ds7%e/؛N 5#QKkUG1"::ϩ?S 8p]@Ul'7! EVjp$Hn(hw IQ JwصxL kYj9cvtErzq+&G`Pςݾ}Ƃȭ+KC!7VrwMgQ/Rh._}@['_ߔUuv.Ϸ IJ.NRҵC*/\nc:xRYd(Ry7~}kD.RуG6)r}xM Ox;qSͥU G&ӨU+ 495IB<16foFFcER}ʀ0a Kbx];M7)5rZW%k1 {K'jBHc+D]nqtg00y4ၻ*2B{I,ˬzC̚ZB:Jӌծ%? VC}H&=V= K(HkKsE5Esmm8|yb6e-~E9D>+Y~}%ZCzU 6vavUDE,'+/ڦy\;0^MfKG_^ ?x4!qq5O~}¹ʞ,t_CxPwlf4h i]3g/mRC׍5.(X Gl4ɔY>8w@hZѿb2Rc8m\ zO;[ KS\[Vk~%E&t*ǟCS^vvASEץCs9SD]E;cVJ!DaJ(mZe4QM/ڣP? K>V@w(Kl=hi'{eGkۘ?d nZ@@e7rd*>h(,HTBF;6 /^'򿞔{rNn t\Y`1kZyqi qRҌ.*nab41[C#ZèD|b8tA )4{*^)Y;AeXD I^| U5Zv{ j1! pe0MC٠h3^Fzx[6G(J=%zekO۷uqо,;\Ro'\j9#11GL}^7]&b8\ĉ>|-co> 8fJ~s&^mѤ b XRj_x0tjBU` 3NeTQb4.&R39p&4-fN (-2i#_,r~o'<*ZϔƱng)nfNVA ߳GP<|E2j3{kCzKpfq{.7LqiVQ:qA`3<*qI ~sVVǽ:ID3pA3&h9瀞zZIW!az7÷; œ4'Y0Ѵ_>"y}L_C d)KZgw{ 5N6jd>:T@؇\L1vUK>(K3h+/*J{4qLv aoo DPI~`>JƓPrK6#/Z L@~] N;CptHzW/d΍$i@/%R2TF:@Tu]Yy-1gt_笵v߾7br}5=OnQ4;)WwYi)=)9cڞ'kR/N߿RO\QCA^t~Q:'vMj+0slKifŴIp |cL䘫( ge8"_;㴥T9(٫ŔoȓF:w[?h et-<LÛ*y<3"u%F7.e^e׳/#"K5\< ˻A5ڄnw;4ty;#D51dcZ?xݻ ~yFz Ud.!\z)jITe Pj7@&bRMNZ2(DuF2nw @/ ?u>c2Lt12 gX 5j7>a_q &6#sc^G5_, Q)qcX&tpJN4B cӭ+q qeJRI*YhVo YMj;3PK߄ȭ33:0GLRܫzz!8aie=)|;?zC C@Kz<%.KidKćM>_yyLaK&'afy;3xOya?B9e:J7(S 1} ?T`>/Ap/,/l/j- mCt&ňaј;}j-m tNs;{7֩"=QO,3+`~Ų`g\8|6@i\"^:,pid_EA+G@>i<'Mc{n Bޖp#SCd{#ڪ-vUT;Q1Ӝ(=ĝ? 0H$^_i]8|?&f9s\9i+Z̊bTc & 럍'wM!FM X|~MJ\Ius U"(ѧM"WIv(ݼOxC}cQ-|NLPhjiY^.u`+@as]xR%M,o`{b*Đ8Ncij(Zk*$d.&&&eL҉:™ !\忤{<|[>Qـ.ib0SނŊ jOL4lBdKVsФt9:po}EQ-ǣyT(:dc(41u߈7G'23?UX VvFsP֓?m"zKǰ:ʒl\`PӶ43ԴbdCnn0RM+[Q L0+QG!1] oV|L@G\r~Tt/p;tQl5'+ᛉ)̓֫̕D53>+lv'j3|s7ʒO* 1s"5vp# #NPQ[>{w3 rgVx1|p\S9d/gSn\,f36AI R'江ƟnAhq6<\ `+9t*)ٖOv@@% ֤& U_lhk y!1@;J ]P "sHn癡uԌ1n!SJd2|H:3*=xW]ac 6oFqB2D]bJc[m0nYѭ U_Hxݏ(Xh_vĦ82˨5Q:q-ȍ_*yAGka!)qmq[stb_:ZF07tcv w1_D;H@Ò]#zTg7-KpI_bX v-[u>gCJ^SwaIGtkIK9~82S)H|zlkhBB͏?VsG.$7i55Uʚ ՛K ܾ0?+钙;iOB!=;SiCOw@ 9eJ$ASgf J]u*ＧhAӌxAL(D4ćID3֥,;Yjm:%YF)KPMԥRbu +uHξc~~2J?(Л D |d{PXG8d_t?AH,"J=Uƿ.KH|j9u"K[qbxT5tI;ࢣzǀRjV =Jܸcl5Ύ(Vxf2|;DyA x!m}VqO}Nd*37raڙF1aޖjx) ǩsٳ ]R"ɷ˒%ne4GM2޿P jEjlƬA]8U+0o}`Q[ 0u@:\L|ׄ`*W8HA?ib*tJYϥ c{z75aIwaS;to~'mVzB7Fw󯞍7bL-/e}6m4wB&1ahZx:JHn7v RsU@_`&/?R[qfl$S> .Y$VY,zpi0~mǠ.b8K!!ԜҦ{;q9\d9Kο[]kvd8)/~ g$fan bj zSsk[8"ЋB:'wc%vu Gn@slr]63xNE $sTS*O޹z&v"#{l@xƟڬmc,&!CPÎٵJy! {I.\m5LZn~e+x 2×H`wY1jbP3 hfu2=~fw "ʙx5 1b V̬i"rAQnT€s=KOJi*]Dh[`,n~kEP<x,~Ay5y;j꟦A>rp@; N,̇;ls<swC;ԛG*Y$d5lbB[VڷUT( 4irpd5SM^"Km{s?mCs[4z'ke5!Iy{-__ A&\-O1Y#JMs.rGPBpUUj!3j`>RdD BdugHHPfT3Tj%9;HaE}:g50<<16FvpDg8ZyNNUv{8vlo C29mS*r1@uv?y mcIRMQG]\cj,@D p[0BC} Q6xx愓 ٖ~ڜI*QE%_7Wٜ yS4T4A}4=`1$<0d M՛WSR}L悃I\Lt (Vg0ĽL{lx?VC~Plf Kd%s,c"*#V02R ,TJ £Ѿ{L&Ӊ F@QeE5?D͡@t _BZ`w2c/G 3<p2 RLm}Bf~d7#x'5pM>о9g ϲi!3*M$W*'yk>þw݇&=3|>S+4"ؓ9 fB.{Ojy+Pϫ"ؒxnщri6#7v,3WQі/arhIIf|?7 . I% ?Ŵ,,`` 'm}Qǣ,yKJ9c+iX+*򫨶/,eA|o\{Ou5ZO| y܂DR{ne:%\p J9\9536~cUWljy$.fSD;fy0Fhl ⿓^0e7/-zfP,k>)OcO`L,h|R9VD%hǑ^DMQܵ܍Z sOBH+I h6VbrKPo !-kF69^ME *$9=IE !h@"R[yie^ ӝۊ>}?`M 66)U:DvbbԴλxrwD=τ|Ϸ36M0ւ,|' d <'fS Eڿ fpB} ]@S:ơ$iD=UV:E2+%TȽLjU'L < t_>F ?y>Bs➕ d9l8:v"%rb"]L*LVũIR<ە.yWTMS }Ywc Dau _7ɥEw0Y35WK6)ʐTE͆#j*uB;2L׾g2=]/cYlY vM ̬¾~!oi*$I7U/sDpv>Mn>'@VƭÁ$Fɟc 5fWPFerQt8@j-j.u U޶YA3#=bt^ 摂ď^1>-r׵"&ٔb)sm6.)[S4.5!r^FY,v`)@Y(\9ḓZ󯾆w9%_ʟzZ3XAL]zeHyMãgnzCr ϴQR*GW6n/u4dER"S0I;!@xJïQQBj=- Jl) hD=vDAyunIbZeSkx5hTB׿TJّ׫E`'.gѸh}"٢wVɫ u)&qJt夡ZƁ'א>TjsrM<3 . 8CCO1mTWKFF۱1QJFZ=iߜ ۺa$N'r=TtQ/i6=yTJٖ_:ܣmS}gK~56w#|,?GuxJ({)o$ 7cś/ErQb5R%I^G TT}E%Yї[5>anu }M~ /rѴW|޴G )NpDTYFΩSoǤkSc`;8eLza#s_4(둄Lߣ*)Eo- /O2^; tFWlɿ l~4$Mtt&Dhn@aK[c)2 r!SBEin5}+c?~j3n(ebB3[>CBw)QˈMd]Q4mJDz2`obS*1͜?M=iwMBÇ^>=6fJT9fR@?CF"A{;ˣEw18ܘxy 6 `tп{2jt#G٨,ycL nXeXz9~ܚOf}j:f4i Hp,&9]]2Ckr`Yw݉RF w^`ѷDCz9`rS|"~a7:fCgZy4EE3C⽟:.-6bRGXR=5aauV[1^uq*dA䥃E@>E@v_̸Ew`/W Ճ{5}'f F_<.f@8%M:=%לb,@h#j$_zбv|>dU3LG~6E[؞ySx(.3vc\kTgzx {ڪL$1 +ދ l%@`EnቯbpƤʅ~x& coXԴ> UvP%4!T#e~jjb; | D2MuFt}O\wWGH&~ )C?^T``T텙<Jmҡvgiי uG>|t i W:qDjY As,b/¥a]6.70E 6+. ]9gYcuG),"a˧nԡmBG6bOFkַ%6/{و۲)ٝV2vc"{KiI]' R yxibPeYǁ3QF{ Nk{Ƙ~ FB 11I6}?S#4(NLUzudk=Iu\()m /!2fQu6[~Kj2'rdbotXc /EաX9}q_љoXXǐicJz|n/NН#adf:<*YQ, c?"`:|_7!_s8-fJ3@$#W+R[\)*y1G]3ye5/Za^v 2\ՒP38^w3 QɶSGx͆K9JfBʽry !d**^`J5- 5Z][vJcQ_ɧ:!c>t{Xw;:ݥQLhhWL? NI^Z<0"^Y1h 'g,_0犸@ًCjwIrr2hYfS Ѹ<AALBQaWR2DZaOmqm*}} ՟ee#;L\<ܝ&aQ7es̘Q)0\‘ߴBte%s:}[UV9h# =B0sNn$~Vit6Z /"rhs]]߼"*73n3٩: _n Ǯc/4%&o܄ ݼEY:~BPQ>"LU1 ix`؟)]SyPvDxHsM1"oCRNb4Q ߳Iy# i?"AHh%)Ko(f`d#;-Ȓչ}~} jHO5gU8܅>)W SۗO̯%?'DIs?Q3~BlI0oe?)8y>y=c0ZnQaGzee{iI%̢J/݋gBZf!M x'>oH5FD#Tc[FhAolrƯSk)ab*qy.L DAnY *%Fcp%=ondi 𔄵HludR&5ARxY-Ho`ԕ,#UK$y;bS1  t/AnyD]kdA ZwN K,OiKhuk޶%ĸG($` 󲖡&WZ Si+GLEj +D :l篋Y6'X*;NWt83uۗJŐ $wao\FZr$@"Hmh܎sxm-a{Z"3킜^?^}4&^CpŚٝ-͟Tom{6|flX2ȣyV j6m { ` 4PU!Qi|<ɂ_W%lX+!# Efrm*K)sxcEwٹG:op(Aw4Ԑ͵8cG^ #-@Q7fF 4O \?vG 7᲏Z/:!r`+j. ֛-cy]|@#ڪ=\F;.$&8HYcǖ\wjwވbOmD엺L?%NaQP00|O>8rBB\y!G6NBy3)dnHzj Lr:(?)7~OJ `P6ƪ91亲jCdSMus1p3ɞU@ v$Cm#!=oi3m3ܿ!HeKWN$$%2tG [rU}(d=8vZۧ*%' O~ڃVAq@#>~ǥ.)w.,vg*u^e JاЃ3o&0Ei:)a иm_fFJғrBJbVmMA%L?Ky/ATQiKT]UB\ƹq  I ;i@=3G !Z/p\2M̌wSUj{υR{si$,T凃y4yWpǐicڣi%/qJlɁ)V@cq(?7~rxдC^"^.0#,eke6~jp+| HU"xO `=RФŇ)kۨ]A0{j:uTl]S|ݟJ{Z@d΍@KI[L-uYk `'U̹njo~Zvk Y%o'v9w3X]Zd?ji a@8@ߨZN#%[; CXg8aGRN/tXI9vY6%j8⪴eBa( 0란FlYui[`)tH^-;^㶵 Drw*qHS>sӉ~;zRxދE}]ʥB?|x 8z>gZ؀b)cB03BǏL| %0:*4a?%ρjC#uOrCJ7Ld٠`L=>"ןF @\ D:פ|f-Em񁻘0&9X=^X΂t#!ǚ\9 q-X1̹ν;Vz1n$ ̗>þKZqeE!1~`_O$1fU]O| )K\4t5$kވDhDEؓͧTŬe-\;R[7O }mMR\2{C _c`\lB;sȵ{½ܣHELᇗ@p'u{4T!Gb;8)^ͬ_W=ɡS8to6eqۺos4%<&R&߹#vx1E޸V_\q?rKn期P.']Hp?}S ' |q/|RUDV\sD-@`M !mB)qh{Y1:CpU/ϜՆg쫾VюP٠H?6f0|"ΉyK+ŏf3aKdaⷾ62tWˏziD%(P-O7Ɠ܆@PIǜ'K+Jgt 50yA96?`pPqC`;yOƖԑxD#*FG@K1[+]ȁ'OMݬN/~|1`c.dsqy7' 6Cbn6uvLp;jM.'L9|2sT%&Y{㻅/Ίa[Ik,tLH Wp[ Nqr=کI{%6 ;aq]iاG}㦁ܞ* .%ͤhmE KrfMdvO-cfVА,W3)v<JAQ+w чc M*bAq`|qalqg7&lA}!Tĸŕp@%˸\JѦ4$l `'CibP@[BF^pkZ?uɼ@ՖZW6cM\>HRS_E3st$Anںd.4!nŘQHA}֓B}}2^WsvmKĸ꿨+/E _)| ɺ}6FIvp\=iQS)Z\E# \{.Mt.L 3nVЩo zنe. s rj 0Av㑓l3jBT0y3>1fRVA鼷KQOV On-9hr I^ӶE~?AVl-8w6 J*J]O5JT[849}x)u5% bq _9c*OiECOI_Yɻ|[!]ј(/0G~]vntye04;! rNj F KG=GLmY]8'Ħc?=ܟ ( K\ ѲF.HT{pnKaƄM9K;?(?vcAq! қ@0]fCX@ۺTS"*A7O"UGGO.JJg#4A}"C#( e`Ih&OT;ZǬKIUJ/.W ck~?Re_z7kH2uN̄畲4:Qe%*+AtʌbgOb(@3^aILM#-*EPe]`HDr. a&KB̑Vw:I)"a^dwSG ̐N-etbI]EnR'[we~㐅Up,344U]VG*[5SB:z JPi1[J*Im ڵΊ7RS:X`;/xp{"#ƞb^dm v]KzqK)\ӞC3A9@_1'=|Ln ݱ2K8eșBG[AG>-re23gd_fnŢ9ē\tC# s JT(rAȹsqP1|a\&sAKNIZK?x"NUSSvWSs6ULP*J _:s&& }ǽ'xq~3!x!bN\=eⲿD9(H#o4@X99&:w5z-FdكDi0M>L1PM\ՉB S*' .a9 Fg.XkcWўZRiu1̟723T1(o5Q$c&Mt_)T|)=l#bwbLl'7 ïu.rtXFfLϦ)&?e+9QSmI ^6tφ>ҕ~c.E:~G5'ʉ H,CF_l/96zٜ- 8h4,lԥxNp]@ ]˲bFJDɛIsF*Mp`8䴀E[яFӿd>h]cTd>8OcZsCP%ݘU<,r $rP9H,.'l]',dwԤu0wP,}ےnVBӸ+-y\Ev8(OE$=1DF waT>i |ZsSwY_EPxrNAE?/*fhM!ү-i&&qXKEE c{]6O\W-rծW$DႶ)O9j[/k$jd(ZaONdD)үZ Sre 8xfd2XԆ 2wxf m|lbw;']?1Q;&S(@zB CbYw7u+ɤY8M_TcW Xhw&̖^7d8_O񄒄UO Uj]{ Տt>}q5oS1Xx&癞SQK Y!@iUr&d^붟-{>O#ԙԡ:eC ckhR7۩5$ ?.XL~[Vj])yx$Z.=*To ]|vJѭ l{y)*8xE^@}e [jdIJLGy57W ɲB%:KR<OS?*0k@*r(ldq+DMTP~Þ4~m'§Y_:( 1 :[OiaV%'ur5zڊcIsͿzH!lZƶwsFGRG]dmh$E!!) J#*эX_ۃ՗LgH;@Τz9!yU",uW.g? HA*C B?haf e=vQJ38>nݠdęoPe[Sg,O t1ϤlWpM=yB܅Gŗ,ѓSLK fkKAltj=I7i\ğK)^ N21*$U3Do~aŵgFki2[gA \VJ5DE=@|4C _kUܼw4hMVXD,_V YgK{'@(`0'wu}юa~_J{A\`!}^sڿx9E;&Vk椴^Fimdd hT4ڱB&u3#uњ R:AR+SۙOSWGl'G-ս+z [:F'4HHW%&<Ut#PXE Z9sJg'm"' |@ H%_7G ܠM1^FU]5S E~rH &s8<? &uuZt6]9H#%bNn=@xI$ϩUSa%/#qv}L:\]%E1Nk4b.2!t2-эXBB=eiӶzE[Ҋ]P PEZ,(1`#޵zX`lpQ7jةc2,-l QM8bJY+UmNйiˇ䤵Q'x":E6E^յO 1OB[OmkgIe:`:c9ce" \A=BΊЗa+0%,PpZFRj^W8| *fBLmX{v YM,ɽmOܙ!+;c:fm_y˶40gH+YWyoRDVJQ]O""Kk2$d B;]ZS~ Eʺ?# |@G4=[gm2R|Io}I}c"|0ٙ¶!,4Nkm00\k6y~Yy!+ ܏S{Auq%.hoV4ͱʍ"/:udhin&&Jd^͚4te꿝D xzpdNP9%+ūXɳ. +fUY0ʉZ-3)deWrN?T`kw f~C.҂[LQ͗ R£#%nF%mʍuoϑ@7ۥ"q JCv::Zep7yk(n;HR,O[ŵniq%I+&,֐}:ƣjdZ_ hwT 8Oo7蕸6M>pM:k Jf1i1-zv&;Ѥ o%tb+ Bpj|ctܡ=A}@ ZS <-_2d)|T ]eYGϪ ņ\!{p%uI0TxȥQZB0 {\~EO`#O)Xh8`lO_'QQbyJF).PT: 5gr_[;+$ݍ@SKSaI }hKxwP|NJwE );:E+8#}+MӰ#&|ʉw넋*0rt=B b hvzq,8 3o>r>֩H*e_ >:w<ʢy?`'uR(xs-ArS|GBɛ's46^?Z3H◲wv$ÍO:6~iVίa ]& ax#K#vq؀e O!ʔrf(W}mHHɑg**!r|vWmyl4eUyQ´4E@ 2L%E{Է t}6(gtN+w̫՞hS-\Rl"~*lVt 0730}"6+`H91v ~<兼VNu/J;5X8NouǶcOZ) NdH e6P8%)VO!Z.{r#y#؎2rt.$[``i M:04nn,IyaQí 5)!q@ _%>V yo㟚rk9YLmWlh1;\w3AF'bi_遢^khN&drM's8.L0fK%\t縉cM=vgK.J&ÒAPg,یwnZ>#:t; ϩ[Nֳ1dojA _郢Y:ݺ8*m:P'fH3u&;i+qM7RV1lYzP5tVձa;WRfHzw5\vriN#G aUв܊$!m/%Q̬a`qb+gi摘)ǬhASoȬ;s&@7V? X)\$_}PF*@Wxu˥g͂aTgs W\G;L^"'_#:ityhvgLc_ -ʥ*0Wf,cgIK͈2,q6!:@l얱-ƅnɶt,m!t hr3/E3&rY+AMJ\ыaJ@-ϔ%{fN;#fŹŤd'AX ߓlkmR r9bzNƪcqH Bt.=gK ݝov t`RaGB?[ysqu> |}4vj$`q:' QxBR;dEG-o<3)vw;޷]%8((p}ݯNo9* V%.x L}qژ:{VFE-m<j~Y|Bu] kK9xxxpLF x؞ڸPEu:oRM5ROV7;Pu<pV|W*jP%zq"8/s^W>MHt*+@7cv5n%enV3O"ͷ~}? 'u֣b6Z{?xt^ 2羶6i~25,Zij#h*}]7E\s&Cj2@:+ChݙJm&DiD֙ap]e&l!Y(}'Q]U`=i:FʄKY0[؃' RK͠KH0. SpNRS|uTnE]?buIڨ강fqA3_YBʗBimp1HOQ-3=ybAQ@)jBn@CeA7D2BtʢqO@+,PJLLTeк TT'-&@3sqK"S`anz'J|`UR=^K4!\EvɁU8Jc<[{L_aW|"@sC`AETT fiŹ_)2*N`8$Es^]žayr[_$ G_o f:*U=zm{ۃP|0Au:ߞ'B|ؙx=D0H+DaVe!OC#H'Ci?8"N?b$5S"#05Pv<\@~T/YMuS.X(H )U'|͸F#>驹xX,dѫy[AX3Fe 9*1 /[1tk\ AjSeS#' ^X2aC9]пFdei:0mhq )Rum"G^mE닫|×R{( څԕV{ڄ^,vc¥?' 8>ƒK}0DU:Fp'0~/pgTJ)pF6les渓mϮ̎dbEiG.7_*Ɠ]0 H=f8|C!բ&;* DYx-O[r>TG l&"A}>aAM€١c$têMڍݧH=#QL\"h^R@ZZn-k뀍ԒtݩW>| `Ex‹e`[P9"vaŹJe>Vw{\N?c7KrDIHKVqD"8}W!%4oG2 )ll-,sVtXM D *ʑ/%hk #Ǣkh_igl8u-Ǣ@(0FS!K ǣ[ >fRu2bBz hZH"&Wԗ/݄NG!#4M>qj=Bg@la4?`c:9.[a11o&8OOP p Z""ZiUf x%|0BA7ßY-#^jO}l`=,?D IZ3fft*YRVG܍oj7ҞL{yw^  3K#(DI|ObM^ _Vy \RUJ{Z^wkxЕM.C Bs ꫂ"0]͇1 )~|C9c-=՜sikP(S)10n"= 6Pڈj\ˏ\NAta#:!NfCc}(̸`YB6dE/h C2ה;$@r1*-/ a1$[? .|RyO94W[ٻhUIu?؊0\,ʮhߍE˖t(R #HQ/|W [`%EVi+NRl39o$Y \7{ gz|W>Z P p'dVu$泦V,˥YpRDZ hbW OJ!YżXSDekmXam"TKK|J0P\LkݚLjۖS}|w_Щ* e5B@Axךd*RA$a>Q#1ETyvZ Mӡ6-Tf%v~SsBRo,UBY0N— C%V ޻acrY"<5@oe)qi\\) QX.ß=Wbf펵BǷy':> &KiIAk?'&Ul=E,q7Yf2mmbb<MՇBl%'%󂿾t@S'2n,go!6Y3aNI5@J%Ⱥ񢖷TiW{0;-0ʋi6E&QSdF6z !j r+avG۠EԷzrc U{"`_#*vd۩c@n8ʔC>f}鬳?Ƕ׎9ŗ4׿C 98XeXA0EaHY!k|rqL49^Q=r ů2C j1n.}>;_s=&WTNR"eL# R񡜛gx {8 n0nVB2T$>pFDkFTw_`)et"DQ6*qEi77ͮG*%0Wo39bЪxETϢ> e#@C7ߔşL Bᠣ nTUTRRl?&][b2^Ӣ$7S5p{<"tUEރ-{'n%a?;P sd|"PǩIw 1b0lXbQ cZqk" ʲ߈nqv?XucsϻtD:+>:IUP[f kw(=nm n'+Y860,u{~xٟ+A2\{$Q> /NdNX' ^YUdF[U% ݼbbYImpj}F[(96?ؑt0j34М-G0IP Ցz?;O- )Fo3 N=84da) ݽՆ $`H|blߌG9s4| hn^ܮI'2VG?+Zף\P13Ҏu˝M3v'Ic)+QpOn|Sd 'xO٨ټM&2'g/>*.ߛ8l{e ¿d;ݧ_iݖ}azC̲AH@RPN|1ő f}ZHh\}%X:9,qГ{&ATPGF8:g/\kU*=( rHAu%IMR%q}Je(0AY!r-l wk 3biAcdh8?-J0JX+&nXwepJx]]n=6J*01 퓭// _kri A$;о ETE`BOKtMSeU&gk åԢWi?2X[G7D^XD#FiF ug¹H~IΞQǩC $f] sEIȗmw 3|5Mۭ62heT%/Hvj\Mg'SJo KˎZIVl wsoonl<քlknk K:,Əp7^4VQ_wmt*b8}nlHzo"9@,h,)ˢT\ l0U*Mq x^.`9,jKTFaKȮ>kpRjۘ>{ߛ:AyH>ס]C耲(V|y6eBPh9$/H;xK|Őu=PVLRGEnϾJxZEJ8emNՈ}CPyms/(r4Gsi7IÙ`-5mwn򆁎cl*I$$_zב~I)G'u_Aѥd!i2$3e\]Ȱ1-xxȴۖ_ _BBB/۹<#'$6EZnҋ_&oD?Yl~ΠeGoWۺKWu/ŗ&V%(Jkyb,B=t;_b_^9t+ 3SS2`EXyvztS~GyT1;ÞNw;ك:vV ;F##LϲTJDR xmPPORhfTz(T'M}KBz_M?7CB>%fHuGL쏑QKy, 0F[OR^߳KVbƃ= _(zU݋I,_`X{9kFU¦8WȌDnȩ~-Ka8C_uHdlM]Lr72pxV!|ۈ6ҞSUѪ}_Y>c uvcS0=C<Ijc5Bja;@N sw:> c('U.-Lu>A6m ۂO# '&kYWChH>} x$ӷ=RMh(aMky̸l*G譭}E4zXGB"8`ʛۙs-Zx*9:E87a02U<@W0PGgz9EY;zYFl+R_rDPL+cp6bMưii3$(fR+ۀK<$4DZy֞qքlfbqh/&̠V9g)|fV$A9|@[,m_ar~襪9hnV>j/R< F=4/%gN-}ۼ} g=P]KfO~ihPeTوH+gj6+9JlAwl鴃`:wɛ Az}\%=SX|++Yϛ91#g h\LY WtT҆*$ +(͍t2X,!I'\慣MI1_" ho[U;WQ҇#/l'MфK '~!8*3} z;46੨F*3'q@|QaRd8tjd&0笇 J!7JϲVpggTϺ q Zt\y`#D7q&!d.ǔv Xmfg®tBZDHS87!7* 4U HOIQD8ٜ-C` p4˺y/nDX%,: g2l9 mCqʗ>5œt4vdrLzS]䦼TBpyǻl+9HњŧPW\/{Ic*` EuG%pWez=^$-4>k%`Wʀ-I& $BaZuCWNNmZ+L>W=vX?OQ֨ۼd3k{*6UC6d;K}s7B:4.\D ザrڙCn$& H+:Y \z,0d`ŃUȝKvSNF Yߌ`;oLDeKp"*vk  N?T.~ Hͺٓs$zda*TybW 0,j.Y'wQsF:J w*Įg1<*g?TeV[)f&ߨ&Tu[Op ~xIyc h̜te dw7Nj*\gm0^-򷻧Z^/GK: hTߊZjoAf ߱)@Fz$~'cOWGyJHAD%^QבOPLf0MݏxT=2pI`rL?{03*< oՄLxc0& ̠y+ܼ&䠓p ŽtCg1ewB]t]q:VE% =h`6/OÓ+S zî?6[A2Hn/5OOТפHmB;3CRm1"\mW5FLUt( ;ֳ$}[XZv*D1e {7bTur˓Bqy? \;y!@/3)o%sǶ3۳EpE$pDȵ|lʲ? 7eMlɑzk<p[21Pk+~deN{ kwh8L&u)t=P^P|aMB=D {rj>MJkT]kOԏxxQ(7 |(Tt ճL(2.\/Xwr nd?µiíU%=Y]k2H}ʹg?̴5 ٰy- ?bMiP3$Iz}Pac1 U ,0j܆FZD4bBN`9jdtBG=^h_-3 Cذ(Дw IJjP6㻻ȎSR $1糊 4@K";ٍwPwp$ 2ܵҷP5p,VaNuV!\.ww|Չy?ԝuc5 x lxHʨP .'!i h`W v6!!?Ɉ$_9ZB79#sK;+V`$K9]B>mB8G&~DhsyhtMJ>~Xh;c&HOw2a.R 2>"e.1Wy | 骚 1|/Di4ҒV}F,(گ=LlXiR$\oɥ9drFC+!JI*mFc(6N|L!kxi M(tK%^>4X"r$}m ɨYayGo Yy۷F~;?znHWrj: ̑oN8NˆZf@x e-肋ʈ @*RhFɀV 1m &egU^ &ytmvmyw~F*1:"zpS~D&<H1|[YD-3|ƈyY)$c_~%Հ@ʷ,l }s*Ѳ4MoWI,нxӲjX!𩫒VkZF1g-c`6f's͘ (\w{hڇt8 $Tj+/?Y0}xLXSX_'?mn=Y†'S w1}1!OɾA<{c֨6t GpO}^[&ʧzr-:\kaoMZJ9$ ߥ##P:+ ңOA'lysX+~t7̎\hx26"Y6ċQcbТ?-@F+spA*=CZfҧk II0a}.ʹ{:nٟ/GJ@ݴ֑?CȆpVoOZ1,*E-};g$:df9gn6H8i$?/;Ol1Di٭"<|&:${-KN(ؕGc,Zn͍  %O-KWroQtgGTc\MV20:6'FJR)]: O4YTXˮJN;!ngL"LzyM% Y4y;COPEn&ʮi1N{PZz3~Gzƃ F-`1 0un,(\rvm,\^|v;7~6KQY^ו!;1HuEʹ6!QKy8}$P%^ʊL >HDVyn !8"%ApI#F9[l. d|e;Y0l dL)ͺ+3O9̙xB/[T5'};"TdA5~ }an-n jÍFO7[\mZ00 O/z%F-.>?.!vkU0_Y'u t.ryU-~bFh`Aqś3QR//Zޚwp -vzYλEL㩑sg v}z56ҟ~n#=Jg|Y+RBm,􎹦%%nea<"|4^܄%SoQ×­C"D!SS;nX$FWxV,'WV ! Ph,9>̘p)e-vP^+YEww&1jBw3D 8J'XxSF_m8]gJSGRX)<T3`Pj{/|Cȇ^SxB޷%M%o&U -4R TP8|߉y9?~a~hcr4,3Ơs25"_i<fcOk=F-X^ʹM6z b!J{!B;w/:zi;y_^#Ż z3QnǫJDt{5Wl$3qԴ[ߧB%G#:y+=hR8@!aHm_@rv,U5SQ$l~[CrYr Z_+ HaKX]aUf]-o ;E\;O˄wr0׆,1LV7ÉaLfJn]b_1N^PXJF0l.Mۚ ,AWJ]_!3 NOyPdI7c ]a kZKSGY9b>(p̘:2tA8 y+9Dj\z[)a^-tiz+v/"=i_)*t]fh.RK帚wcvΖ;W'Ym?X*Z!|<9V61-'1 ِCM~J$X+Wgq8TbL5T*|OO0K=Ktp;Ɲaa n l[mH2l|WHیRw W:h[֖~A/>4$~%I; MK;:dSvoG4"B6B }0kTɋGߗOv V74>PȲmyx=J'9 j]{mW؉k͏XS#x]t#aDJW;L|R1 j<-|F&{_t(XqX8=p-G"Xphң̩1QC&J-*\jHg)l6;9w*e3 8{h( 3U3탸&sx F`X.c+~UTmlkc`B&]<(!|xn%ᒵ6D,]!։/&ئ%e^O5=jE5 I{[ (TW"PqIBA}ԧR.ŁS*2۲ - 7jpq/ YpaG[] V; J喯q/_Hkp p|me=wYƍaޖ U9

ZSp+ʫyCR̰pǼ pJiWPvƫ\|8sO;ooP.[ߧǣ9y_ oW 5hsfBqb~SafV T2Km\%ARNg)6_q]`!9TϼH킻r ۭվBlΫ~&-ݒfQ;0s"c. [~8k &8c83yHDjD% jHA ^Jh;GtNmnt.A~ {MiFJãtښQzש #}3|·b2-L3ڟJ:VsJ2k O$WZYRqB?M%6y;"QdvNӱRp}o&4k}M\`~3#k, ATc;-*JߦWy NqDlLobȨF6_FKuAs~?~lpph U6v69=b}O5凿W}AnAqI {Z2 1j"UߪzjOIQ ]!/|]MJ "yV8vᎍ&M@&}`ɏ[K\c4o7}@+2uzdq0'Zʃ!{=[,F++"-Խ3R4 9:m7D2U4gn"4szܕEXRMb*3SA\l%y׬*^@ wdTu. $۷(`Ï(kn| 1v<+ш|S ,op}Qqci$潬  @XMf##05u$y2zGO:֜?kTJ3$V⻶u_@g5Xn$JTQZ%D:KuǨ'dvE5jiq:Z dk{tO! 7fhN6Zc>S @lyՠ"ՙm x0\Ж?$eI *! $ a:Ad%j4vm$RgRŇQ :*\9 G63AݙnrqCz/Q\>7ia7ךC'Qp,ob*7@Ez2:S3+^;_UkجaF4.jdiloنD:"Q^"31h_Oa. OYޯE_}qYJw[%HfL %0h{2®'Rd^=nF]Gy/ Ԥ0!̻J&SF1)d%;!iU˷v?!yh$=]hvN #9c=1ݪ60JH+׆#@oa&$ox%mHWt >/AN[4~s 4hV5j},0O݊>~^Y:Sri3[ C%.an:!ў G m)H,g|bfn4<~yHUjEo!_4 VFIyDF+oC.o0oȰ4,~|6veRdԿ#k;l Ys#؋0(F&(үC@Q&?ED ö4["էtIEl&^s \uy h2@8!x1kw5KFК+ITWwǺ>$C|.8r#ՒhB|͑u~01ah}LڢZw,|̣oDSY&EHNj6;5'|MdQgu ц:RQǬL4:t+( h% ҒJ 0ŰP1QVI҅͞?ƞY(}Ij*8iy«Ee<9pnS?U9ayGb \lZHTwO"I_wFS&* R=i'q~xUd$uJ rg_fLpnkL0^Qy61krqMaT܅ǡ>\m#q|EӉQk썺L&^g_ԤIoQ{:K-sPظkrѹ#-⎿Ά2d6P}DGL|PfzWCF`?b~ǟ]/<H-v0ppŵ!!EG UTIչH=ŞG`"')XlSfɲ7e ȩLۿiN>vJmpE{{E?ZA[sqA(b>;bRQ4Q,vK=3$aq]N!"@@/ZP;g9'oOYWP?0׊)p%c\]A!:JMf"OvwDClo`̰b>%J@,46&Dx s;ħ :eGxii?XoD, @^62_%$t~9DT؛|aXpa 06>`moFgVuRhٸAG ~d4(YoU̇qhb ;Z[:I2믾 E-°8M B ~7><;aX-JH(8X<ϝ%n+ٔǝJ]>4hoIY-bC^ufW?/'FL L BqPw)k6{O'kfըc([g=nw (zǿ%cKXҬheAy҅}I٠V֗~/On.cv_,=3v8к;ԟ;|K):0M^?p6T a7nM!χ<-IVE˦9XJgtgK,9xu ¶TY;@=#? }-{FF\x!r:2w;0/M{UڞӄGg-ʕFZ. >gWn}=cvh296Z=ScwG?| 3\11,l$=^ͷ.kC*Yޯyτ̨6nby' ~U(UQ2Q8m)30fpEfX݅AMJaKscuzu+)%X$Sgܾښ';ǥ4JAi ( vl&ׂE6:sc-Ɇ]Ͻ&/;fm 8}.{}Xuc8ғy FA;ˆ$rDwvΤrq3 Ux/=aם=>rtxݖW3)4_>)B]i0blVvFBjCsEVgIF LGsm#lzk/ QL'x("`#r:;?3wQzr|xw vvF3:=4љn?ݣM.DI0i Iiqi@9BjJRJ[EhMU1f]HOh-@[Fo}7@V`Ú֠e4\4m8#{<;M(,`|B^q3 o %괿b34?ʅxzXt[q} 1ȈYP}^3C_ܒRZ;!%jDsŘT1Ӈ''Ⴣ_̰,6cD2K2NmIѴcN,ֱ]M _)#'- > &:Xʍoى&1B ݫgT< ɡr?6;D4Rݠʎ*͘T_SRG#[`I4GI71ǬL5}u ~ѵᐁ &8Fcoyi _#ۃOmSInh <1Gi; ; .UɤCm +P۠ {S%ʺ#ҽwѭ]j+,sdtlL+hTK"@ҐCrIqYq8> Bßf06_.]99Y$@DZU,"Jnϧp 3=lL9š9 |#65! R U!UC|y+rhOx=+FGDdiloƕ&A xhŞjs=wʺu&"=b`ZP jkbV]B 4yF};*~9a=X-Ѵ r/[ ~Ѫw0-yx="BhI!UM}N_*xh! 쩒c]0!Dn'Wz)Gbz0oaY:(ltj2+b1SIytn[^DzKy侉tkW=Ydgc]v WYҬ{nrapsJtZ_$1qWqJ})&q\υT~kg'v65HuI +.%!Խ6=w U*6A-NKѺӞGJ_JIN,OOcy/D`l\n~4V%-iLITXj@v!%`,95.ocAuӿ;܎1$y7H_(?\-%krix}oXEB*:y5NQ0e<, |&>]mGCe *iS>sʮGqo֮.| -82%=kS ė%Us>AaiF&}yvv9&TIˆѷ yV>xk~"ǶPuӐ-[_{ fA.!y{VfјHwJ{3I뎶I~!*{=HAK7-Yj׍ȏl>+S3sGW3֙Lvա75[ꗦj>Rb#EO#vſ %{/nҰfKzT@xGi *;$4z,=+Dk\hp5_ ?$)tU!®s0oW҇br׺1Z)4-|b3+Bǭ2o%q;S]n>ns% YѡCs6WHM]ַSv[7%7&f D7?0qtnk8V؄zE\ẍ́+欦 [t䡜WWQwG RA\3)gM%VsrltV(c.I'dI.$ҴKc.Ayٖ4ٶ=or?l[,~FG 䕾Yt\ f{z[M@Ĝ=WVkrHD g+򨄵24#j{h_$_V2A6v (M GN0ʦK.P=nlj(u>Vm 8{`+O(=m \5Q/޸;mhV59ȢML"0!ZR9`py2p ĆCWg< m-jES/H`mޗ5(Ѧ|p nr:2z6\6Xs:_u7s˜0$5/YdIi0 3Y'~(_t׺,1A=G"NHρLzj%]\Q 5`M6Mnw-#n[m#.G@}/ (x0S -uR5XP.3'\hD-iihWr `z7KFsVG87  `+%,gG0 I?7r>OcuGnC"ѭq|l 2.%kѦLjm}L+g]ՁA)%BpU}M"m`"[Ё/ZQ@Lix|:wrN1B5ǍN/zv[_ q]x%pX0Uz E;NoдSc}CIo9qZ{žMEc2Z]oZ K#b#ѳ]NJ& ] ܯ~v9^zhvu _}bTEDxj4t:|ŴPU 3\fPV2O%VߥLo~=a%}o M]~L* s3Z`V&k;T |*S+ ׉ G n8" 4 m @Sj ;xP5Eh0* %) FCYZ^׼H!& bFa&؄#tHޕ"_)2x4[xWs<{IԴRR u3-_$fPR$zklг0'T́(QFΑDOH猩P!e}-pA2z;GK KM)ѴupWpp^I;~unWƬa ҨڵV6<'S"MtG:jfvBچ}-I .W"(S!vm ^k焍Y\X/Io\ G ~6c{_PNDI>ckI:DoyEFq$l#d7OUإ wݿ`fL?kSwL4/*$Ȝ>fs)]C,*gXy.*(Vߑq&y%Z<`/)>LP$Qpy! lF@#=}1ftgO#cirvzqfuYեOhxL+d~|k2b'Rz"Cc ʐۊ!SU>' zeYq_3F=' Cv_nʬ̰L myZP9kcƗ\;k0fz!$9㴓!B &d =a_8?/=dNctgAN"BӸ޴c(蕅Xد?,@~yHUm Y Kʐ (l~_CUM+>PM]VW'l1ڮE9>d4.KW|ݒxϘgB!}m/ ZԂXv>/b^ݛgu;pj?Gc3uU_^;ݧ3s.A[aY0>޻"M#Ao8VmJč:rJ1x SePҩ@%vxj]ZukwQ`i?7j+%a, r(ħfGɦ.SO16zgWGɴdL,"Vuv/ r%1rwJcd2tPc[R͍}³"Wis%||[oY6@0LPtwkόXHٶ83sdv0{*!4 |X\#>Q }&b &~6a "fH>q.#ϞҨ-ח4%j*惤&R4 㥃3zQ[o_ GÞ؍c;Y_ \ 1Y0#n0 S$$HwlScD#gga2Oj]; ¶nl{Mx!|Z2ͬs?6djA­_%0| *8|sy@n b2m7z06T14H-?Wecg;FVoIc% -N30yuӣ;0 h4 .j+ nق!K;.r~U ˖4'-A &2U"UvA5u9x5ZX1l֢鵰ZX5TjFxCF#SNp˛fy XF{uEu6$wW%Xݡ1_{8B%\Zǩ;%F]0:v0S]<(w$- s'JP+EH%U,"d%Q*BP-kcmu3`\fWL650 )PBX+"G$\ i3ܠ^]Hhi^XyB1;*x 1y1x{I(8mV{':2G.?WA9*/3joBb$b3iͣ:f Q4g[*5L8|vU(6Q悒ID`1HeWUX<&EJUEʊpXetpoSؙx }?V˞@%LGz4tl# #VT^dm5[ש(vj|ΦJa˵;JfN&$n#6: 1=GfoB&z->4LUxF'$p=~Q8fTH8/wKKWP5U Bz }ALBWQjm{ou4 |_^1kcYQ!`8^ )w&*vyGR91&_$"~Ch,(.'Jg^N8ޯlcd9[sb(rO 3Xz @-1!PKAy!~]$)ݦGiȊ:K̞h:PP;CVr y(g-)BjbN 䭣C1gY J5]w?}G')adt=km<_N/&>y4SnK:n^ xO+_" 2i|';0jP*ٌ({ʓ=p|Z.2~5kR&q&C2f3{gD5$[ ᐐ4yjG ե[0$:lB?}{>|a-+!i0a#{6c CgʸEcM^Z6Z#S׏Fg v1J2,0ޟ:bH&Aihx`um?Lz/E`T:&Ҟ1i8QRqqW2<{ ) W{oMfȷ{U ݾ5]^Ϟ1S.%&DInZĎ+!N +J"u] @|4:Ҟ*t|*盰Eod=Rx~֧T![ݓu -е;MVbJ946~]O}^ZT@TzE9{G~@ɧJb'p^dvK4ircw䜲wJL "(H,Zj j !XS2Q*Lb vwU_%-_>/F+eCCA2ޞPrZ J4qN^G`^UMY#"1c[.^jb OCTHF9;I1!ms?!!4I6W;i&Z. uPeTJ^U)̝"S6CL7 FgU<҂01y}XV<3=79@jOeMNW4v,S\// (Y@6~Tji!Q2ُ,v`0}ԕVqK#p! K a\gї< GLDlsD&hk@{;N"Z( .%)8od|FΛ/ <$ 泎hC V*MB,߼-nyگFə(hvP/ 24{$_itV SooCg͢KWv_g*k 6]>tDP2D#pśU5Sp &u9UzyHHu'[ *sn"f4tu@dF]W.`edЉcEI RC"fA$z'iӜٲXO=9yUr ‚M޽\,p .$ǮR`d9M:f(vDF/kRiDzya? >*уSC'\`0r Zᐁ1`d‚YDؼ ¤ϳ/_LM{ i21?Fz3!7ϠZgjOTw|6v>7;8R'/Н^wc\7XZ6W4TәАPuv+*HPC T%˰?My՞s9`iqn1%c(-L# OkA q$I) :(#lNQ'd½5s.8#,2b"ؽ>oI |Ve=-mf$$ D!>.L?0dCf|. XE.F· 8oQPV5pb42$oc|ZJ` ^fK$m 0[uh{27i)|_ ydvvws$`, }uy%+KlsKrKxC;LO,8LD:/?}kcLY 'ѭ.W6(4xm+9xs{0`6g2.hdw~0Ovc^rQASJ?EԐz ;[1vP{gCUz s:.)ã BłԊ| 3\E/4\Ηzirly*I Y%-{&Y{vIzD?cTF'w?38 Tv&vEc Tq|V1Ƹ-Yq9hC MC~ռ$VC=Oea~*A;^)K~agZ,Mc~L^  ‰-d4]Z$u  6KZ`YX24e՛H߈N!rç@ڤBG-35fZz?jky}$M|\1p'+Q '~7"4h7W;&K  ,N,pIs$??c^쉛-u ]B럼Bg-W 7:͸"wx tu׷F\ yE bgoȒ7av3Lg|i% ok|B7MAǞu"3݂p1m1*A/g1'FFuplr' _Mwõ mzd:s jC('wDC07eC-lӤ?aA LJ ~ Gv \FJ'P#@.FAN"+49V/d6(#*x51Z6q)Zp&w b4 i lQۘ=w:_a!ѥA,oz4D茉zl$4%SsB.4^a#1ƲGt {<:,:=n^Oߞ{ȏ/zN:pQ/K3f (14,h0!j&K?B5i+qn~ FZS9{SW8YJ_ѡw E?8SSx-HB v= 1%"Gpky}E)Ͳ$\KP HQGw:F.('tLq fc}mvk^?ެ(@gTT9n!{?I艈jqfLxa-fwc>织R3-NǺ%s͝fAps0ތ C6\D(T29+z0]^"f`jť~1 -"h+IXxOWXZoܶlp _4wN(%vIw6/)Y[{NhZbʢֻx>PPz7?Wtfv90tla˕} ZeabqڂҒ|o~ -ګ_a ClHm*Y$Ӎ! Q3RwlFŖo.U[ẼPT2Zp!_K}Sҩ^nja~K%KA7 DwA"%UuV.Md|6c;p M k|+"(A$n&?~gD⑊1Fj ݺi{3t&4H!S:Цׇ'>i-D?ZDTI:ᡆ("aMqޜϙPI–Lݷᵼj2LўZ)5ˀzL%@w~|"}42쿪.|iU*oBE \n9 d+> 8i]^MATRAS1_$`;;g8\Yӭ2yo(Ȫr =]E1cjQL>/Tlˎk6 ,6oHgq zV#}uW#}1_1b ]1e%=!ߜNu(ooEH@5[B@Ns{:T6Sv^EYoxtPTȕ-%4!~30_(Vه`)bmy:-V`n6&4c}KЭI+Ǐ "cy !,d8e@oj | OyڋJJTSe#wB/OT'Z:Y{%isLwEuZ}YI@I"fWaj@Ot):/=ʆ6طoq4yYH= {Ag髤AF"GU~`%p~as)B=Y {A u+vPC> _<+B{_ˑ1M vJohH5l:\$ yǕ4;6-JDh&"u$\)@(wEYhAمfºQn&rӳtpo@ %3TrU|8B3xGS$_)0VjsG(~ЎWaCzVЃֺB]c y|I[̑Q<,"A-Iu3]e} P#w$+-Fb k(;j\P9[x%DNUt-Z/"+4P亩)xyf¨[>* ޕdO Q -:TjJ_ׅmyXˎg16D!O ?S  2Vt$# 0`ӊC|?|KV-E?J؄P3ci[ҕJ™ꈮ|dKRNvտ*QW?!H' Ri 4 aV w \+zʒx&8HLt4յf?WW. _i(gg{`L@O=~-BD8>c#yrƓ`OL jPQi >2mhJ̌Seb;5lv] J+|P^q/Q4!gjBćNXL#V"Wgq>jE-^p2]<4Eeuvd{7^&9T_8ۓ-qah T&; Uu!Lm{4NCXe!%YkW Tk!( 9&U hLXxM0-} q|@GgR z!DPf)ݤVhꈮQU4ڊb1X%1:RLt)FOrC= H0X.:OV,dq:%|w9(c껽ʊ_Iy;킕hZ: ~GeN;Z~+#Λj>Lf@a4gkn`\%$Ё,@m WL oLuhpFN/yej#p *GvkᇯmoPCE%?I2e  ȩM4Y=rIh" Aܵn4ɼ"FL'-WϢ[Pmf$i͌VPǟ M 2//_Gjx@jǻ8Ӓ:ww7nǿGCpbۆ`%W)`t (8X\~o%Xۧw142lx@Hs3,O-WbPaTu\E|&&];Sw "/Κu;*L}tҔ5ш+;-JknʽzT!_f]UxNi^Q8 |$^- Ccc&‡ [ JUOb! c벻| z^6;1 %CMHc`93gA/8eqrbN!miDBq8 8 "9WeFČ3Eq'c/E־h5 /J? UeCph\]JzL_Rf~*K`nǡnF9[Uu|B37~GT?bg|c (?S(̞`b |*a&=52;s*U䎏)-<kXplaL5E[IHO_! ";2".`w]~<߿'B ogQOD"=8![IWu5[;2OsGEI{/8)9hc08lSBjunBNrx.v1ݬQ4F/р .hxBh%hHH8 r'jg-_=m(.4B]86[)Oxsn:2am{ЈbĪDYݙzrD0<嗷.L1Y~ ) E5$J):ʵ*6~0E -e~ QDHeY&SGwV $`MNO<͠mJO-U= py(xf1 j4L/?m>blX >3uZl[ӓ=L# ¶m0CQ7/b+Գ=? /$|BzUq>Ah9|VȫX)K6V6X\g8BP5ێԫm&쎐NqSY-n+a&) n Z"n#l/'o O}s|{?6:~Xw%`zr Vf?9tZ]OnN[)%~Jslss,?h̭ת9WaːJd91_XNMCǃ5/qSY8 p{@`H\ߕCP`#Uw jV&(% =xPu11.Vr%ԉEw;ֵ1nп˩`}`ܘ皀] ?#Ej[:/p 88"^7!OT/VmA [k&<~陦} fYg2sTod CkG-m=\s6¢YɋWu})W~׾0d_XaY~cz ,Om{sТ~1[ΗM(M+G MA<9#䬖.sM<ŽhtD~vD.9q3B{[;3MXg(% MI%e4BcWV2/ Yww'RbKV2(s :6i;Os).'K>P/_[7}lmh\P`[W #ZWA}Ҋo$49n,KiZ"/r*1#UpxWTu<1hI*0Bf/ߟM XA*RnRj6|g͓2a]y:4=E2:=`n/@ep~C8l}fm `#^:/`1R^D3s{EZZuUK75Hl +Z+˨{#ra9FB]77>JXJVu·9,igx;\w .vN@щgyQK5iPS[sOħU|'v2dW5s,ljLGJQԵ,:X?TTc0n\-+nt$V۩"ܬ'IhZ5T69b8$mԨ^)p+-,exš:W,u+^zG{aĝu׸In #w$L/jfbFsYs4*uT措<̕Té%KP?%ة+Yt/_/;`:L1zܪ=8-abHwMz֕=m1"X/BķT-c X~]L;F eAHüC 5{ѦyP_ɪ]3 J%q\TӸ\嫫$! d}2s߿KUٞ'@!'_x.i #ȵ`Ϩ%Z;Xheq/?-[1Cd\>Y # NpHd@WpTC෗-AxhWQ>xʜ% QU+st\ʀ= H^}Hl3Ezi61Tr-CPJ?m+ [ES[M+CBx\U8IR`DߛCnQI FϏB1,J9CLv9~- ln/ E:Җ:E`io>[svgݹ_?[X~n쇳4Hseo@rmmBÈ*,<7K~E?9?%5UQ>i]ezȻE`gպǔ$JTy/zu" Qcs@"v6 W -H5/BOΟ W+~g`Bh-5v$+Bkg].Ym5Qv_|3KV މ.;;mK#kc᳝N[*7cxpUҺ]q2dtpeq'WKre__3D<6 I*>[a5SWǪ2Ej5&5vUp%Q˄Ôג}]ߵן *1dksw I-[zLIͯ|/U]ܢ^ @'m'N8&F`P9w 鍳/abfIxTl=\rSK"*fiJ,1,&<#mhJ b=z*R9(jZ;x6wE;(!܉Fjn*<:31%*%_ȉ,5Q%4.kSQ Kǥ,/粿sK8Op1iN-%,|489cҎ%HU\]Kae&_;(>Z ]iop쒘U$pP; }Ai0aey/ck,|)S:Z$U8͢IʚjJ:V8t ՃhFbG`i@m̾iMyT4!sWdhԏu#4WbHH&[_9{/@6zjq_=9It2L"-u#cHX6$ 堿%}l{+L*Ono1 ϡ,0oÿݡ{ ML3~~ ꫉HCT@Hi_KkV\9.֮b(!dYcKQY2~KRVW^(p}>2"81I+TFV0XJU@>迂N£kdX\/o[Ak2"t賐0G Z8Ų#GCKph<wkCF"m '23?0ٜx1T:"+YK5 {!Ft؏إ^vc!!M(kIcGtX3p/|~ddE¡>Td9C5FKJV\r+(a,9f@-v:HlB*{C+.sˤ Ibp| qmvOJ\0̸"ajyRUI; ^P!rq'tH .%"!|+zACjN:3KPb$/B3o7zt5\]mzNLx7 NlNl>fTl5DZo c ё +gB7ʼ@R$"pۺhͮ'2OO]} /ݸpG\'(a%%÷ C:qɖsdhOk]*=>vIQ|d-i 3`RŤ_QTk9`'~_L%z/.w_CQiy]94ogs9N+#}Y)&@(o}ȡY]j^xMj 6'Ϥoȡ֨05:BRy755(dA$q`NWX7_"V9%02 TK1zS{GִLĨWu 6]Q&E`:G` P8[,d|sJwS:)N>+Om[7$یzU<#=f o4}qD;q7vٟn~ZH0FڗcڴA0ίUKX=4ۡE}|=8DOW<˱Ćm;eT)((%;ch8V6`W0$Yk o_< ۍоN +q`0%._v8npq9&RH x<ɀhl E9|]0mE,)ti h#< 6\:`j{kwuD,\mOOWoW۫=M|tJʡ5Zd ^7ug-= E6sK瘚{ڔ' x?/`7~`0@2]4GUNV͍9*o/*YG䓃/H[ՕGTՅaOdz [ 뾐3C-n p/4f֐JVvK$ у;*'qk H孓cw*"␂(Vt:i**1ΐas^;' i/0)Q[[ljh}:?H3. B֊ZgjAӉh?&5ݨ~w4NVݰngD߅2g}8ռ?aB[I =q|nC7.9X3-x}օ? P_)OxHIyHɻ{Kpvݯ҅0V5s:v,pVljYO 5Qb J%Og.bEώdK$d<$ܠ"F>2bz Lnuxfc{"LCɘJG/:GojR\L`cywcxˋ1$[t)؍AÔapJe64n. Lᔉۚ"aUsW>ЩaNV&Rwkhsa»UrCi#8nYk],-cb3ӖxX +K]ဃPi\kz=O)_!pz|/̜F*3a%#i yQWЦM,|U i# Ѽ1p4_FAV*Nj;i\]Ct?$On+ KR[nnAL_@> ̛bzXゖ@3 S } hT"[)TguAdJc-@z:%=skL" ذ2OQ vRDgy גѰ<`JU.j[[P7lV-ևeߘTɯC3LVڒv[hWtnx s6AT*!D_{T9Go Hx'Wr.b7 %u9khui_QˈN38R.Z<=qm1jfqSrUI&薍?Id 3ԏZ3֝Vg𲥛AOe5W&@V!1WJeL i44KrT/XMС}L^oxKHL4SrmeY42( 'mJ!˥Ε.bç*t5ȋW{s;m ½Ubv^+0 7$!/M|@ӗx(s&V%oWV=.&(LT `@ X16"dno=RiumUsG.uΤ(MUOl Hl=JQ4{U4]ih^뎎F,[ҭevh'Hl-;s !iPYMrF.%}u^  ;9!]שZh[O*f9k!4ӻ2~$F+4ß+[;x-Fy s[)^nZ9 F}rZ) Nhoࡽ +?RxU`g/_!c1rQWL`S|'}/5?gV'a ^$:a-L&]tx8G'V{i8&ϩ]S h'ŲAnX g & .rEPB1oIp#-#Z+W9ghۣDs@E?#:[@dxfjӅ5`MmwXe9lϯ&C}LF/R>B_AqR._P=wfB3- ߜKTCtkOx./<]C<T,ٴF3B_WO%Nui5=vLfCÀbN>p\T |7VEs$ \!yy3j(\ۿi\oep{ELߒG ,lelJmV(Bk7]blar^Qx\sPiOo,ԭ,YXo',WDkI2U,alEwwV#ܿp6ݝWmpxלէ'>n4̇ő@ MVZ,*Z7 Cr|ēY<]Sg J9D'D**0Q( W蔇 `Hpt7 {˨Yҽ[ kGG+DTjZ"T xu86O|==9vJ~o!IfMP- ƒ ƛCT/j$jc: !35 ^uD]+'NVie]l1ӗuBM(zOn fbǿ"P 6j<I.cו; {*+N{89?ij YS;7m" ?ZIn[D! Iw1\z#l5C7CJFKvEp9Z4C~rPnQ} U];s=u6 X&< 2"^zK9{fd%sM"73;ͯ#/!S38yWԃPbБsDzgYŗM*>lUr#pXP˼bѳ41n-.Ar4~C[ ,),~`x}ֲ`Y`l_xs@>$$첓+Rk WC3׎`L5>ëک ʩ1+b_{Y#4KP+bBݾ _ԬgxCGGBc۞HJ~2`M*>C;aR*͐]72^ -Y=b- ׉׆3:TM^oz/- RF?vʞ/Υ)򱲲uԈ9@kٖ"}!_Z4 Lp%C{w3FQvgDFM #J" JrDŽ /{cљRI4kȤ$deq$ Zfg[Ɉ:o N4%ޜV et)H.M^C67}Ⱥhmf9Oyۘ\vn p߄JNky0_YB(LsqXa.>^[k_2#P`I~Olkn}v˧V30xMxY2\l'_M&504J$4QmlNnrr\c.s5Ubxc=JSBZ[5y6Ux.|"]9ygTH &[QdW2[X+Ey`z>sq*gEx>[їc zvc 2 H㮠e2C/Zg%,aNV|L~7lv'='ı ŧ2R+ % RnQSٴ<{d7٫7qqӞ Rķ)Q.RxaNGCԏEζe^+b1HnBN3Jc@gq1 `&(IL)f `֊NB߫Ϧ*`~YV\J]VQ~EOYػ" <"YC\ |DsW\([> fqxt8kʊJ>.FA@uBpb@XN7 Ič;AzV? :.1Xȶnz,uö5I=u 6B0c砄Gah+!)|tFCpFU:[<8O PG0 ȷ ^b'D MO F翼gW7EXHr {Iә9n$ݰw`>ߠpXq9?#L(*LEtQԗ"x~pks \h@ Rt0p3Ŭ$c: ˨.ޤՖ39mp:[Fqz}F 3;mdMcKiz@*+ [{$SrJ#t;6WoB5T rE>1lPy\ѤP'7}^$@s 4]VxaJggnτ%:@O}aԶqdWN _gNE O ӀJ{D3Hʯw7wƒ:Z@*1!=i@0YcRAXZKDe։ һhϓSrwBI?]-ٴVju" Dyc, =hZI  q1.)=.e@:ԛ˭y3eGVdś'd=edmgzKw'Ȭ4REY3=*qFx~՗χ֬nTGEלtm^r" {܏M%Ee]12ԃ:Q CԋDA? B> ,vО/m53eUݕkmcFڟCt3LN#tYjIfyћ.'j --aJvg s,w"; d:rWX7Py _OVdp0 j7o@cCQ(̉ѱ"1ğWt? p1IxAFMBJs?tD*W4-/\)lFIQjq=LR|cR=GEBn YJߖz[|%ZB޴2EDZ0rxG ) #E0|xo  DSm&-\J%I慡ls5r . =b?, 5zdK|}^ xwx-^m+ISk)FXR Ӕ񀥎.Wʿ}-^5~"Оrҿ,g{nB34ʉ($V/NkSM 1 t8}6x{6-?Mq$ŝ7S œnzYמDkmÚd-Ry|HX3ptABp)O*L(m(L/җ; X腔9 ͪ Gd6sqhaxJdrʥsUTqH}Wprϡu +s_4c|-~ sW0J*,\NzRk, !N1`by 7uWB7k#mNiRb76YbYX`չq,ZMMaw-%$ 7DR41=nF]ha뽶 /t+b̡,{K}HyvN_H~GytYDei8Lҷc E0b2Mfg?tͮKez(HHʹμR{캅FZ.ঈuH H^:QwI֘ ot7د̭#)ɹj [imF]4hW &o^*dj.q3ΘBeR$kh$8ido&.bU(mnK@f^3d~r~rpR@'ZEN3/Dd9fyS_TF$< \Y^R˛v2hGJ PҖ6¨2]]%/scݾ?mA2˥`~G7l-އH3̍#$ #`ڸ/1\M1 9@K-8ͭ2-|4[{dsa6X(ϛnnL8(IF$Kǹ'z :s)݌ r\բV4ƎXxψy π]őAvnyf۠Lr6~fD0/8fD760R3JQ#GnCS*kw(Dž "Jm/z ,Z?n 7}eb7m[XrJM<_}d)HCM29d'`B;kyt Lz~U<~22KyS+P6?A潞yM> Sb# 8%{2e[u-vw5˼=pG;e՝ $Cb08s-,Z*)~!8IZ.֙3`'"I䚎U`]:Zf{`i+7pqUN7; cmv`J3LKIfvW(P3m<& /-&A/MYkt'/*W8D@/Њ;4vdm`&8)ڵAyP ^ &N)qa.27UfzCȤOK-)/hvUMNz yO\/F!LWL.)h4~X~#)T!!XWVoNMVb5tS~^5C""pڋ63f1kSe5]p}OE^͜ffOwGy5H9H?y5-APa4 W棼Z'&6-w=(EQҒ_Sȏщoߠ/gZCW߈̩"؁gg-r wCT5#q Xm0 D')Ԃ?kdGaLf<-1FP Bxloާuc-^b U$'0A$`: $c}]7H2'f3fQDnt+<=`D_v}j J Pz>nf>yJ`;>^Eh% jζPd1p$=. ͕m}/֨p$kWJ/'BaQ  -Gg!bω#SQxê)J=#gC3vBv=/11G,..BsSʵY%,A̠͌\څCzt~J_ BR&[ Ρ ^qX\`3VeQ]_̫%ΞR+UPۥ^}Au`ʲ:[8 ⅝7ݯ\اm|F2$ð;7UҘDK4)"3 SyqZ]rQGc[~UwT-h4BT+[0-^%ndJ&ckk&w6͎B |%$^Hj,(R 9-vԲ[DqFWK' ;=[z5)'%ʩ9us bVgI9[g/M&\=PtN9pY, VY ̲{L7`N{8T'En>B(U(P!C}۲%d,EEH?M u oP)b|h#1S|'Qwk1%^.~<.-0 []E@w9U܏F{13~HErpȿ ng7S8Ȓ|g_0֛!qg xy'q| !/"Ах&H *m#8›O4%8/ᬠp0ċlo˼)ef?E/J6bhT-wu1|YbTԆ,}EdGwV++s˸JX#99"N* t:.ON[ \-m$oDu!n=c 4`Ok!p;/fW@h65j*Ӥ䪋hX' EX:P3%S0Q⶗8> t)֏ n{ $VI5`M^_`D,hlY쌑Rc{:zL"PYwՔse $cS/WDCBNbonKf``ս`#4[vn1h$, nƕ<%u-D$/?| rX wI7wU_PrRb;(cJT(byɊpj>,eZOARKQ?X9MbyOq,k'6B f\AٛRct?'Lo4W bXbSRu9Pz7(IK{a[FϺ%^ x*Vz8c!};Sm;z$a ֫1(,5=]E ,Ybob)]CYi%@q) 0u.DiN;oywT#)<`"ҨQRLu)泥 ˮBv-$ _!&UD:}fwC)uyp-R[q&1:g!~jEAjN/l V Ǥ52+$Kd?/nwWrJ {c{˷5/>Y 9|er6ַ- R?YCAk̵R u| O]ㄸ'WVfbk-m/J4ӫ0|Axӽs*bk\&R6]+"s]} $$i'ҪgIr5&HsR:HS/>Ò̽sL;4Y, aL` $j옚Pg2:?I^B(8'ۅ؁RG;0\Rɩ|"^|``hP2Zh-ۊ5JAH/aN[Šsq^ 5j%Տ)Rhf #{Pt HD_/S()nQmܹ2ea(kGn?Lplݙx_pmDF4w䉢3Ġw;94ޖF>UYWaOf+, bR(,) sPU78\8J@ '60<-tsGU 5uώ OW6~Ϗj!7m9.4-LK"?]O;JqM8+!)-&8+e(؛{h( %U]ExEbAm4,S3z]/L"4! XF_]{  ]=j*&{;kst 3Q[3_inP7(,THUffzo)^]%k/&ڲ(UlpGy VBT,9g?R1GixyΑts)dOq8E@]v{ئon2;| kT;HqkjW̡JԠtQ`rk;iQ$Tel.=e䞅$WIW4{VשJ4a3}\P)c\/"$Vͣ54@)BVlPa6zhث'%PoǾObƋ 7) x,ܥAm(Q g5Jf_jd[ZEw?kKl`iWH lX<6aHS^Q*Xn ]&ffglB)Ѣ<2-W)3X K⊮KE*rEv Ui =3XZTi#\B"8nQa%g&^y<(k[Cee>B1Hա@Dp55}!9aIa]qT)IR?]NS=IE:N^(bKIz"1&--F4nu/-N>w[Yܐ?W0dh+srdTwyn0|'X PŴJx6Q3 Ku(\^l9 rjvlhۇ\?>rC)ܟpvbM2!IT{6ѥ.RqwciQ#+N_&4Oˣ6V#rq;M2J|bն\YJ,c3!pnveݵoLA_lZ_6$RWhjGL|@G>cbϦl\Z eb%b"_a@̚[GQ^5 ?Fzq> 'QOVn']XÕ{ڧ0 &Լ)7Zhvh uXAcY_iibF?\p=qkL^u<j[鸽GP9W4?t|O`?dz` `p5/+ht)Z <)ho? !4YGEI Ob1q(in>iM7QLQ)ѶXeC3bMpy(>} 8* 6leި:]e <YLd*h=E"Z-=_c`YՀA?*OxwD8(\2ela %gG†mP*5zuϡV],p eݷ 8#kOFPBaΫi܃p mZ#p%)|Dƫ1s\CqEg* ''D60ߓUsȮi S?_H)b15SLϐ$@wKZ4HN8 <1Ed;C~ hYQIx߇I (dcZah98죰w:>f]X쾣JJӳHWWyPMfO=?hnf&# ]nkBIGyl97MtjoM: ~O`]TၩIQ j<ѽ෴9!I6[M Y׷5t.S[zWq %^#he fc(!̍xjĎmJZ騪$ όCN 9X(.׎?ѯ신; !v'vP$l!Nc3.gQ: i8b.y[2Kn!CcGuNʖmc~' a!QENC&aڀQQvq*(pRLW"a-p/}Ɩ{b&r MjwDaLA%AC%vbVy:\8lbq0vQ#ɽ /uG5A2cMV07WSYY`9A(mwJQ1,89"f"ɥWɝ4lX-yTh+eA5kPHi?C: +YOEv'N/4+Z4V Hԯrٛ\Z+ncQjzm4!;?Y6@}hcY}`fΠ!]ط\@0 ҧ}g"!ԓ6Nnf?0jp][ո̕Z n_9M [ڪ;PPxyQb1%ܻgrWE|o ї{v1ƒ?`׊"e( ؜Ve":BHg^2HYjz}NlJ;3ŨV\Te`[K>l\,kn^:yRwFjNqmEӄL)ET]y>_VqFrOk3H5P7ƇRvCqחjG^ bq뗊!zʽXJg:V"Xcr 2Iaԏsp6,ޑ̀CxopBG ~ʟjixݸ9}Xڷ@wv7!HаT!^P2z:[a4‚l񡞑HzF[wrC"Y:fZ n0{ELKͽgLc\&V 'ќug@X0WJ;O2sz la? g.|zڍͥH bl d2nX{2,M-ݚ`'j.,.g\&n˗UtYimV67R~~fx* P쯇U8iACU'nWcr!Nci⇕Jա9jWa Hy:u/VZ-g[n]g&#<D8xc1:Jvj` o,ng%Z?GQFlkJOV!nK38Ԓ:w]݆+sqo ›X럦/+ApJ% QLqOgMH|)vQ^ˋB~1mڂ)%lA뉸Vm&1nN$k?(|1%`^F))_+}{s}:)CXOA>> vsr)w;^rx18l6tb*n)e+lڛ+z.}ʼnSD(ef jv*D bH85q͏ daCP200E}ѶqC~)!Ivw;LhqbNO{&~bPwjcLkR^rohO6FW?l(aŽ]IB!H;Y%pn-cZrmyv݁|Y}h8y ysRqxU4&O4.(CQY`eRn*+}LKp.43rbcj&c} @|F 4ۧLj0,cu)MQ_B#II5d,Pk԰%ANb meumੌ֘C(IʖǪߵa{^I8bmeoᓽqbalE2@K#+dwk50Xu%ē-NYY<)h-E_>:v'h}n3ЩuK#E ks-ot1I0wje'5a<[pYِ߹N1ʇ B4݁;oRuX en4~>͵}.+dpaIOH^LF܁TѢ`3!2*UT??[1hM gjD v=N*hmC'S6I1Ԉ] 1B2hGYbx"y9N/UWp?r &D},nvNz ' 쉬اP›FeeQR|mȼM9mw(GHRxFG9*=xF5}WԉM~ȩZ\D>j?9IrTնVqHYaҼ~o̠ 8CV =Z`:r{,@6Q8\0J:NR%B \.kjj] S }KHXbhX`F8s%;'9瓢 Q[8|'OOw1QBHN,hwR4Xъ[EEHSď:~랞NYbZH)@rpWSʉh]#sa/TN\(vJ>4 jxg]f0N^7/dTؾGwaK:eθӲcXJYY} "I'dis#@=lsikI ! !Zqxϙ-$:=E#쓍wPogIg1+|߽۹z.nSzМCƛWɟ7_L o_%9%]5 `o' @ ቧ >:ẃ/q9_VClr )&!Lk|X \N}P+`pu:;!yUf2C]hWZqOX"řo\Mr3~Kؚ~;Cꎣ?S{ -Y2T_[Řz"cP*+Kr G$nԍ~A wT&2PTZ ֎mJ5#EK(r*bfi^'sU ǀ^_OsQqf{\@;1ct7|Y/<;-O #Z=ΔngZKuؕ4AI+Jˇ "|q1zVwgZ 禇Oex1Сet0mspn[LR ge4g:d ڻ!lCїU(YwPL'Gp& 9kK^FjDJ-\'وQ;Oq%G,NXa;TIҨN1oI8`!;N>Lut;V Ljݑ "|Т\3v @/ ~ ˌ7ּwݑműb<AN`ԁiTN-X묇2C)gO5QEzfh3<Q(wdNj1BPL݆)!)v䛮 ;xY"/5{m;dL+.r&٫̉`E)ODxX(?HK9XJNpVQfgH7cѣdڞ}kU-=[p`GQ]x$9TIY{ ?h5Ki:MjZ@uH 7! Guٲ`UP"'p=nNL|,R*Z"|ۛkv)1=({8ߚic)AMݹG0oVoޔ^ KΉc<47Qg ^^P;U1T<\SŅa3Z=rL< v~Y #lc +>y#Gn v v";K)QqN4%hꮅfOe=sލ=-1t&W_^poti 1"x^J]KE=P&1$m< C<&éfqm”ޙJ`RmȔ2}m$|E*~cY-/pK7)vSMV[%H u?c}j(]M8x`s4UX(TTDUJp`69g_&GJiuW4O$W)xgx΍GqJ#2oh.HPdr.}[٧=,@FYLkN1 LoU_N(K(_kJ h SO6ZEt$ImΥK[U$˽9>9UNL;Qm"ÑBhipơꚬ Ӫ>q}JG 9?H5=ɮíh7; TAALj<g,:\\NP'ax"PE[\{$la7MnB %Obp[<_k+56H$ptצsSܮ!l=CηOphF).!هL!s*O|{r-9o P6D7||[% [S??v'C]Le7Ț o9Z颯ot-v}2Gd[SGP|/E ;'@%g6|bi=#|>zm/>56#u] @pL7= !)/ Rb5NQ3ٰK-I=$<~iq-n-3 l_uUo7ZjDF>eQ=KlUk }W6UV@!t|t\)GJSRis긷 CfX1?FCFI9-3b/UF3C]v@`R*s gR*UhC_ pJ7&~^Y4^Ǽ ڷf;(pMֵŰ8D@^xWcLJ8'K!3AЇuh,Dq(/O}0VIdΡS9!=TtC g v 1Hb #O;$"mϨ# =b![Qjk_+MHujrZAgz>CFZMPwVDP\1qmSx,b\%}5 * +90+V{<cF&϶VZQ^GKc6eCϐ/! xVdȮ~q>Bpka6[u *PeɜR_&#ƺHz!yWpZ$q؁rxQxc}%[WDӓyK4TYC=AWIAI)A o 0KdLU; o%_H.̢oq^X*s2n?_XsnZ(zz K.ACbekFY藴7cvͼXHYE=U 1t8T ׂvt0)K69?snp uIg")cxƼ]ҿjK |5Q9SQL`A.8;6YTUY璟zf'xlbDnٮԇtg퉟vM.mC\5QLT`Y ;HgHQ\}-uĒ&ʹa>> us;ZAZ|;?=|X.t _Cq /3@!yW07qiMjĝO&o6b@ݩIB0zݿ0"$FknƱ>*CL3fGAbL`I]ȷ{j% Ƭ#ʝ:l[Q_| !Қ%4CpUE J/}cVi'::t0\ zq>*k.<'Rkk6rxCC.٣K]! ?ږ TuC%KU[6} @ E{ݸ#G ,aiAidS]fǐw5,As3PUnQWv8)8# ķNɯ7+Iܚ&ρ\7=$bʫj栢N#J:P т j`"7Sve&4b x{oAv6Α7BS[xLU*uv E-Dcɟ$JM4hPh))(&&@FːSUΤ! $t?|@6b}%k_br@`(|\ՌQCo$}n!,P*Pu~ >n#b4-t*j:{): %ܛ\=@nn&\O a}X3;TIs|F^|XIEqȏgs0k1XK{O{Z_b<x&rfvAI٨')ÌltZ$ .YK`g1ʜ [R;ܠ|f C$'^R"\ ocFz.8:0J­>?(cjT0Z).5*7fM,|hPsh r~=]Ĺ-gނ\<eY(1k M7d>C0A [DgO~F}q c4‹GSNawYZ95fNRi s.>dB1-^߷f(' *Wq.hh٬~7XEԇ{"p/J8 _&]x\vhNVLxUVrLHv!<_4j::{;yeuW [@a{PC mUj\$R[QOm=%)ћ]=)Or\2֟SpUYUF˼J4?شH#H)!o `aоJk.6qO-kRJT 7-[#b{:Ev} Ȩuḧ́xN7|?"}ij>JC"Smk~Ol9Jjl&vҌAb=c;0oMz}"{*{ٹ1d{_ep`}f,U&jTh/,T-!GmHab ׯ{<ϯt3c$5/&!" zǤH7urCHEVĆ*IY(T5]#< `t7DFauJ'ewue$[_&2Fn=#DzvdЭO岀urLhDֱ~Cf I藊P E]&A?WbŞئ|"?%ú[|pP%~ +,紭] _e5.,OO[]wGV揧  (&dHE'~Oe0^^Ð蹎^Ik"9&T:kÿ$#.Q$ k7S+9;iO MJFkji ڗ..ۨ|EFGp}YQQ|ˑ?:kdTu팴KqXBkZpS cuBMՒ |U} KuXe/itT2^%A@CbS3c0-ɦ+NUq4SFD:+= 5\rPܴ_y'mĢ&7؀>G@).6/@ 5UB^j @g,##P )yiJ~EiOqW~Rm~ҵ4[;kG|.8ogfJO=sPJI1s؂2]K}@C(hxBA~*eLłƮnN(:GفXÒi1 U_B *TDXB,+dbkN{b`>gxb@܃PWc0zKjѫk'`tcNLgNbԴ9 "j#[`,X@k>g`ЧZ!m}AK>{"ښ+0"\EH.;?R]PмJĖd9^Ml0FKruT*V;駍KfcXSy <"B߉U/ i%NNvl;H,Vhzx6t)bK)7nˣq p02u0W~q,3 ̽Ji?`A0"۹g&簘𪷗L#o9uq%&SHFA6!4|4XhD -C2`wdq)/WI\ -0[衃 /o}̇[fCP!:5-$eLy8l+ET S~GhԌ(Mo6a\飵HCK9Q ؼus,QH]GoH75fZ"1WM8d&pj9{.^ ˹Uu][JuVZF0?]4w|a .ICqIy." 0ъ""dz]"w'UdOx1PQZX.i&(qܮ9i{!z LCv%h@k+ز'5J--myWr5pS4<虚bڐaub4pd>{ fjXPaA^1o" `eBsJ Hپ19jl>f3ki@fOtY1⼯ϕ RE;{I@'ΓMuEEmk(Sv|3&j7*~kr!fK^x W?UQb M:< 6TJ~1*(}֮bBF eyͿ~OB1gڦgTNoNIevP(#QcH,A {ݻWlH.1dݗ{bC>|*φ$6yFTeO ylJDg n;S>piZӓVǒ7h0 (a„_甄kgSgi,ugs]Ytk.jofּ*{Ȗq '[AgT*@۾ƷU8Y wS2iM3ŁO:FJ':.VC? 819ߖ#i'{O2%)0\!zic?RV + |*!CB Qt!M:t|>/8RչqZz'\V3ؤ]Ygk54#c˨sW23AaK!T=45û)J$p 5xĆ80 Qo2MJ# /綵gI9ظ5s 4 mf=7?{02cD!xCwDrRP^P!Tms'C|Ha[by>J7boCjaw#c *o l- в9jz17h$ >91zS`#LZFQf[O>eX8?:<`]Wȫϯ4;@/tT0}9.V_UޒgU2¶ H^xBH\zDGAC ;1NkWs.˵[OH˘,Zۥ;VBz eb0z01~#Y@z8bo`La%)V`нPW*kHlAb..',N蔺u.C´,H$ܖiV<(=SWqhT[(<ѱs&UbǢWاw Qt`g$h}"\ 0"{T/,z/4& J̩`2ҥvDYRG/Hqvk:)릀3{Rg7ɡ|Jġ]9=9RC:h ɷ80u- _=(@4DoCpw7) + $V2lBe^l=Bq&ٿ7ã'ᢣ&GjRA=jpgҜz!OAo,ɧNrs13F-m"H*\L UH[3'a6zX4RsFC \ܺFSQ -&_|pMXi%@>oǒȓ]#"KSIE)w.r<ˠz0c.ob{ mU9B hV4u ?lceKE&uB4Diqhs=Yހk; ,bR ک{!wyL@T|Pg.S ;3'=s""ra"=0LnA84ϗB{uJWGO)*w*.&B@WfnZ h"0RٙLjgcWה-z@̨ڽ)# E7۴ [)FVKUƒ@K34d~c5%!99`8(ynL qׂrԽ;xKǴgm">–.M̿y U /-+X?Z}ڬ0Q᫇h`eH~$67>mj8, eGŰ8-OSЋxd rc4*ۄ9ōXqd$ߍʭGd un{=X9[Ukw\#(7|%K7@x4N7cl &hUkmQ\ 7NV|FcV=4v?@Ԏol,sхTzQϙ(CaVE'9涣Cn)23/ZѣgFR_'$<#^֩R_8*1.]]̯⋄H(T/\pvhl'[+9=[83VypY+w&c}ReyrNgfiÊifT[mxaAO0I ;nc~=-#vk5L>pa J {ݞ he=.p--  y3+jt-Z& 7x*ާ &E ^ U;O (; ¾tWl֗w`!{D?dJxky&1F3c}TXM5 s7aif/G]"LFEsa-RKDF$$'Жz#' Kr![-] pؽeg1~dQT&'^'ѽ>v)L-H *'52"h=G;b1 v#Vǜn| )<O+PmطgRf~ã/PNv(M5m[@'ԕNݟ;7sEvdOJ?:)~6)x$nV]fޜ)xQqHedCH1}CnЪǮϛLcaUnzVXMv\5 96pnLV/D%+*h1^ھ> M4Iw:L~c`Xn(Osߞ XK jA/ l}d"E%#qXUz `Ѷkl/Fk|K Rټ׵NJ*C̨NԷljJt)OgLޟɗ 9ake ťa|ua6w]I#AFւ@g!@|1ABUR?Kj,+Hzn|9IǟMfUy(.+P5 T5Qk+jdgW#90eԐ5xgVd- x0dz#M~( AiDN H ;WNi kqd&8*ܚz}ǵ~X=ֲ`>= g>%5ٖ12~x~V{:)8nʟ_ΦUp=9uܴыxz4Y/>4~ e}Lvl_h fGWvlUV(jZ!T \$zH \"m )~^Й(7݅A|8B/uf]]*)ߌxBаY wJcٹeUYffE+s 5܊Zh.D8mc4 7zd7 H~5V+0#>dDBGޝDpc"qB熆H*UBWy %ͥHJe35m3|vL̜!lƖ-Ϯl}8sş[xOx |!N=pFس슻g2zDbWԮk9 `d^>&>"4, @=BIXl-ᢂ3)Β_SFh#]AKB(頤HK~U>!#=mDl8G08)c}]^b{č5Kݹi,d8ВW=ӌ%_q&!`Z0?ۡOjЂĦJ809n72ES@;5 )"HS#w`}lS_5?3>AfRK]D}-Uإmꏗ:;" jJԢ& 90N_x)Un9N#V0m=1$GKH ;8/J;y' 'DjTX/>BJXɇ%u@H?D %Uf?& g_DwvI8HVmY xl2::CK)3 W{Wֽ s+ %:uO%R[͝x3zʳ^jbȚo{c/#8X.ͺܹoY64YAv[)ܢʚ/~P`/LTދ?:Ҫq8kԑB;.#!NIgKA}YH&p&S[Ny!%o?[BBڶ)[ V|C}H&~ jd8&R5KYuZV4>jM:@ wTHL{U`RNZgyDgCbǤ k ]au'7!׾tڜF0o 1 G <] 0TA *] Lx~IDho8aU1%eVs]7uYCYBzTxRɏPXx(<9RPBt+J5S8&@#2CpzЖY}B:% ~CnC|G{m%Gv)dOhAZR7u`TiSQI?0\a3NĔHJTJsO+5yQN@ lj`c HH(5"H? h!QSW * ,1Ѿ q.PcRt-Poq/# XIaY\&/d^i>"QYTrh2j5(:٨RJ{]L 8VZyB6Q4SWޏŽg {H>2}2Pz@ӴLTpHcE;!pB20&w@uBձ`8[ERO{:S#hD&.,J,Q Y#w);>i{lkұctp}) cTȾCtPW6L'j]%4O6,~34/~&. Jb0d1+ ~pɘ>-aoY8gPO+=][JF; ɞ1hPnCy$aA hN/aHMDz 3͢@,+puF _=W?( ~?w3$ëSt,F(PyWX'\?՜Sl+Q>4*V9(=Xò_(QRPFJwc7UΒ^;"5ɾ y{m>Uڬ;I6abDty]}onFW ::kQl/1B u_I{FDB{_Ɵ|BzwmKFdm oDž!Zȶ`4A $rԦ]2XƟ#mgSt$~.도3+9(gXb') :(SᮬJ|0°6..xrZ_-+;ߊYz֖l(ɊT=oRG*֔d,/ (DV@Ǹ G}ʆMp$kOc&O.sWU$6͒mKZ̒y=yxX?Fde!B3-=K%#MU,9h"P\q61P#d+@OYQ 6X;4CIĘRAXoyذ` NnWZ?Nw%Nl9\lmU%HMsXoՖSQvTݯ&o\ -07  2bՋ,Տ^aUUK@w\=og̀QxN h=LLYHJ-BxS喝 pУL wY\uc=O2yC'>Y!On& zWe 9,>Ğs`1ܴMϾԴhAC 3ip]Q\沐q#"hG\;ѰɅ[.8k,Q h6j˞j,,B~p]os{XruhNb l&ژ/vy.}\XYŃG'Ah^N;L˪L 3q#bl+8uD9N}n$gŻa9_9 u*=QL^ +l}hd4:Mg`6':o\g<"Bm(De.8 ylo? YY|"89.=?)ʨ&`RL3F׻m+ҥ^W{ ^ԐɃ?.pqr-̠jж\>]k7 R mJvndqL=Võ1wb (H z'.~ƈD'wdj5svM %~*tn٧0OIdy3Р/ygc08K ~^>KN2IR1\]7]xjS!r cL #DBi(v*5V<ᮐll`x4Q҈F;u.ŕgjD9pB䢗1^J"VH5'rE#sK ]ًRݽ9ڏ@_6c{#`l,2)|FfvVgy lrϔUtIGigԂri4^ !I?c䤐lHJYj#wZrf<~Oԩ} {་!˭n(YI-PD,ycXv LԿ;E&tw>~~< ˮO S[xcqruLb|6ګ/^w7-V 0v"{ݩMnA*Dm/ӹXxW\B$lPt)w!eJ_Btqg.ȭ ΌQkχ < d]1+ ssyTݢtc]@!0WW-*F8Ӗ@xH7G58:uR'%z9K&~>oX<|WM7S6JDU3G#{|B߶~ & "D7Yh cͲ-e6eP҃aj^'3र~ؒX;%kiI)6BTX ΈɂWʵhA'Zs͝ 2 zЩbt{Q0:m-#:(+uX 2PVV@/=Acy C'Wn1IYv>Q 5 HX 1^ . O 2utC.{ÆA䚘$Gd̫ f~ &;J)^PFT-qCN}͝pd58EZGޔfvG-/g|_hGib՜RFe/^DF; N]Ҳ<[)o{IVF%K476e5{W6nHYS*/u@gaqmGpɰ{W|>j9NPXUqѩeL\&ֽΖl6[XLv~ZSsSs6}j3q* 6eIw"WJwmG_Bt2Hؗ\s E4,EJPaSlB!/~PB7)L ({ksT=qwm %'x->ە&c3/[`>f*q1@S]Dq]?>^F&3%wԃrx ^CB]K > (v_feU$ӷz 8= 'ߟ^i꫈ČWb]V$ZmyJ~vK$;mp`PHm!GO1Hk\nqJMш_9e}.Caٷ"Ra"SK~(|TYlKZ"wҘ|b)V#ϭX3.nvh ٧K^:h9`T  ?8/Jp֤Â+kw}N`q=^VٻR&Sf'hD[iF!O.c?¥7ϔ}|ytGSz2ǫUR&nUg>Sz >m9 P*x*Z -ED%#8H''bJӹu*(b9_tN~; YH6n߼ZY^[\l!cT Lu@&v+KKM[J\fWSo~01`2% +Jb|+hle[25<E؜lWu`Og1]w 5fŧ yH}a > RpNl(=&8M_7R"Bԍ}U#-|*gfA|8僄a n2NT]4|R>S+c ޏiGȋ\ub(I){SIR^ԯsvzky%DS7%"4ۭ=ɡsխc}sJe>TRPq WHh*툢3]4^`ed1&=tj/&$6 \y/F>`^ܹOnqg U>rF'\g1@"鏗7p8y|ni4=1Ό6~9z*qrAf{`ƿNtdR\L'}S%V# '>>Y5ޑGt˝h9;·$6 oyUT ^:U6SA;$Q)z%>FG{%<_d#^|"-vs$RVZÉ)8z 1d'XGUS3j;*!Nc;iH T l ӝ!.uל y "hBegU` .lS_;M6zL<>X\xa.Fzj<֐H\< VS=2+: fJ+ 642 G(1U pq z:=ץH2Օ-BTەfƴB&pbꬳƒXw+ i/ñf , Eq]c42e']2!`<= b΋xVJpLvfՋ@--> jeasa}XC/(Y z\s63]#O؆05)ѱ;ըfP*[ Mαp sʠ9RFn2VՁpavfd qg(Ix>Z}ȶ"AՋ), _p$|:¾)dBT=h0VL:^ڒn]jy_ E)v4Ml cbC'pi&!x @<Bː1{.Ui0áHl3DY:k2x ulWEy/1޺ɪ`I R@4108 ўZ"ߔU|≘K z8"ޓ D; άVU5Ez"Z7W-edS|ק GKGzQk@^_se!ѵTIWiHז7j -(HFqED֣Gz]=%  ̄= {7e5ޱ4JbU/8f7:^$%M4x$Ԧc$̖J8/JWiKIC|Lj !.qB0Z̚nS:V]opz@N+3amsJbPL:5[E1vBʭ= CK~Z+/@ut'=ru6^!Ib;^B+==6dwgEaS7|OUt~J[]R1qJ},3sTܢ~%1)=pWX2%0]uݶ. {ndA %hs7Js uF?e0zfV.)RcKrs?|iгO[e?5q_MA[՘(*H;$uD)>WD-^;|i,uyvv}"ZL0p;͋' زωʤNju#F;B\>cs*VqW0(` 6LvExυfwfmSQfmz#܏Se ə'U^P?{ wǿܐ .* מko5mzr!uAxЅpdz{jbe*SAׂ>uph2P+"(͊qĂ6i5 "Q';ARO6R`vf*82Qg l_5{ˣPb3/RI?̯ݱg#@gY7OvW{AI-l7wosʗ Ͽ;>%"κ 2;mEE%>T6[JPeVA.#L@BiylRV>+\ke\y\/z^T|-e]zl\jG^r(8&t7AP;a ZYIO& l4GWEt⥋;@p_D<~g(fIR>O&[G~w\Nk0f֩؎qmYqA2ϥG2萲ͨA&mc)* 2@rP\c4ID!Z݌GԂ8 G cQ;#vE]+LIh鱆ћZ*)kv&DzmRW ۴'1{$ ^/@PM&xtjW\8]:%ØwN6 7-5Ü-BL+[A{Y;VK̾I^z7Npp{ܙ}4V-ׇ+ybGQ!@D5VbDg(Зc&,cS"$aЉd+3Alc[Wkw 0L5O1'B|Z2'ΦWĩ?Ƭ-#- O4O0|m#&L6d 00B-"Ȑ6k+p\;yjQC=fj t1Ti$`GwQGlm5?{ ջJ<Uf3fvvBfu3C1Y - P1|T`bs< 11^o>qKй@40Q;.{FnyXSٵahUY ;!'C.l@F/z]J!\|9.s͌@ZޚҋB3D̼~)_t*}fH K/1BSϋ0}b`j4 2納ϙu뤎ϫeR^bڈ1|lV|F]}5ӝ\7$.h,fݾU@ 8.@:L'-]c>\}" Xc$.Ub u!z5ߑ.O 0qppȑ!+'X<˄mMnqunTm)UˡBa7nju 6xa_WZLg9(b@DORCݯY<ZU@k? &gm33g'kwXlXVNl+'ճK0dv,Cgəbsž m`S]g~ty]@B+*QwC B@; 08Af'{8+[؝ös?}1JzX^j h|у5wԪl0MQZsXpm!C,(陖Uo͢C ʥAk~ȻBPV:&52ȅ5yI 0wP5pU ҷ\wm|#׷F<$e[ *ua}Ѣcp$|SGFF ӄ7* ј{3 h.=ô )t#,ԩ +SV' Cq-Ke0A6rÙQ_p[ rz}!:8k ,=UPKy 1Fb*^5(_)pԂmIKOK{$ץ͖Mq2Ѳ6r#c+-ck/{4,ҰB5%ε}t;{#B?[5ANly2MMm#[ay$LS>B f„V"QޟeA;DǍf ]0 )ozGDJ0l6 ojoM|#!9j ;_c$šP4jƷ7[q~W=m6xG0^/h!fi*~D -KGKO RKktXa ABՈ̓ odLʗ- u{ER%t륣}˲>x㊺+Te`>Xt+]<%|d&Zp2m }|; |5>Z׵p{`U y4K슧}L31߉]zEb[ q80LŲhAvIo6TO=lSek[i+x/L14n+egbT1V%H{9"57J97qiڔ3 GeҢ) ,0O4>ύL$Aou9.|mq /.Ѣ,խie%;YN-7.SU=0.i8ďƅd} 誕@O+ܳfe)B~dCp+)Ff |kڃwAĺ%,YK?A4nrV @ Yˈ0\=['Se3J#'KSn[?鱬$qT!Ä0&W"ǔzdM Wy܆ٛjz=1}t9Uh NCIeJD_Lm0 P8.E 8sj/B!8 e9|_'OMu6-/ixB'sd{'kPb<{3s $̽t#% fj59@d]9'2T֗IF0ԫ-G/g""viL̐5O+'$8QLebJa_ j(rcY6OE t|ʼx$ʯv7b H= 44%kdAatfUԴ# 2b}x6j*~d[pxmY ^;q>R k8*fYGҕhRZϼf``_rݨ 0FyiqޢGReʑ rȊ(|\WxRq] ޽ 6O⍮,qfom` 8svRu I ވ6AHui.cmlnc9 wͤZXPo=1X S)-KTZA}xBR$៯$D;پz uN 0lj߸zNƬP$j_G%EG`OQxĂ0!'i<|C]nq 0D}kc>&7_B.UgqRE DZY4wD~LB mGA;k=R¤i5(U2ꔔ*Gъ" hBWQh7OJ ,&*ru !i3;L-?~5$("3P;L{j`<}tjZYI ݆x [=# 9m}Hz(pp[7NRB\:.YMLcdp^a@^9HPLN:ru[RX/wޜl8"ƣr"m#㫽k; g'Vr/^G5TEf"^zRT\6r/`NtzRYȏey0.)#Fe)x×0BOS 1!7Ms׸eU eʜZ ڜ`)%{lxq+(y.mHNqkf&#su [zj~Qw>cYiƃt ݵKf̷r@)QYs}. }[Ux/t,f3qR(E ؽO'p?Һ Ib_\iϤc4W74PdM,K6 5qe1 XcP韊0^et3&byvv[+ی,ܣ 9 =ׯ-q$5h`1~ Kߜ1{:xp n9U(\@\9W#FABYW>Omx{a噻 v< "1 xcwJƿA;%{eGdި 2xdLqO^ 4)!$Z(2f+v{GwM}[[F폠v|b^{}J9l)DZRCB$|Pv̰ZK$OkFGy9 ^!P HqC14E&3l]S73MsXZK)@wѳd /3ęc Ĉ~ ,j~8ct ĎDLZR2hُtb ՃՊW].NeAˉiɿ+b{CV:ܥA{zRT=R4GtnA,o{&vC+!%wV(;m$֭L+KqqWѨ*UFSEIKoԴT]k7aU TW:mj'N:5hYRjv3.+hVܵbeaл z]fc<2=nd$lBfͯK?:yK.(Bpi u S"T!?* %c,/'ۍE&JNvjznG~ҘPA$s9u)Eٻ6y-$vDU1vFH6dØڡs3܋Ao,MMt lѷy~%B0eZY]BB5=7=v\@QBy[ajL&IEFs )lRa׭7Ls3Y0wŋUT)-:.+gsj,A=պg.5$A"2 Ff͹[}3|X|~nX'J0]1eK.ћ !:v >e[lM (1L\l/珪\d&.KW(P<> G1, pzwψYaz7aTw0"gx~oE+e=1Lk$ޥ) ;;ңɧH8RT?ӖϔvELy`tkg.9P}H2 Hv{"^zI,z91v]eJzkx/Grr lp_Mu61mHaI8C&nA {4`S]R&|usK z ex%%3AO,&^poM Zkޙd3?qRNᏈrҪ)!_q&+S\6I ০)P8gJQb hO2C=Ild2Y6l(wY_j4/"CLK ei<]ĖfF٦6pѤكf9/Xb8o-vw3?OZzON1ʍ!Kf#AdCxP n͂z![9.4o"`k̠>}og"d H[Ζ ;hْo7B%|+rDʘ;/^PGz0!ީno诓7W?lX^A,Q.h 'e"4ͮ>| raJJ.%(HV1ꌳNouCD2(Fw3me v B4(uRx;{k/~DwpS-, eݯK {8]l[W"~@#h@&hfOjtNW}Hf2}ݑ0AֺمWs ^y ;u$J]X.zP!J"n[;?kr )ܬ\=T`l "|H*= $@;ؓ6zN8uP+!;@_TgUvUzX-VGQBY;e~*;H֘z&w$+ ,瘛=+C'| %LZLo ,ŀq…^Sca5>8  ywzkeQFqM GCY.W :)ޞU)+sT,GKod=qDe?ztwihAC7c aK?1<2,8jq 4& uY')e߅- 2K;ʇo/ zqNW-$m9 j(:;$4 _8wh|٢H(,r^Wl,ex񺱚ʑ pTԽZ.LRSnS^F0W0t(׶މ: VP;Jo˩14Crn^wPuQ.a)JlY2Y4Jx#fՕR(o֞5;n Nw; %_[nE@wF9LS@W@^BQ;4G5. FX27ad|r:_3ge} Y+Aٶ1 vFbyÝ{K Vq^dU*S"I|x>Y-9ؕ?ngq{|.HӲy6,.^Djx(N51CT9UlDy!)_},.r@*֦4016 [4colPPW}K[Wgç9vmG3ib-T *O79y91;yqg-c]!).TiLV&n=S1޻$ NjɚΚ\QS:Um"F12=Vэ3{^tV#0 C˩?Pp­HHGSZxgï}4=(1.l߹Rց밋,cJ6s+iDaKj8jp [ w~ 1A!98麝'#+ `t.:Nj~D6B1E9XP6n1sQ#Xs SWN҄:'&KplZEեP~=WX-$[AB:ɼc*/ʕ7D$/E$:f!EbE{έrLeH]1FSkM=7GO܈i$ѿ}F G=U%YIr'?ͦÞaPƺu/^5roǂ(Ju&#3^AT?O;SJ{6FY Pwxq,،,cH3P0B\l.xE WR6t u;ThNs ?VF8Z1dR̸zGr;cBc$Ԙ&`Z3S"ĺOWSH :,GZ8;)n,ճ$5gs.kʘ LH>[{nMt 0(})#xؔ%SUb\ѓ?HV,;! emp{߰u{gރN3l'`>1W4vxJ0J˥:(Pttލ<8j 08K'aG_pm₨wj:n3E7Qnyu|{c`{ߗ#Ky3&iF5>e;,Z4.\wKra?ͽ( J|U:š`4P|996MrJ~UW2UJ IW2eA12LIzNi2|S'Y岿?'x8|*gD8j~r#Cia*(0]D#,!AS9;L!jh?0ᎮZ{%4a2v1 x߆_WH27Z.P<)zFPVJT3q&O=- yE[mLR JnBB`ʕ\8"6O_ e1-Y1 Җ#ZC\^Y+N(DYTg[1YkdM+Jfe~*HTsYaXKYHTGk|֤dlc^},(ѻ؋&3[!RFr]uJ[ S^M}d<[Qy$u5rzDuTA⏓%2ȉa#f`Ob>2K ^ ?}ibk^>vqKh\C~b4~KAjmHI!*p8ᘓ(oEǃCcob\:,.7B>x^#/lL1{eI G)4AϚְ]/0 $z*¥8l R|v!%?)SS `?>2W-![e`rRVBo7ٳȕlzV$'9'Lc+jTMNA#olvy<` oP*|WA})Ҝ׈lx=u+-3˸O$KPRˮ^q &@)fB>TSLoyw'qbf\Io4_yض(aE߮JTJ'2g+ۢd+3Y΃ IZYǰFn%ׄo/2W;ӕv7Z)-B6X!"NA hziW'FQN d&ߡ!aEe)+2N J|3aY}wǧkf<2s ⺀z/GF XFޑO[>{c/ axԧM0㚞Ѻ !Da0VBx(3LwcŠdfVJ lJ)֖oohFu;*3ޞAKJ_,iXʽ ù>:Z7ϒvoob[W*sPl"wFCkَx,񢙉 ΰ0б~<0eS=Lu+:dT}B͇dA 7E$:{3yFmQPm h,Iak󗋢#DgB_)mT%} YI.=Ir;)cBj^u]Pr{* 0p\<<#W j。gȕFP_Eq(?~l;ŹT(itfɗbZ޽>_k6i Ylskj;k6b^w@Z't]>iqj&CN%>dZ]V I6!:S'1/zޡ Z&uLnQ*V04QƟI9mMUVrKUB3( E[tw}h?L5JB4@xEPƢ'wxg2¡C;/4p),(7(,c㨢 0|i~f4I!FD8DSZ9)J~yTMÓrO/yƉBر0np2n(!6I!tla>sb:E>_B"a!c_hE-Y^l93e0 T bRU/Sqza^@RɅr:7@fcKHWq5kkWFn*`0|tbmlR'!ʡJxdx ]^]൳VB>q7RM*_6ek}Z9)edM-;}YEmpr> :]2^Q)(SR$T\ECPlh%,Lv(p](&a572H>FI\4>(Hm2]%-N'h# %tLQ~&jު,˵PЈT+v/RGx mi07M}Bˊ,yd~Mme7B @,kP3#=Q}%TL,$ܻa'l&ܳq_C+ITǖ7[ ,|oסX\vPli`"ԙ$r%l>$#2LaZyMDX\D6}Xy fG:\~y x[D15r/G=dڲ"«-ܫz[@N agQ*=en0.fIQ-ĺJ'ܞb~9]u:AR6MZ-`[Bͽ="G{t/\['Gb1eo]Ot\9c鬮lj,sU1ik)vHZo:U 0B 0FWT0d/:su&HWXʑ_o3SU݃D4o`Uf0ɮhOU|vME>{YdeL bڃ;cҺ3M$Ht%*U2TIm]{6''2i%~EƞE{FoA1)O%f _R^uFƢ+hJʛ ߗOWx*Wwt_DW,Č8y׆ >.lPoRe(NJ6^ ߉\ɰTX"e禮ZUmotWa:йZCKy@\$z~eʩ6fx[}HNJ,U1?ʷmG` Dj7xI'L#4wx[>8\ 9M̳Sojv'NcM6uU77}Ro/M#Tv_9 F0,c O| 'ՖvoL ټaJxטs|^Ǔ|DN+jaP}oMssMӨ:jPqxtBC8Jx-tYß\HA }mv 9k|'WEKlAlu&4*jT"y;4Jb!@bt$g lH \k'஼j'fb#c&ۯ B}F%NJx( RJvrNi|Bf^B_mY*Q :Q?>T\7IZr[dI"H͵7PTqf3^<+pͬ $rY]+EYq ./ږܡ-VUm{6Onmk}Γ1N'86>&ĉ4dW~%b7cbȬ=@U<@d o'Fʷ53ETjtT (<۾QrP+_g.9,\>= }8ޞ3&%3kƳht%<6 _BW+ph ^&f+, ڱ ds*nHVOf<{vǩ~S*,CxFlBm l JfV [W3~^ +S:;Tc6{~)[uq؉ ʟc{ON6F] xjP|ckgaL.L(\)u5+;Dz0mWX^2Ov.,tm6!(ďv@j`^pNK)a6cB-XbINHv!>AwhV:xeE~ݍ  ]WoOo8&>F^'Wi5oNs<IQPoR'/$ yjt3SMLv:G23v-F5IuO_wN?9/L?$2f듎@*k k?-_4hEMuP S!^%* 0pzrj"v1[m7T$W::`!:~G ͨPc(>9'Ww)+L[P[&#{92G;ps1g13Y;e6sV1MfS=Gwn`ʨ*7ߡp2ȿnZI:A0s>{$·Syea[̗,lAH s.E} Y0􈧴`rF٭ѝun4_,6nXxx1 x?09հxx˿nuK0## AV Em,[q2licaO`_ԩ:q!!;(eDxa s%U?_{/;49tw?JO#{L'49cokiD,'D_۾ =uqv*X6$Cb٠BXdx3 6'D:#Q}GY=KXSU._֕_x0ͫXξ(N( Ƅ䏍'¼9IݔVW ƺԷVTZ;i L0zjѤ0Hexl-xIG8`HlvԔw֊W@_?.qs-Ej_m;9[KbV#}ך*p);Cj#'̥88Ƶ[qTP/H~,3D( A:UpkŒADEDdy"*B!}g:x+TN|:"'᎛Po o ;>?uֶfHdq栃݀b,( I^ΞVOpG!~=(FR%+{VU 3 kdcKQB86n{pkz,ʽOƪsB0~qWgLeVWdۡᨚX'@zo>4 ODԱwT4 _SH|QrIXVZ Pf&^: lYRx #˩zv92"Kxo찙s˖pX+J.*~WlIQPs;?fG-ھ=#_haU㜉N[w1r5dS c;~u\-@qFL2D<~sX:l^Spcyǖh4[@z-5$D!:|d)40Jgh@^bD92OI]S_jXaSLb5v]`&p}ŀӶF>-I:K_n[9 -lYg XGر(a䤃7a w"SmZ\. ^a@5+g4_&:9+"~h+Ħ}FSKo{IS5=gWg:/(*GqhͲ'NM**Ϩ`wG8@4}o畟L4%ĦڭM[p7KA1wK1 {5:x"$ώ5&0[`SQϪif*?S١I?o qPT77cpYy͐ cWx̩?_bvi w?[Π Vgɗ^?KsXpPU8+f%X#l^kC?'۳ˍ>هYma=s/LR`-=\I*pD-'8ac~ԵNQpbm )c&bvJ}[ qLB'ޥ./ޗw;UE"(GSr\ΡTRF=!pt\y.L~=f*x=NyzO.'QE/Q4qv<ʊQ 6_!lN6_aEvdHuo2MV LDWX G*,: GV嵊R{q={qU^S\o%m ̝ޫFl4N)7;g[دPM NmWy\}{:Yi?OBGZ'_}G"laIu˻RҠ8nx'b 1_)W*]2Vqhkj)?v.UH>X[~MH VСM@pE1Q[S;}OHmޛ/'O e(-c̑_-[(f[+C eg }D;e ջ(B7~؀ (?kL}NG"^^߀<{`)L(7EiV%nzVO(#Xev@Cç%Wˌ]nMOne- \M7ZP>!Xm¬L,(hy26 Q2Sb/Gl[9ԛ2xEZ p}ag0@מjק}9HKEt U.Xʥzld K$7KnfC#@i:HNV fI-ަ4ǁw>+%?2(tOPP-@љ~< j O)P6Ś$ѡsYW/ksya4*G~kp*=a&|UxV݋i,ZOYz%fRX] ہSj:V90Ω]WCܠ9WͰ9 uJLُ8*}l.&FGf6pBQjW[Sk7,uI<9|_ޏ1  *Nk.XfkC/+&}/NWn@'L6 {vRC )R(G6]:n|3$`[QQ+ZKjAۛλ @of\GM*[Ј ۱; ]wT/:-xMƺ"ĮonA.|!j b$̽9I |L N08,cA-7QӰF}J(*&ehj:8rik~>QTҭ3}hZ7nJo*`nLj&b2X@c`MU?\U~ e#q`Lk-5MzFt82ʆJRx*a?}zu؄})5Zʲ_P%)蜼VZVb7|4#\T u)8P}+ 0R__"fRC80UpL]GX.2ʐoׂ7I 6jOF&VgoP-"+$P0oe:dzڥ(vdLTqPH@ ȗW 1;[@O :˘x~qWxF/aߥƐPɋ@z9|Ͻk҉UA~xb#(DP\fh 0x`wpT=A)FZNі,\f2r Z\NVWf /q2Fπ1lJO.7c)9[lw;QjdO`aVe\LtU3 DdhM9U-Ve-cA e`**:8pBH@MVj[ ^uѿ0d,ɮcJoEr5d꒗:סHm/2Px"E2.Z 1B*O̅VIb;26n/]R2M)~ˆA&%5>B^G۠cps+snǹڃ08ҷkAc߃ORֳLUD,-iF>Y~Zvt( S$h3ռv-Ǫ*PEƒ4R; dX aE?/O#"]J2uu)\4I+<}%KhbMwO L EP0#p=K$F؇ݻ aF8n!\aG145q1F́4 KIWsO+k#^GWhf~$j\"(8)o_"(R Ɵ& !EoO<6$(-kP3l&_PRthNUtZ.VoS+MS4$xa1葢mQ&&_R +Jѐk󴢋@Bi6_#AMmK3cGd[/ 0-^< !iwDmg00lզ)YA5<(',԰gw6%{,FMlR0wǗ֏}N鵬Y*Ä7H,O='CҲUBHrU [9X;@U \s)@#;ZOF߇hRgXzȜm<5?Fdd/(Ş+dkKǓ9PK4҄Z®s4Eʉ\(luG66ڑ$S0VPHQ<7Z`Ss85i9 R]^Q>kY?2 RC4hm>v\p|N*/h3ӼS}?π4':jpg,\JUq`9Fg uxd; ̵4Wi{@$>:y<M6,5S*f`r*5N$B),SoA?,7Ǧɱj!wXKEkˣ_JqlSK5IpëleZ0co٤K2TӬQTC<aPKؔ?ㄖPМ8BM}Kɛx>Yw3|zđ&Ay(}%P(VY4 9@I/ 3R($$YbݮSIUxgRZl>^hDg$U"ڇ6jZ0'+ܷh6n3k̯x!n{?jݳ04r-S9e20**ѡHBxBTÛ ᾄF(O1vE\;,5`lÁ2(8w5d/»U95⤂P!`Vyzhtrff D=;DЗ~>M48ymGsƾhV523iz9(CG9~qb𶑮xV9 FrY){li$ފ}.4wm2>6Nt}Fso/Ӛh5Y|@s6X}op|5Țݧ[% An텇a:7a*;oV*Sh[rW}TСi-Vtx%٣,'ߑ%EemX8zrQQԡt^2xF쨸x9iDR%37=>H{}opw?r/}>}7ثفdyLgoi#P\f ޠEB17Hwh-wf 5ɽJ\X۫…M1l%R+6|Ht9H£%Vj]E/|@_|z^ Ӝ,BqkP#,ˊ4Kcp懵D*amCi+B<}LO~Es<\Sy>?w΂#r}=uŬ_V a7Frl4Қɐ]e՟z׈=vr$A:~bw+)[v߇n϶HO[ȷ`*k(;Z|)38#*fP{ȼ,QʋBRJmj6uIY/x*g2Znk8߉{E .nöfWV|+mFG}(cAXn_93@2rL"klϒ ?i27 6΍)ܦXf~]v;.0-g* @[QO &fi̙ :,hR +Jpp&>ިU,-sN6VmΜ^,6 j|fIZT<us%|1fjsb 5z"YSj'5h(uD`#φOgˡ4n?0ţ/|8]l k]Ѹ'}7٨Riu}1<_f!`=dPb|{jL$=vԼve =>ﲰ acCsYl;:A3D)#@h_ 6JG\T <[7L)ƜC`*~ӷnzKjeb;6( uֻ M =sjCgeL Ol^|Dԛqz>Eʎi|kv1\[ɬib9b:X|JNEdc)mֿï盀ء$A 2g!^iGe d쿭BŸ#ʓNlWVϲCZGv3KҘu7dȨ0F8gg78TU&?Ȩu~%30b5yx䁡w7oZ6d!ҰviTE`=M2 {A5$CpΓSTXF$! Ge|R^V/_|;[ՆT7)qlce@=qCԉM_7H?M&8 3M~'i0hn5=tG/uĞ;ฮuebʠJ;\]W;#U( ~p4VUޕ`Q=h *X!> H;)VIn\o)hg~2O? XKQΧcIx="w0of3| -- ޺e>rWm`ܾb6 `~ͱb㺳.@- "hD4SZ'8-)w[r]C䐳-AJn}gf-:fj>L9A@@]}evMJ:Jk5%FK{8o=XdpRaS3 :'^Dž-AW#@\5ݶM^{c#T +P-6܏lE;M[#nH=QhmF ~j!ZDH \DzG0^jx Dat|IN ʑ"PPkIT#'; vméH]kKA?e@uup]醚O>zoY a*ȆpSOtzA4 㦈`:)%(Up#sY֙hNY<E@ߑG1*k`Y\mE^AxzQLR`jIXҰc&Gцqc4 ȅh=D\e{1Kfq{oKCәm7˕-#A1B +20lxL|϶ EPN ]kOM5sa7h>__4]wO[sTYyObb_w} fKi6|KpZ xZ==XƯ%r7Y >:>:*[5oFKaWT]e`e&)tEM)oKMQO j0ZL/ H=t1- pm_ݴ )mDgKY)6Ł{ +}yWg$*be_[0>GrޜqAAv]cƕg0P#A0\P[*nv?׀FaampYٷ7맍n1wqxPH=T` oo0.t9@I:n=`<"o6 oOW%B<%{jj,kw~ʗzs5N"?|84 p! M7K~ r ћQ1QkEp@7jqy=aeG'ToK+d~(2*E!KkNE(5hZŰiHb(A@ض,^ !B yP]V@G*|$q`Y]7$b-0o=uܽ-ߖ,~HUfyʲ/XQDN)A-LF%lB֔ OVp|=; M67ַz)Uޞ8߅sŞj z4Xژ m+Ҽ M rF1Lj7M@iK{ _mP(ZZ]Hq+(ũ ,[ޯ,{U)Wl$:pE z0`{2,u":T]ҁ:Į; cDj7}l N5[S~MIH^4Ox Q#8;)L;D VTYyPM烢X7̸0W7|;_$.ba"orZ+6Bu zfuNX< 8nRx?Fi83nf ݉Daq56AM}v' P"Ի(-UOlRdtX~iFBQ0s;(NBczOUXUbl}[4`+G;a,lV#>'$> Ẍ;',E^?3y % V/gPF@4‰@}eR2;݅lz"& HaԌ2mwl*6^/ \UW&7p7h# pU a{-4C^SYy'mjdzQCdV&ӥ)g}6p8N ca0FY `fosa:UMzVCro z{т40U?)qĿO }䙳R2鋻v;7ǔ۬(!-!޿~Z{e]r7BŞ=cȯ9i1mCMG|,Мl!:N#칵NFz'cg»Xʒm*qkه=ej-sP0V )3]*'?]  B~yÏn=1ʫ?'0R0C(y5VFrL \ }t0S47I '3=<~o}:t:8""!23,()fb1[ FKM>TߵQ{Á[bh:ڻ'2}ܥ*!Β.nAƝ 6HAӣ0Jƍ:*Ye@B>..ZNj́B^0+)D6vԋΑCaV_,\[+D0ta1% gAdN$f*92.S YMۆPipOnJ&n+CS?f(7Gj ; mTUӰW< ,CaP|V٤3GO} `cWg/UZywq#A>1YHI}d|U#ev,lR7^ X't=rTy7Uxɰu-Gм%YLt3v̞e" )ZE!`?D %4;%9$[jOMɻH GK):$-o=tq -m %Sh8'żndPV,û^/BDlىl ZGdbەWB`S̈Fƫu$e\Q]B@2I8π롹`@]/StBܟgwf}+K$wWBqc5!Y 8+^9'ivmE!E ~g4⨷HwV|M n G9hy-bτ/g>pO񛐾oF{&KuZgº{B2=-ϯrblMvq'kWl{N`$p;2GŹ0pȌG"#D0C<((vyMl+M ʾCT/Fx۹lkOTmD=C CorKl$adžWD M,'.JTkbPۄ*.BybjŜO:*_üYA<0Kf9@4L]۞ c'"o4Se{xF_2Morc^q.kHv{joa.XF_qN61Ĺ#Qi@Rƕ >VhJu-:L2K;dP8ӯNc"ߚ*/vۄ+kEBof;ЊmnՖ$X@9U%[&K|OSTLܟ|$иj!1Hy븱*}KoiI"޹;m̟_j5i~PI¿w( %|̓. ZٴR6@nN qۧܥK'HC"̞9]Ӳ,7NLc?`S ҨPCF(W($V/Ky*KJ52^ ѩ1M}1HWӏE,xnm)&lcpX3G>3cvX7.[e[})P]wfp(+OkjX3U^%܈{oY{Gszbo&̱sv +gH 710 X0| ev)b(l 5;W_Gڮƒ`Wu/y#Sa1[mzUQ(]K(?jwZ JIe 1dTZ,)A'>1kUP("ݢWTsh{,b5P()2{F].f*HolZPDl(XIik dC'>B8RPiH6lôaf=}FNlgRmSRB0ʧ&"8ٟݨ9*NS@Adח؞?6960CQ[M?r޹}G)޺l$ŬI# -Eu{olAYW{ބqyZ_$4 ;3֎UfcNoMd[(Y'0lxYѠjXjڋGx N {yPF;p&'64vqp .+VI_0tfյLBDAC$X*5uٚxw{z_1{rߗq8y叏&'~as3u2*VoS *|O2OV' 'lBjX&k[Aa?.QBoiGTdCPƫ {Y;BV< ):3W+D7u:\"nCd4}&cˀ'+} vfBl52dMq5;BF&#a)ɍb:[OAअ>!^ Í\YI:̔-"G=uHP)D68 'ڠdǰ|Ϯ]~;eAj?H  *ůH[hB)g$Di;#gTًFTi c\[vdshݏ^yv PSw{]>^:QO0Q;6`S.a9܃5U7>l@`MR48/oIx,>֘DbϸZ)OP_'rWHpVAh`G\+RbkQHh`EᰀLY\YȗV&K uz+5K Squ%XL0)N2:i_rM " BT3OʋPnTWN/VIӑOtXO+!86=rQz ?Q= izZ7xcbd{F'ȼP&.-Eam8/֒Vߪ޳^"M$%Gᱍ*ص@Gc{TQB9!҃+WۍH[-;-jC)׍|R;x-oϧqvtSܜMFA/QKϠ=~޷rޑ >q\6.qCvxʒ~R ,jR.RxS0$n,l+@]˘^>bnz-B'kءc X [ly#AɢXacfsX_yY{(+ٗ}W)O'!k OB1h>H9 !,j|/5^o<\5 6 q>n<%BHq}YEfsc|37Ox}*gyk%G`<gLG cn 44 Ri}Wොbh8tň Ob.GkoN5V˥q%'C|UW =U[hL徽q@Av|(gffy`Rm\ҹ!ϖµg|cχmwku[Y_ 'Cz 9#FeD6̃'pSLCe "X&d+B.Z LT2R7#OdTk$+ )ZՈ z J_1%oEoxd$fWFJa %9l \Si5Cvs zxCSY7q IzHA0;7>e2g" {,sN7`n,ovO浛('fř8w0%>"G "bQ}g#6ef~pw%ljqT'pw:H~i$hE鼃HkV?#S8ǽt!&s6>=Xљ wmӍ}yW} 6Df}q֞. Q33BxsHQ؛l-T'?7]JGb8wvda>;q˂9-.&(vf=43F vGf#u.vuR?rp eʢD~yVi%;;gnʇ 2Lq3r2'7V(JI_ ?1u6`^s&GɘCJ)I]x9<*yjR]^wu[ŢKxIk 8? ^]#XnV; coa1J`Hdudܗ>[`5:WdF:OTd-|$Q? ?rf{޵l5{*-:Oٟ&<S Јf]t@H:"C7@ G%kyܲuM*dX-6II:VdEdXH FQ]#e_E0x5)ڜ IP5>!*_X.~Yuv\CO۞)8B6Ԁ{Wg`0L=tOF"~ҧSۃM閰_-av /|8+}tҵu*1.K7i :TFk0qKZܰSNpV (Ďk=: |C1%ja>WlTvƕjK@ntnR&ؽ ΂ r}fykbHcK>(n~)Hwyś&sJ+C1V!)Y!; N>0OVU1~tr!f-*ַOydo;Ozf+qtSmAM/:"{֬H%& MٷrZjE}_aw9z=z2&M:Y5hȼOw,ڦWll\92tIIs$A7N$@HC ijXEԣѮ.Dj,%?{SCSl@cLm~|dQw zFo˜޽|ON+D8P0zEiu*/ #:w#T tOKmeg Є֡5P"/2Zv{5kt~ V3QOO1S߲= +t ƗnSR~P'q↼Kwa2 ͦO[ղ P@Jԥ$4KfL7Ab-H݋ZХ1w==*ZuXaWK PkRی6cU0-!]"~e欻7񳉭r-$GQԹ ۯhLD{ !:l,Z;S&ܘxu C{XqxXD6`JQS.1A2 5OYO^$')$_TiR sGqz'>Yȥy)F1Z%]ZjWM\W%<`́eP_:V}d  % P"yŒed ub.ofpdtE58Ylrm|7*j$mZ od&ժNbZ L51g'݋}Tj(ohITI$H+g-(^|hi ۣS f(BxޭJG 󴻼)BgV; Ir _/_}}fDiF:4"xI|?4h T$:U]Ϯ&;D*kk^.g{]%NN.>x~ H^K Y\WL- `k;  wΖںc~Gp*[\E-ӡ-2eEč7b?h>Z#aKQԯ AӦٌ1N%8לh!kx;z,~w 0&,om3 ˊFry;bD$ hj2LU!vͫd r3҄` OCOt)1n'Ʌ#s<;V/qd0^Zܹ"l#]:S=\@{nj^5TsE =a>1Ʌ~w`DS|<3ka|aKm{.]7"+D U'leI6'0j7'-sy,v0D$fmj YTP 2wT[ڟrgANs eԹ1lӡ'[K)]*Us~J`K ̈́XfY%Cb;; h% ~/o._-+{uRˣ?~Нnȃd,y+^V+h負RйHп̈́bwԉ~1'5(BƝ`M뛸>]L!%z''+vd "kMa(C{܀u7nr5Oܪ#,0y R]a *HA4D1xWkӢl8ʎ#luq}94E""Ju9 ʌB9-r7%ގK~{oHމ/?d HtGY%3hyjx`HZ0SY;Kgͻ\_͡*t'_#4/3A33'Aլ+መv1*N/ȗĵ2?H%b ̚eO>%pX),LT7׀7HhH̆ܕ7$tZ)2nB8owZ%'~IF\ %͟ "H| 4@/pj3{FB6fV8RTHw{S9Qϙ6ߔwɼbcf4ӋF ap@CAJ Zgwz;1!&y#m);{U]NTfjɼI5~e` )W[z bDY9}4TS=zoE˦_3o#J›F˾xĊKKX`\od.5Lԇ֬w~/^ ,emӨMg#BɲSf Eݎb"r$RkgruHMk Q>ئLfS<{g6W͒lMvEޕ@qo x\ΜrbȘPO-vlX <<~F/LY,/hBNC8IĐ`00r UjW? kzu^?MOZJQsSik1ERZ5}<ҥ^?L}c-h켖C"n9ysTi95݊ TJ9A#K?|@3@}7%ܵG[GGsaTC}l--yO74 HsRT9jՎ7F*OOJ]>b턊 P!/Kr{ H=?ˀ쉸EAAai+GtEZOyc]˃)»~,"BJvӓ886}#edw2|>#t9Ƣc7BGr\~]k.(8$̶4mJ&pGD6"+uzW L'4{` 9 %.ùk=r0]n9GIkd^2!֑C8q_rec]O65O=72j_Eݏ1c##8#|eQjg,{ɿAeLBE*YBDH*H,:<,ͦ6$̴scBd+ `IlMy8wݰa{ZE㤇|x#.pv3*I/w SR/_aL^ f<7_?8gn81Ici&) '+u~갃:nrawg&eQG:aE~TW;GY g5¯_u҈K^Zgt^@s[/ dZkX|0\n>JY݈=_9rBf+OlXSyT`W"R37gy_CGw@צH) 'yMf7>DUxNVtbgkC^Lcp{v]cp -)Xv ŴOO.:jЌ. v,F 1n*#u3vl:8*7$rv%0CStM^fZu u( 䒀tq=h4xt/W]Io}.'.aylFS\w#)˷f32} W !].Z83IͰNtM2[n"!nYL2+^Bvp&̴y"/^(O]6ce)0C>eJo m#%V9*y9Rj `ϖe4ISFxTQzn}p0k :J,Ti~ RAt|E/WM__@M8:k4i2&F΀VΘfoU~-찻3}x筰Ptt;1 m-]o]RCKZj_۵+#ʩ)zey $zZ > hm⨊ä\"L:O2&.\1,9W6&X5 j2b:o4GW fă ?T"b $8@VE6 )ˢZhϥx0[Mr9'S)i긐Ϊq==ҙd0&6SQ@Gz)rw#މo^1 3 M[Ohe}ӽ,;7idhͽ~[=X2yN*o濤٠Ώ<U䤤Gs2 {FRI!tޚdmEHW+W B^uQ2vkHFS!%?  9Y]b`~d2K0HYv h>1G <<㧱ݥP il0SCH8 PGշQBtJ:~qcݪn~1"ĝzE1^`N?'Z=`:d{F9h\9.$kЩs p f aPX ӡף%^H%vR7U|@Zhm,eAfvTbKƖde 30I=ZxqE1 3Fe-Aähqϲ3 |q^d0aP|/-1sAj na4۬Uބ(Ǐl}N=Pd7#61mb*Lg72ft3FȤTx˼mJwWU0[ҳ@Ӹ~Ib3#Z x+(ڜ#S;tVTw]h;-[eaˣ,j%sa hz7IfKB0;/B]>؛fmL315ezԙs\qy6E \ɜ&o]M0d=O2:$S|ZCGx^#uh-ܙ2@& | !QvPP04ۤI9Vh3_"YS2 x\'ǹLF= ;4O䵆N1J? 6 fDWf!&}-jK9~ [ <[i)ΞM|0)~OۗL>׷fVZst'P|02]X9Owgo.M8tcWTﱐlrmG|?S*Ҧ%jV94=ZZeR8((=۝m"=>XSMR1;3ws]Ei7]'$>ZD6mW󞃖 1F=mkO9%T}{2GاŲBidPί\cC)aҘ#Gg 2m¶PLqE= }'WofEnH%L Owa"=,ʖ`2:F^@mǎBX/0}'km ^ A%Ŝc`)ehGte3`5"=̍6Qܔo#6 T,R\a/֬>ToqLi?a `H<컹zLtE޷uQ$ڋ>~E6 lSwG&!]^Rd푊` r3!gMsm=g W  _鸞M,yC8F WhӢuyD"2;\l5.1F(C'Eb(Ig#}w)#B$_z!h_ ډ6&l2Ghۆzx]%pID|]0vɰ t"٨q9zCGlgga:BZqI`(4a)'h GiZפx7d儫!!2㼊] %y,2,q2ұڛDz\CVL}"jM_E7f6ii9a2E}@|U])a|Xy.M,쇏se *8Qɷ!iG2qc3Ɵ(v&6Zx?+H" 6Lq36y(T/_i",AYi*~ okТ8t sO[6J+Yc%]T50=4/-iH*rҌ$rWK"ҶQs znٸ6]OOㄪL'ԒNjuf6 ?1z)9jxv8ÊJG$ʯs!~@~gSǮT3 uV zO*S8Mm)mVɠm{1ƁCVL`D<(#bul$}aO3w/kM5!4 _4> N]tK (H w!msʗ,dZ %{p BeKs͗"ΝFr29Z--oCW>T$ڿL~2/8tu;?PmSbAfHP95Tj=? P+WՎB:ePiJdZP JXe]M(Cc6I{ 0Q"}kĘ)POɷc9ԠV^ lQWfRh"xvuر4S?Ί@#:݄NB+1:c8'e! Ȧx+Q7͸|oYpKߝk"8V9y]~56(P16 ,w n)MXci#Ͽ^TE uRn`$򨡑90$Q;3.S)>݂-@*1@4 !lEeD4\دYˉ#M;)@ utRkt}JH|={K{lT$ Mb@2$^6#=k ?֌P.ˤ̽nÂ3)?,@YsC|&߳ : cMZFpfkَhG1.e.b)qO2g~~\O_6㫋贇8C:&૸5a/ü7=iJkG 9 w!5NF 2ǖĦBy8R}.@KBf&hm\%E~oOwۓ+ \%ˁ :Bm:|]Ƒ{da͝awV]o*DRu| 3GCnbQ@S1Mn}Q`dF2JӉ[y 8h dqpGar[jg !P=݌SWԗ:-WXٟy{ }d;|p+E⯁t<r(9-Kӹ"X@0/w^tBwpJf64oћsEк d Zl!g5/07]s;R4%R. ٷ!'XYZa1bOU$Ь 7Ph!*(C#Gy\Vsh~d( /s ~<n{KJlMzLi_X&^/<?DreF~^\]bkw>J9ƖG,EJP>% mg,5+NyI/k)1<ϑZ_-_"'9N#OK؇ ᶿ;0Ӊ{^7q.ȟbۂ/w#u2ӢCw P 0 eѰj~p+[R\p tIc1LyyI>Ǝr܆)@O 8sC񕑊zj , 0Cz=q#B:OKAxCpoY饺Oc(jER57DAuHd%@ɘӅ[UkzK: ;xð1L E{P68?*e"u<|;1a.a}H+;'yJ “Hv 9EKx`π7 RkP yZsSHܦҰ?tf+yX`Hݒ J§[^`ÉegӡH3?ʤJiuWXjqM\Oiq\A ':*Ϫ3A=/=%? _ڽ}:\Օ.| 1),uj}.VB;lX[q's*Ѭ_''ɱ}0O6Ϻ BA)\o0:n-cDto"}:ۮ؂vudOuq&}ь*Y'+jEt*چA *e# ]yDPVyxDѽu~2N-O) Ko3O^vӅ-ŃPp1ʚjvSU;ԓYFǦk|td.Yƶĥ1/F˪T>㐹QNB "[x3.;t)9FahE"=_ yl@ AyGlVY{ȖG#Ǚ RIOhx'A;\~B>bmx~U6>eѮyha3ZzĽ,Ds@gA B*t&$ gܚ94nvB\p4)oce?JZln̍(`20\, EOX`W%)yhu)d0Tgm +=CProR+@ڌ˸D4v8$CK!/nn5;2xslU74( ^Qw2().3)ewV3?Է.S;lvoH)sItĘw)~h #Ge\m*]xoS>͝A ddLEƄ'-wp\a|]Hl3Q4XGjoqY+Et"e|f+N")1nTPM@Auvʚ`mR4]7єXopB-@Qxi'VDJXl4Ɔ纨n<`)E6;{Ѥkl\dU>QaEu)ܻGʭ1086=^#IPOUH(MЋxvd4=iJI̬$j-ႾҨ,~Vsis f~ՕFFEM{Hcq? u36?W"iL_)*PqC&_z 4\` ]sA'b(P/*j+SX^wv"ⓐS tiG(@\O#tO+Р(rkR.3=6*2~t!vjט1وP&6z “5Fb=āB_ ɸ\o >| (Lv9f۞T`O9 fO1n{W\KmnK]iNPmq8i9:QVYG 5գ!=hv0YxRki&x9 >` inׄ25ڹ-tJF\ㇸ=ʝ{aNF!TI EeOSL=ي"0l0ryc|MfAvF 9;ەzjscpLȔ &1vrBi0ⵆ$vfK5yIw^m@ŗHp ^ߵpb S_?\䄯_@ MfՔBSLii׎.g(&i՚b(E{v<3KJ`%&k~|?v]xn(D@"iԓn4%)$l-()FD pi1a@c7J9UxfVkF{L$]Y Bj.=R(⚁ Rrk H^hQ1`*(&_|$);njMV}:GQV=Q^ɀ!.tBa`awP(.l+]9g㗾~d:i$*M1M>;e-DWk*ou흝3mq 鉫u0zp쬍C*UF^J4_aD67BtBSŴ9b@DL$xO4 9hhM*b(i?KT3pr9*iFN%FIU6=|޿Dm#b1E0O]C'pus~!cM5т-e/ND~ٻ@fo3QfEߵr:Nl^(T1Q"pm6(#GK>7e}вZ:N8#UDaWL]+Ѹcv83ꋚ.A7d]45aLX(uGC k^>k0+HS@adW+3VΤ5F?o=$WHNٹhZyŧORl]xL}tMVGb1fJd.  Ӌ7J4)k<)b[(>~u˙}n%  eK䜟I[35&l}oRI{@(! *)a!)_؎` OͲz׷4DbguX&ҽC- a$<*P(NGnioVhD&`r8}8ws=|n3kf}4͍˦{$[K嵌b A9 Cv W7ƕV}tϷ,+qFշe9~cݽ% W,Z:0y T|m²,̈́i`"; LL`j޸ZsgV(u{;[VPֲ[y)se@,wb&RP7 ?gV6⡇GHRN~ڻ2A-KPE. (#@IOk4އX-s{J}VqWT0$:5|K,Fg_  +MȽ!Z%4fޤQ,q`k-ܞh~ƱC$F^v x0?B+,j.gYZQ8JTA-2H|CK!*А5Vf @bNRٱI{:,Mbf;LYFUimwqiWx< NjJǢ,\dOKxh_h,*9BC2/m3?|2dn&,jqx:0FH;k7{4v{mXf~)Aκg{;j1 WtѢ~,<\EvQx 5>䕲^rR98ׁq ZRTtmty/C0/9^APfV/4O=hm{;|q  W'.|JΨ+cU'VL466$Te;{IRb\ZG^ ⁳y) $]E9WpptS_f}_@c@'h9'LiG4Z|8i3{=2xK }e7톗HY+/2o[*. T X<#@ș}㕝I!R')LE:c<9̜$Oټzg4"{o͡ˠ Ro t} DQm g1}es#' lUR&A"9 ]asXƌ]*W}88ev؛-ٻ|N浏X6uAabL n6M<:.gBEkKf;!79C#:@sJ izhϪX50 G:&C}em~ukB`W˲`1 &G}ĻZSުX$O~KZ9DOߙAh>xSw9֏gˣsƗD\rVgBCDĊ8H,*(ҎrH=jZ^NpV[d\VbiRZ笘R+~LLߕn)cd+>3ѨGԐ**/&RO@ NYHSlIpn5̷Lrn d$MD;̨ 5Lgj^[ `8 䭸f'!=lEu`-#]ji 76l.pL2~aF$67񐡃!sVnZlJ+clpߌԠWui=M‡Yv~C%=mW۱Ah?7U7GVmmEk#u'&:7)S`D妨}k{\\Yդ`u#َ:,&`y!瀎XHI;T(1C! SR<">qGWt}S}X$/,vLCg0x!@l. c0d{ /dMٱ:Y{@BE'۷D83 !}-TyԚF.R$>7JQ} I&& kc9 d"AL>iCcԯN\PÁk?XKv]HL纜E`{U:8FOm}(c1b \/-@w|Dy2tA/ U\\b1PQn'E0(;tshkQqSҡ$dWh l@W/%ܹjΨfz6vVAΠӜJėDl\;*Q]@r`M0 {u@7fjQNHX^P*͋D뤺jja`A5t2#?bŹ %%90 e|~e6==s@/)8E}Tƣ_ѩ[Vs<*i$痓 ƥP! )hZF:R>-0͟*^F7[\`mBOХ[۶aSj f6 .IӡեmQ"p|~j])!O益>$GzKQC473їLad鶵 'T vTnv.b9:©^ӫ$7xɗ_$ҎB .$]E;]dS. p>{(6~D& ʞ|WL%+=6ģǍ5tY"sɅx;'e%< g5ed2 邏\)27OΕZWi,"Z~Y+4g"sZHwǿX⫿Cy DdAWYT7zn'dY0`a))I`Pq̭Yjª#vW/kXC^L`?}WRޖ?9z]Ǡ3oӃZ_^䋨9 +fd]*AWq&LxM]h~ V񮥀V]hz?h5Q< ?8^ɗϞI1!ڟ} F ls&@T(vebJD&) C ul,hXCl2{h2g*$3ϒ:j'NjM ^p6/^S|IV D'Fl]S̋~2bzsEPv-Vц_N )DZz-*<ȣ9wLc"3rbZ׍ΟLUL(o41Nm28 G7CY%a``bL* J fUyO V%rcaӱ mw!o~#p$ªq KaJݴK['D'3J:D /g_% HU;HР"Ub5Woh$%6 /~p0G-աP&]jK鬡\9cFt/T'l1rdnZ'$ B"ZM!7FNWxB"SES8 `8{( Ă4VםpSc&Pv~e~VY<<-Q/EY;oKivw_yϏE2g[bm).OC-ʇG2M 0.+fCȶ(Ƴp1ev?nRF{u ;5A:nٱuF_KAΰújy4[Fu`f"ձ*KR۷'c|FWi- "Y#&ReaV4ΉQ>rI(0)'Oy߼[ʴ5JaevQQZoB9Am~mpmyNMA} #u5bIh_a@(w]L:FkvY)QCl5]ZH~Ѕ*߱ĤQ >ic̣MLӕ>F#ZPܞFN6MO(Z+:3QNMdfIX5 arl~ =|ف f#z8Is\!E 'QQmZWXھf%f)_ ]+5 wصLysL3j(A ҭbbe_><n.m V7$~<4Kk?\|]'@/0Q.q㺭o䠦v^vVߦ@v0 [ޡ&_Z,._ Vx3KmZmcUiY Ԏ)fDٍ@󶡼VMp,Nj>mR@S {y3-8mgC6(qĵs,%0猪!׸yOKr&[ g55a]al[{)9oo`^H4J8T)s@T_=K(Q]qZ-mŔw׃!lkR *P/WmfD mo}$.PkVK+Pvٕ @S̫k69d Rרy7y䍊Z5+df2KY?A|~Ȋ/2nʣseI!IbwL)qS_xi#vZ1w%m#Chz\2hڤ)^;aVy2yVc&3 0PApoh>gFȥT!^aVԪZ.h$2BaWcۃE3Ƒ]|/q] Bzxk|q]~LL[wFXs)~%1t ãA@ұ*ȵ5znxW 0+i/N(s>A95>aP ]U}ܲL;*0h8PB~ǁ^Na`ߩ-߿'@BˬpCa :ӆ ߄^vӒb_gSODW$;2FXh{j[р~`Uk aD"}Z_8l݊|+*0ĎtW >. 0Y"< e 5><&DIĶ DՙXȷX"p } P <$%}gTm&HiS%Q lPpMO¡ |fge6[k|5z(ukdtݠ΀b:^pȱ@ɑ1\g k} Vd]4p9w6fu<sspN\U1X]EgII ḁ28KtD7 W!$XUB0u8SpHiD06@ IQ/kXz wf- +B Y^v*8f,疪TT̰RsU@a1R6@N?n5)*<Ê7 F2s8g,} |oQOD6وSN;Oܩcj*:5ӫAՓQ]IVFH MfU)DxpI"tl,WP eLN@ZuĹSBqR#Ũzg=A!sڳ T+e{y  K "A;ԟ~MԅD<9w6a3DM*O[y><s|rh;'sUCMn>A3r_>uxb_(t'h/x $ PJ:$Hq41t&H @phgv *c~n=K8ܫ.!Ρ^gUCF?p}M0QfeeYվ|F #?"͑g"e8a2m $"\LZ 6ZC0Y!~$F 3S_ eSiT+Fv/o^7Փ2j&-sUI7q9㋶]'),MP)+"{aWĉ \u~o%rZhG L<Ē靪r I&ƌNwQa<̑ #7AMwd8㎤?݊5$h_r,/To%8" #ZAS<%B:-J!BF*w(uJ7+vF?A 2rI=X*"lWWytDA9Yp;ݮ7πRlb>.>('e2_IY\.JjynKnwq'/STm۰ cq9VZTKNR%2SOk)S[ 6O6%J`8盟NS=x#'nr.e): F@4=R;)3]SGa; tw?,ʜ D4VkjuA:)9X'k~[d9֞x1:rCZ$fwkRLC*Z%i[ˎ9kq{Ybl9iFvHcwunQvuѷ˛x{Dp(ϤD;h<=klrv+B`? Hs9 k) Ҫ{Ȝ- ˉRTy8IGGGDq纨",V&.H 9 ob}ݩ-M)MoA^g eӪƍW-]y9LMWO)Ҥ4֐XO(~4ȸU?_kЪ~3,Ëj"I8ZB4aC),M ֆ1XyfܫC |ԯ֩\2?3|c)xѫq>z 秅)Zj\Z̋Bz=EU :ΣJ؅f](4 tX`0KV 4fn;唛Fj#:P@4dD!֢%[xkj@ԍጘ˾ b.e'ʂQ%/lZo_m ISR A+T38cGtA7،w[}ãPFYaBL'b]`WgusY*s=([9*>nyw1 .PB=yWt N_Ueb^(/>…g (/#ZSoZH;VUѼl:6h4|p nʌXH'y+V7Vv \-y>&%3o69+Ʌ'gQgJyə:xvPQ;}~PåH 6d|_IE4BGi >E&Jd ^z=Xdc\E;N%D?L'&.}N!/D=jHB,Q;(g#h&Ш&吹S+YfAĐdoO 8JDl%S^n̊㶲G# ($XGqbZ;V`FI2h=bGب.c.AjP.X8zx\IW|`%!/ۍ݁T 㐛qyYp Qeuԙ_ԃ cx;Q9f|!#}t׉=kHfph'sdbvŞ: ֝ ɽNFbN8GEs9cU,0[r-:΀roKzTGl9w*YӹIy7I%!*T9"8Dg*^8*SQ90.Fި_)~Q9#ԩDe_0,5$Ij`+9pGḋp\)ƻS~6%|ahQҬ݃&hW-$Ux!=P#qvq6ﯯy5ݼ ڨ aHpZZiq-0nL輄5aEoqgWΑ!pj5A5R=hɘGvR&D nM .0NOfpo@6~:ص-Vyfv淄w%(m\VjAwp 4:Bj5j%PjQWPO/xjjzIf@AXث ;~rKq6wÜs<ϊ,aPA n}z4pc@M]DPZTF1,{_ /ͭۧ\6 aaP]xf䕙<)rěhW6!Ďϡf?9{-A@~N.ҚC`uZ wV;V !hUҺ*22axjѡݍ>uJ"p#+SIfͦE 8~%>GV#Yx@V Mw¯ wъ+Mk* |ObV:0;az[v9WF^a)._)s-5לּUXȭa8 95kJBIe%(ɇgQ:PUNDb2dvFsIID@lr\ͤ~ͪ bTlsy6e!w8xw` u $72إ=8roӝDƬ d j ʑy FS,z61"BZfš?X7!dlƃ*9t%ȷ3մ̜X@ 7aۡ'7odTުQZQVL&Zhʚf9q#j8A5^ "nq[*>?4%TJ`m11K )R -.U"AXۤa 0s zthxl8u\ 4Z# :$䉔Q\ck5=6ˢ8ˉYkW^5:?[}'@@/?(p=@<iK}ڵ{?RdȆZawҘ4#P>ցo}4~En"^udC"49 5nH:^0rf.0.][`Hf-Tx K?guh)#n-Wp# ?Ün5y ,0fDXmc~; iLIqvJ>ᆥ|ѾoNƸDBk&6tp+޽Ɂ8/n?U/=9=^3+fZa{bAjN\|[+g2x0ff}0b](Ty[[t~>򏌰rw]/rTz!Ma[]R0U)0k^pjЋoj8 F}2$<*-DvCjjPH+,H>~O (>Ίn0zg- xZӻwN3Vg#-a e4!'.! u>5nX:dZ-(gp`f/Zd]g;6bUtWs崐fHϿѶ'W} iNyӸˍ"yR0k aX 6aZrjKD5;& ty^&qFД] ]+l䩶a`07Iܸhb)L/UR)9FH_*21tU@L?~Da6OTj%Z8k|MW762x/vdI3 +r~YF*m\el9;\i#1`= UVahK2ź/ RCnFlyC(}舐<OŬazJ;^Qdb9meJ O>.>Uz -3.يQi ;b#zG=rZ2VIìVReA <,09~/j7y* )XgxܒNtߛl{*֋+a>ى[?h~FԒ?(]wouJ8DPdbٿuDvn~lݦr((1=\8*;`(s(wD<ӈ濡Qd(Nr&,{~a&Thwx~e/6JShXrLaHաhcU#;uCF ?0Bfit9>lM4I_pS^אkIܟ$?_V1wYLRw{nl=˰L}ðگϚӂ>}0ӆh0xOyJj'PSspmNM/gEttJ8u))JP<Tܜ+[Pri4j3C Ѿ~TLW IhHl 11_rqd(W^Em=rڙ5mCR3|-Gv2X!+{5\w*HR3~~>XH$xa|(rf/`?f k\e CeݱlFi/1pP8 58ny]~Gi_Gug.3Jya(PI47fCGRX lwOoִE@F)P,5͍ӆ黖 Ut;u uGe7PZi$Q1ȃiE-a<&’B@^T +bʗ )q^#vR+RSf- @&nHf|V3rIe,O]GǥLa~D{ʻ: (dW~AfaI,XLM&ـVF[xi ֪kȢႻM %Bq?yޙu#"| ||t7ơ8[V{حD@s]ZL1#M%(>9\ 5}j 3ւzCgT|_1ŋ+7m_ 4ҷU&1,s&; $]r‚+A*˟K}cHh ܸm~.YkI 8b{jcז3D7j1~r