�ɲɾ�����ӯ�����һ��ˣ��������С���˴��ͣ�������P���ҹ��ñ˽��ά�Բ��������˸߸ԣ�������ơ��ҹ��ñ�����ά�Բ���ˡ���˳^�ӣ������ӡ� ���ͯj�ӣ��ƺ���ӣ� ? PNG ?%k25u25%fgd5n!? PNG ?%k25u25%fgd5n!? PNG ?%k25u25%fgd5n!? PNG ?%k25u25%fgd5n!PKZ0].E;E; LICENSE.mdnu[The GNU General Public License, Version 2, June 1991 (GPLv2) ============================================================ > Copyright (C) 1989, 1991 Free Software Foundation, Inc. > 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA Everyone is permitted to copy and distribute verbatim copies of this license document, but changing it is not allowed. Preamble -------- The licenses for most software are designed to take away your freedom to share and change it. By contrast, the GNU General Public License is intended to guarantee your freedom to share and change free software--to make sure the software is free for all its users. This General Public License applies to most of the Free Software Foundation's software and to any other program whose authors commit to using it. (Some other Free Software Foundation software is covered by the GNU Lesser General Public License instead.) You can apply it to your programs, too. When we speak of free software, we are referring to freedom, not price. Our General Public Licenses are designed to make sure that you have the freedom to distribute copies of free software (and charge for this service if you wish), that you receive source code or can get it if you want it, that you can change the software or use pieces of it in new free programs; and that you know you can do these things. To protect your rights, we need to make restrictions that forbid anyone to deny you these rights or to ask you to surrender the rights. These restrictions translate to certain responsibilities for you if you distribute copies of the software, or if you modify it. For example, if you distribute copies of such a program, whether gratis or for a fee, you must give the recipients all the rights that you have. You must make sure that they, too, receive or can get the source code. And you must show them these terms so they know their rights. We protect your rights with two steps: (1) copyright the software, and (2) offer you this license which gives you legal permission to copy, distribute and/or modify the software. Also, for each author's protection and ours, we want to make certain that everyone understands that there is no warranty for this free software. If the software is modified by someone else and passed on, we want its recipients to know that what they have is not the original, so that any problems introduced by others will not reflect on the original authors' reputations. Finally, any free program is threatened constantly by software patents. We wish to avoid the danger that redistributors of a free program will individually obtain patent licenses, in effect making the program proprietary. To prevent this, we have made it clear that any patent must be licensed for everyone's free use or not licensed at all. The precise terms and conditions for copying, distribution and modification follow. Terms And Conditions For Copying, Distribution And Modification --------------------------------------------------------------- **0.** This License applies to any program or other work which contains a notice placed by the copyright holder saying it may be distributed under the terms of this General Public License. The "Program", below, refers to any such program or work, and a "work based on the Program" means either the Program or any derivative work under copyright law: that is to say, a work containing the Program or a portion of it, either verbatim or with modifications and/or translated into another language. (Hereinafter, translation is included without limitation in the term "modification".) Each licensee is addressed as "you". Activities other than copying, distribution and modification are not covered by this License; they are outside its scope. The act of running the Program is not restricted, and the output from the Program is covered only if its contents constitute a work based on the Program (independent of having been made by running the Program). Whether that is true depends on what the Program does. **1.** You may copy and distribute verbatim copies of the Program's source code as you receive it, in any medium, provided that you conspicuously and appropriately publish on each copy an appropriate copyright notice and disclaimer of warranty; keep intact all the notices that refer to this License and to the absence of any warranty; and give any other recipients of the Program a copy of this License along with the Program. You may charge a fee for the physical act of transferring a copy, and you may at your option offer warranty protection in exchange for a fee. **2.** You may modify your copy or copies of the Program or any portion of it, thus forming a work based on the Program, and copy and distribute such modifications or work under the terms of Section 1 above, provided that you also meet all of these conditions: * **a)** You must cause the modified files to carry prominent notices stating that you changed the files and the date of any change. * **b)** You must cause any work that you distribute or publish, that in whole or in part contains or is derived from the Program or any part thereof, to be licensed as a whole at no charge to all third parties under the terms of this License. * **c)** If the modified program normally reads commands interactively when run, you must cause it, when started running for such interactive use in the most ordinary way, to print or display an announcement including an appropriate copyright notice and a notice that there is no warranty (or else, saying that you provide a warranty) and that users may redistribute the program under these conditions, and telling the user how to view a copy of this License. (Exception: if the Program itself is interactive but does not normally print such an announcement, your work based on the Program is not required to print an announcement.) These requirements apply to the modified work as a whole. If identifiable sections of that work are not derived from the Program, and can be reasonably considered independent and separate works in themselves, then this License, and its terms, do not apply to those sections when you distribute them as separate works. But when you distribute the same sections as part of a whole which is a work based on the Program, the distribution of the whole must be on the terms of this License, whose permissions for other licensees extend to the entire whole, and thus to each and every part regardless of who wrote it. Thus, it is not the intent of this section to claim rights or contest your rights to work written entirely by you; rather, the intent is to exercise the right to control the distribution of derivative or collective works based on the Program. In addition, mere aggregation of another work not based on the Program with the Program (or with a work based on the Program) on a volume of a storage or distribution medium does not bring the other work under the scope of this License. **3.** You may copy and distribute the Program (or a work based on it, under Section 2) in object code or executable form under the terms of Sections 1 and 2 above provided that you also do one of the following: * **a)** Accompany it with the complete corresponding machine-readable source code, which must be distributed under the terms of Sections 1 and 2 above on a medium customarily used for software interchange; or, * **b)** Accompany it with a written offer, valid for at least three years, to give any third party, for a charge no more than your cost of physically performing source distribution, a complete machine-readable copy of the corresponding source code, to be distributed under the terms of Sections 1 and 2 above on a medium customarily used for software interchange; or, * **c)** Accompany it with the information you received as to the offer to distribute corresponding source code. (This alternative is allowed only for noncommercial distribution and only if you received the program in object code or executable form with such an offer, in accord with Subsection b above.) The source code for a work means the preferred form of the work for making modifications to it. For an executable work, complete source code means all the source code for all modules it contains, plus any associated interface definition files, plus the scripts used to control compilation and installation of the executable. However, as a special exception, the source code distributed need not include anything that is normally distributed (in either source or binary form) with the major components (compiler, kernel, and so on) of the operating system on which the executable runs, unless that component itself accompanies the executable. If distribution of executable or object code is made by offering access to copy from a designated place, then offering equivalent access to copy the source code from the same place counts as distribution of the source code, even though third parties are not compelled to copy the source along with the object code. **4.** You may not copy, modify, sublicense, or distribute the Program except as expressly provided under this License. Any attempt otherwise to copy, modify, sublicense or distribute the Program is void, and will automatically terminate your rights under this License. However, parties who have received copies, or rights, from you under this License will not have their licenses terminated so long as such parties remain in full compliance. **5.** You are not required to accept this License, since you have not signed it. However, nothing else grants you permission to modify or distribute the Program or its derivative works. These actions are prohibited by law if you do not accept this License. Therefore, by modifying or distributing the Program (or any work based on the Program), you indicate your acceptance of this License to do so, and all its terms and conditions for copying, distributing or modifying the Program or works based on it. **6.** Each time you redistribute the Program (or any work based on the Program), the recipient automatically receives a license from the original licensor to copy, distribute or modify the Program subject to these terms and conditions. You may not impose any further restrictions on the recipients' exercise of the rights granted herein. You are not responsible for enforcing compliance by third parties to this License. **7.** If, as a consequence of a court judgment or allegation of patent infringement or for any other reason (not limited to patent issues), conditions are imposed on you (whether by court order, agreement or otherwise) that contradict the conditions of this License, they do not excuse you from the conditions of this License. If you cannot distribute so as to satisfy simultaneously your obligations under this License and any other pertinent obligations, then as a consequence you may not distribute the Program at all. For example, if a patent license would not permit royalty-free redistribution of the Program by all those who receive copies directly or indirectly through you, then the only way you could satisfy both it and this License would be to refrain entirely from distribution of the Program. If any portion of this section is held invalid or unenforceable under any particular circumstance, the balance of the section is intended to apply and the section as a whole is intended to apply in other circumstances. It is not the purpose of this section to induce you to infringe any patents or other property right claims or to contest validity of any such claims; this section has the sole purpose of protecting the integrity of the free software distribution system, which is implemented by public license practices. Many people have made generous contributions to the wide range of software distributed through that system in reliance on consistent application of that system; it is up to the author/donor to decide if he or she is willing to distribute software through any other system and a licensee cannot impose that choice. This section is intended to make thoroughly clear what is believed to be a consequence of the rest of this License. **8.** If the distribution and/or use of the Program is restricted in certain countries either by patents or by copyrighted interfaces, the original copyright holder who places the Program under this License may add an explicit geographical distribution limitation excluding those countries, so that distribution is permitted only in or among countries not thus excluded. In such case, this License incorporates the limitation as if written in the body of this License. **9.** The Free Software Foundation may publish revised and/or new versions of the General Public License from time to time. Such new versions will be similar in spirit to the present version, but may differ in detail to address new problems or concerns. Each version is given a distinguishing version number. If the Program specifies a version number of this License which applies to it and "any later version", you have the option of following the terms and conditions either of that version or of any later version published by the Free Software Foundation. If the Program does not specify a version number of this License, you may choose any version ever published by the Free Software Foundation. **10.** If you wish to incorporate parts of the Program into other free programs whose distribution conditions are different, write to the author to ask for permission. For software which is copyrighted by the Free Software Foundation, write to the Free Software Foundation; we sometimes make exceptions for this. Our decision will be guided by the two goals of preserving the free status of all derivatives of our free software and of promoting the sharing and reuse of software generally. No Warranty ----------- **11.** BECAUSE THE PROGRAM IS LICENSED FREE OF CHARGE, THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM IS WITH YOU. SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING, REPAIR OR CORRECTION. **12.** IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MAY MODIFY AND/OR REDISTRIBUTE THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS), EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.PKL1]?? SECURITY.mdnu[NRPE SECURITY README ==================== TCP Wrapper Support ------------------- NRPE 2.x includes native support for TCP wrappers. Once you compile NRPE you can check to see if it has wrapper support built in by running the daemon from the command line without any arguments like this: ./nrpe --help Command Arguments ----------------- NRPE 2.0 includes the ability for clients to supply arguments to commands which should be run. Please note that this feature should be considered a security risk, and you should only use it if you know what you're doing! Bash Command Substitution ------------------------- Even with the metacharacter restrictions below, if command arguments are enabled, it is still possible to send bash command substitutions in the form `$(...)` as an argument. This is explicitly disabled by default, but can be enabled by a configure-time option and a configuration file option. Enabling this option is **VERY RISKY** and its use is **HIGHLY DISCOURAGED**. Enabling Arguments ------------------ To enable support for command argument in the daemon, you must do two things: 1. Run the configure script with the `--enable-command-args` option 2. Set the `dont_blame_nrpe` directive in the NRPE config file to `1`. Enabling Bash Command Substitution ---------------------------------- To enable support for arguments containing bash command substitutions, you must do two things: 1. Enable arguments as described above 2. Include the `--enable-bash-command-substitution` configure option when running the configure script 3. Set the `allow_bash_command_substitutions` directive in the NRPE config file to `1`. Nasty Metacharacters -------------------- To help prevent some nasty things from being done by evil clients, the following metacharacters are not allowed in client command arguments: | ` & > < ' \ [ ] { } ; ! \r \n You can override these defaults by adjusting the `nasty_metachars` flag in the config file. Any client request which contains the above mentioned metachars is discarded. User/Group Restrictions ----------------------- The NRPE daemon cannot be run with (effective) root user/group privileges. You must run the daemon with an account that does not have superuser rights. Use the `--with-nrpe-user` and `--with-nrpe-group` flags during `./configure`, or the `nrpe_user` and `nrpe_group` config file options to specify which user/group the daemon should run as. Encryption ---------- If you do enable support for command arguments in the NRPE daemon, make sure that you encrypt communications either by using: 1. Stunnel (see http://www.stunnel.org for more info) 2. Native SSL support (See the [SSL Readme](README.SSL.md) file for more info) Do **NOT** assume that just because the daemon is behind a firewall that you are safe! ***Always encrypt NRPE traffic!*** Using Arguments --------------- How do you use command arguments? Well, lets say you define a command in the NRPE config file that looks like this: command[check_users]=/usr/local/nagios/libexec/check_users -w $ARG1$ -c $ARG2$ You could then call the check_nrpe plugin like this: ./check_nrpe -H -c check_users -a 5 10 The arguments '5' and '10' get substituted into the appropriate `$ARGx$` macros in the command (`$ARG1$` and `$ARG2$`, respectively). The command that would be executed by the NRPE daemon would look like this: /usr/local/nagios/libexec/check_users -w 5 -c 10 You can supply up to 16 arguments to be passed to the command for substitution in `$ARG$` macros (`$ARG1$` - `$ARG16$`). PKL1]#oYoY CHANGELOG.mdnu[NRPE Changelog ============== [4.1.2](https://github.com/NagiosEnterprises/nrpe/releases/tag/nrpe-4.1.2) - 2024-12-09 ------------------ **FIXES** - Fixed printing of incorrect packet version to just logging the error - Fixed and updated SSL [4.1.1](https://github.com/NagiosEnterprises/nrpe/releases/tag/nrpe-4.1.1) - 2024-08-01 ------------------ **FIXES** - Use correct HUP signal for Solaris [4.1.0](https://github.com/NagiosEnterprises/nrpe/releases/tag/nrpe-4.1.0) - 2022-07-18 ------------------ **ENHANCEMENTS** - Add support for OpenSSL 3 (and EL9/Debian 11/Ubuntu 22) - Allow tcpd/libwrap to be excluded from build when present on the system - Allow loading of full certificate chains - Change -u (connection issues return UNKNOWN) to include all SSL-layer failures. - Disable renegotiation and enforce server cipher order when using SSL - Verify that private keys match certificates when using SSL **FIXES** - Fixed incorrect default for nasty_metachars in nrpe.cfg - Fixed incorrect help text for --use-adh - Fixed potential out-of-bound read when used with IPv6 [4.0.3](https://github.com/NagiosEnterprises/nrpe/releases/tag/nrpe-4.0.3) - 2020-04-28 --------------------------------------------------------------------------------------- **FIXES** - Fixed nasty_metachars not being read from config file (#235) (Sebastian Wolf) [4.0.2](https://github.com/NagiosEnterprises/nrpe/releases/tag/nrpe-4.0.2) - 2020-03-11 --------------------------------------------------------------------------------------- **FIXES** - Fixed buffer length calculations/writing past memory boundaries on some systems (#227, #228) (Andreas Baumann, hariwe, Sebastian Wolf) - Fixed use of uninitialized variable when validating requests (#229) (hariwe, Sebastian Wolf) [4.0.1](https://github.com/NagiosEnterprises/nrpe/releases/tag/nrpe-4.0.1) - 2020-01-22 --------------------------------------------------------------------------------------- **FIXES** * Fixed syslog flooding with CRC-checking errors when both plugin and agent were updated to version 4 (Sebastian Wolf) [4.0.0](https://github.com/NagiosEnterprises/nrpe/releases/tag/nrpe-4.0.0) - 2019-01-13 --------------------------------------------------------------------------------------- Note: This update includes security fixes which affect both the check_nrpe plugin and the NRPE daemon. The latest version of NRPE is still able to interoperate with previous versions, but for best results, both programs should be updated. **ENHANCEMENTS** * Added TLSv1.3 and TLSv1.3+ support for systems that have it (Nigel Yong, Rahul Golam) * Added IPv6 ip address to list of default allow_from hosts (Troy Lea) * Added -D option to disable logging to syslog (Tom Griep, Sebastian Wolf) * Added -3 option to force check_nrpe to use NRPE v3 packets * OpenRC: provide a default path for nrpe.cfg (Michael Orlitzky) * OpenRC: Use RC_SVCNAME over a hard-coded PID file (j-licht) **FIXES** * Checks for '!' now only occur inside the command buffer (Joni Eskelinen) * NRPE daemon is more resilient to DOS attacks (Leonid Vasiliev) * allowed_hosts will no longer test getaddrinfo records against the wrong protocol (dombenson) * nasty_metachars will now handle C escape sequences properly when specified in the config file (Sebastian Wolf) * Calculated packet sizes now struct padding/alignment when sending and receiving messages (Sebastian Wolf) * Buffer sizes are now checked before use in packet size calculation (Sebastian Wolf) * When using `include_dir`, individual files' errors do not prevent the remaining files from being read (Sebastian Wolf) [3.2.1](https://github.com/NagiosEnterprises/nrpe/releases/tag/nrpe-3.2.1) - 2017-08-31 --------------------------------------------------------------------------------------- **FIXES** * Change seteuid error messages to warning/debug (Bryan Heden) * Fix segfault when no nrpe_user is specified (Stephen Smoogen, Bryan Heden) * Added additional strings to error messages to remove duplicates (Bryan Heden) * Fix nrpe.spec for rpmbuild (Bryan Heden) * Fix error for drop_privileges when using inetd (xalasys-luc, Bryan Heden) [3.2.0](https://github.com/NagiosEnterprises/nrpe/releases/tag/nrpe-3.2.0) - 2017-06-26 --------------------------------------------------------------------------------------- **ENHANCEMENTS** * Added max_commands definition to nrpe.cfg to rate limit simultaneous fork()ed children (Bryan Heden) * Added -E, --stderr-to-stdout options for check_nrpe to redirect output (Bryan Heden) * Added support for Gentoo init (Troy Lea @box293) * Cleaned up code a bit, updated readmes and comments across the board (Bryan Heden) * Added -V, --version to nrpe and fixed the output (Bryan Heden) * Added different SSL error messages to be able to pinpoint where some SSL errors occured (Bryan Heden) * Updated logic in al parse_allowed_hosts (Bryan Heden) * Added builtin OpenSSL Engine support where available (Bryan Heden + @skrueger8) * Clean up compilation warnings (Bryan Heden) * Added more commented commands in nrpe.cfg (Bryan Heden) **FIXES** * Undefined check returns UNKNOWN (Bryan Heden) * Fix incompatibility with OpenSSL 1.1.0 via SECLEVEL distinction (Bryan Heden) * Fix ipv4 error in logfile even if address is ipv6 (Bryan Heden) * Fix improper valid/invalid certificate warnings (Bryan Heden) [3.1.1](https://github.com/NagiosEnterprises/nrpe/releases/tag/nrpe-3.1.1) - 2017-05-24 --------------------------------------------------------------------------------------- **FIXES** * The '--log-file=' or '-g' option is missing from the help (John Frickson) * check_nrpe = segfault when specifying a config file (John Frickson) * Alternate log file not being used soon enough (John Frickson) * Unable to compile v3.1.0rc1 with new SSL checks on rh5 (John Frickson) * Unable to compile nrpe-3.1.0 - undefined references to va_start, va_end (John Frickson) * Can't build on Debian Stretch, openssl 1.1.0c (John Frickson) * Fix build failure with -Werror=format-security (Bas Couwenberg) * Fixed a typo in `nrpe.spec.in` (John Frickson) * More detailed error logging for SSL (John Frickson) * Fix infinite loop when unresolvable host is in allowed_hosts (Nick / John Frickson) [3.1.0](https://github.com/NagiosEnterprises/nrpe/releases/tag/nrpe-3.1.0) - 2017-04-17 --------------------------------------------------------------------------------------- **ENHANCEMENTS** * Added option to nrpe.cfg.in that can override hard-coded NASTY_METACHARS (John Frickson) * While processing 'include_dir' statement, sort the files (Philippe Kueck / John Frickson) * nrpe can now write to a log file using 'log_file=' in nrpe.cfg (John Frickson) * check_nrpe can now write to a log file using '--log-file=' or '-g' options (John Frickson) **FIXES** * Added missing debugging syslog entries, and changed printf()'s to syslog()'s. (Jobst Schmalenbach) * Fix help output for ssl option (configure) (Ruben Kerkhof) * Fixes to README.SSL.md and SECURITY.md (Elan Ruusamäe) * Changed the 'check_load' command in nrpe.cfg.in (minusdavid) * Cleanup of config.h.in suggested by Ruben Kerkhof * Minor change to logging in check_nrpe (John Frickson) * Solaris 11 detection is broken in configure (John Frickson) * Removed function `b64_decode` which wasn't being used (John Frickson) * check_nrpe ignores -a option when -f option is specified (John Frickson) * Added missing LICENSE file (John Frickson) * Off-by-one BO in my_system() (John Frickson) * Got rid of some compiler warnings (Stefan Krüger / John Frickson) * Add SOURCE_DATE_EPOCH specification support for reproducible builds. (Bas Couwenberg) * nrpe 3.0.1 allows TLSv1 and TLSv1.1 when I configure for TLSv1.2+ (John Frickson) * "Remote %s accepted a Version %s Packet", please add to debug (John Frickson) * nrpe 3.0.1 segfaults when key and/or cert are broken symlinks (John Frickson) * Fixed a couple of typos in docs/NRPE.* files (Ludmil Meltchev) * Changed release date to ISO format (yyyy-mm-dd) (John Frickson) * Fix systemd unit description (Bas Couwenberg) * Add reload command to systemd service file (Bas Couwenberg) * fix file not found error when updating version (Sven Nierlein) * Spelling fixes (Josh Soref) * Return UNKNOWN when check_nrpe cannot communicate with nrpe and -u set (John Frickson) * xinetd.d parameter causes many messages in log file (John Frickson) * Fixes for openssl 1.1.x (Stephen Smoogen / John Frickson) * PATH and other environment variables not set with numeric nrpe_user (John Frickson) * rpmbuild -ta nrpe-3.0.1.tar.gz failed File not found: /etc/init.d/nrpe (bvandi / John Frickson) [3.0.1](https://github.com/NagiosEnterprises/nrpe/releases/tag/nrpe-3.0.1) - 2016-09-08 --------------------------------------------------------------------------------------- **FIXES** * _set_rc: command not found reported by init script (John Frickson) * Version string contains name (John Frickson) * Changes to get 'rpmbuild' to work - nrpe.spec file outdated (John Frickson) * typo in startup/default-xinetd.in (Philippe Kueck) * debug output missing command name (Philippe Kueck) * /usr/lib/tmpfiles.d/ndo2db.conf should have 'd' type, not 'D' (John Frickson) * Fixes in parse_allowed_hosts() and called functions (Jobst Schmalenbach / John Frickson) * nrpe.cfg: 'debug' statement needs to be first in file (Jobst Schmalenbach / John Frickson) [3.0.0](https://github.com/NagiosEnterprises/nrpe/releases/tag/nrpe-3.0.0) - 2016-08-01 --------------------------------------------------------------------------------------- **SECURITY** * Fix for CVE-2014-2913 * Added function to clean the environment before forking. (John Frickson) **ENHANCEMENTS** * Added support for optional config file to check_nrpe. With the new SSL parameters, the line was getting long. The config file is specified with --config-file= or -f parameters. The config file must look like command line options, but the options can be on separate lines. It MUST NOT include --config-file (-f), --command (-c) or --args (-a). If any options are in both the config file and on the command line, the command line options are used. * make can now add users and groups using "make install-groups-users" (John Frickson) * Added "nrpe-uninstall" script to the same directory nrpe get installed to (John Frickson) * Updated code so configure && make will work on AIX, HP-UX, Solaris, OS X. There should be no errors or warnings. Let me know if any errors or warning appear (John Frickson) * Added command-line option to prevent forking, since some of the init replacements (such as systemd, etc.) don't want daemons to fork (John Frickson) * Added autoconf macros and additional files to better support multi-platform config and compile. The default will still set up to install to /usr/local/nagios but I added a new configure option: '--enable-install-method='. If is 'opt', everything will install to '/opt/nagios'. If is 'os', installation will be to O/S- and distribution-specific locations, such as /usr/sbin, /usr/lib/nagios, /etc/nagios, and so on. * Added additional init and inetd config files to support more systems, including SuSE, Debian, Slackware, Gentoo, *BSD, AIX, HP-UX, Solaris, OS X. * Added listen_queue_size as configuration option (Vadim Antipov, Kaspersky Lab) * Reworked SSL/TLS. See the README.SSL.md file for full info. (John Frickson) * Added support for version 3 variable sized packets up to 64KB. nrpe will accept either version from check_nrpe. check_nrpe will try to send a version 3 packet first, and fall back to version 2. check_nrpe can be forced to only send version 2 packets if the switch `-2` is used. (John Frickson) * Added extended timeout syntax in the -t : format. (ABrist) **FIXES** * Fixed configure to check more places for SSL headers/libs. (John Frickson) * Added ifdefs for complete_SSL_shutdown to compile without SSL. (Matthew L. Daniel) * Renamed configure.in to configure.ac and added check for sigaction (John Frickson) * Replaced all instances of signal() with sigaction() + blocking (John Frickson) * check_nrpe does not parse passed arguments correctly (John Frickson) * NRPE should not start if cannot write pid file (John Frickson) * Fixed out-of-bounds error (return code 255) for some failures (John Frickson) * Connection Timeout and Connection Refused messages need a new line (Andrew Widdersheim) * allowed_hosts doesn't work, if one of the hostnames can't be resolved by dns (John Frickson) * allowed_hosts doesn't work with a hostname resolving to an IPv6 address (John Frickson) * Return UNKNOWN when issues occur (Andrew Widdersheim) * NRPE returns OK if check can't be executed (Andrew Widdersheim) * nrpe 2.15 [regression in Added SRC support on AIX - 2.14] (frphoebus) * compile nrpe - Solaris 9 doesn't have isblank() (lilo, John Frickson) * sample configuration for check_load has crazy sample load avg (ernestoongaro) 2.15 - 09/06/2013 ----------------- * Now compiles on HP-UX (Grant Byers) * Added support for IPv6 (Leo Baltus, Eric Stanley) 2.14 - 12/21/2012 ----------------- * Added configure option to allow bash command substitutions, disabled by default [bug #400] (Eric Stanley) * Patched to shutdown SSL connection completely (Jari Takkala) * Added SRC support on AIX (Thierry Bertaud) * Updated RPM SPEC file to support creating RPMs on AIX (Eric Stanley) * Updated logging to support compiling on AIX (Eric Stanley) 2.13 - 11/11/2011 ----------------- * Applied Kaspersky Labs supplied patch for extending allowed_hosts (Konstantin Malov) * Fixed bug in allowed_hosts parsing (Eric Stanley) * Updated to support compiling on Solaris 10 (thanks to Kevin Pendleton) 2.12 - 03/10/2008 ----------------- * Fix for unterminated multiline plugin (garbage) output (Krzysztof Oledzki) 2.11 - 12/26/2007 ----------------- * Added lib64 library paths to configure script for 64-bit systems (John Maag) * Added --with-ssl-lib configure script option * Added --with-log-facility option to control syslog logging (Ryan Ordway and Brian Seklecki) 2.10 - 10/19/2007 ----------------- * Moved PDF docs to docs/ subdirectory, added OpenOffice source document * A critical result is now returned for child processed that die due to a signal (Klas Lindfors) 2.9 - 08/13/2007 ---------------- * Fixed bug with --with-nrpe-group configure script option (Graham Collinson) * Fixed bug with check_disk thresholds in sample config file (Patric Wust) * Added NRPE_PROGRAMVERSION and NRPE_MULTILINESUPPORT environment variables for scripts that need to detect NRPE version and capabilities (Gerhard Lausser) * Added asprintf() support for systems that are missing it (Samba team) 2.8.1 - 05/10/2007 ----------------- * Fixed configure script error with user-specified NRPE group 2.8 - 05/08/2007 --------------- * Added support for multiline plugin output (limited to 1KB at the moment) (Matthias Flacke) 2.8b1 - 03/14/2007 ----------------- * Changes to sample config files * Added ';' as an additional prohibited metachar for command arguments * Updated documentation and added easier installation commands 2.7.1 - 03/08/2007 ------------------ * Changed C++ style comment to C style to fix compilation errors on AIX (Ryan McGarry) 2.7 - 02/18/2007 ---------------- * Patches for detection SSL header and library locations (Andrew Boyce-Lewis) * NRPE daemon will now partially ignore non-fatal configuration file errors and attempt to startup (Andrew Boyce-Lewis) 2.6 - 12/11/2006 ---------------- * Added -u option to check_nrpe to return UNKNOWN states on socket timeouts (Bjoern Beutel) * Added connection_timeout variable to NRPE daemon to catch dead client connections (Ton Voon) * Added graceful timeout to check_nrpe to ensure connection to NRPE daemon is properly closed (Mark Plaksin) 2.5.2 - 06/30/2006 ------------------ * Fixed incorrect service name in sample xinetd config file * Added note on how to restart inetd for OpenBSD users (Robert Peaslee) * Fix for nonblocking accept()s on systems that define EAGAIN differently than EWOULDBLOCK (Gerhard Lausser) * Fix to (re)allow week random seed (Gerhard Lausser) 2.5.1 - 04/09/2006 ------------------ * Patch to fix segfault if --no-ssl option is used (Sean Finney/Peter Palfrader) 2.5 - 04/06/2006 ---------------- * (Re)added allowed_hosts option for systems that don't support TCP wrappers * Fix for SSL errors under Solaris 8 (Niels Endres) * Fix for config file directory inclusion on ReiserFS (Gerhard Lausser) 2.4 - 02/22/2006 ---------------- * Added option to allow week random seed (Gerhard Lausser) * Added optional command line prefix (Sean Finney) * Added ability to reload config file with SIGHUP * Fixed bug with location of dh.h include file * Fixed bug with disconnect message in debug mode 2.3 - 01/23/2006 ---------------- * Spec file fixes * Removed errant PID file debugging code * Fixed problem with trimming command definitions 2.2 - 01/22/2006 ---------------- * Spec file fix * Patch to add Tru64 and IRIX support (Ton Voon) * Updated config.sub and config.guess * Fixed bug with config file lines with only whitespace * Fixed bug with missing getopt() command line option for -V * Removed sample FreeBSD init script (now maintained by FreeBSD port) * Added config file option for writing a PID file 2.1 - 01/19/2004 ---------------- * Replaced host access list with TCP wrapper support * Removed length restrictions for command names and command lines * Configure script patch for getopt_long on Solaris * Bug fixes for accept() on HP-UX 11.0 * Init script for SUSE Linux (Subhendu Ghosh) * SSL protocol used is now limited to TLSv1 * Any output from plugins after first line is now ignored before plugin process is closed 2.0 - 09/08/2003 ---------------- * Added support for passing arguments to command * NRPE daemon can no longer be run as root user/group * Added getopt support * Added 'include' variable to config file to allow inclusion of external config files * Added 'include_dir' variable to allow inclusion of external config files in directories (with recursion) * Added native SSL support (Derrick Bennett) * Added my_strsep(), as Solaris doesn't have strsep() * Added license exemption for use with OpenSSL 1.8 - 01/16/2003 ---------------- * Daemon now closes stdio/out/err properly (James Peterson) * Makefile changes (James Peterson) * Mode command line option bug fix in daemon * Fixed incorrect command line options in check_nrpe plugin 1.7 - 01/08/2003 ---------------- * Spec file updates and minor bug fixes (James Peterson) * Bug fix with default nrpe port definition * Added sample xinetd config file (nrpe.xinetd) * Bug fix for command_timeout variable (James Peterson) 1.6 - 12/30/2002 ---------------- * Updated sample commands to match new plugin argument format * Added sample init scripts for FreeBSD and Debian (Andrew Ryder) * Syntax changes (-H option specifies host name in check_nrpe, -c option specifies config file in nrpe) * Added command_timeout directive to config file to allow user to specify timeout for executing plugins * Added spec file and misc patches for building RPMs (James Peterson) * Added --with-nrpe-port config directive (James Peterson) 1.5 - 06/03/2002 ---------------- * Added setuid/setgid option to config file (suggested by Marek Cervenka) 1.4 - 06/01/2002 ---------------- * Changed STATE_UNKNOWN to value of 3 instead of -1 (old style) * Minor doc and sample config file changes 1.3 - 02/21/2002 ---------------- * Name and version change * Ignore SIGHUP, minor cleanup (Jon Andrews) 1.2.5 - 12/22/2001 ------------------ * Implemented Beej's sendall() to handle partial send()s * Added instructions on running under xinetd to README * Removed some old crud 1.2.4 - 02/22/2001 ------------------ * I forgot what changes I made. Go figure... 1.2.3 - 12/21/2000 ------------------ * A bit more documentation on configuring command definitions for the plugin 1.2.2 - 06/05/2000 ------------------ * Fixed error in docs for running under inetd using TCP wrappers * Replaced old email address in src/netutils.h with new one 1.2.1 - 05/07/2000 ------------------ * Removed trapping of SIGCHLD * Changed wait4() to waitpid() to allow compilation on HP-UX and AIX 1.2.0 - 04/18/2000 ------------------ * Server forks twice after accepting a client connection, so as to prevent the creation of zombies 1.1.5 - 04/07/2000 ------------------ * Fixed a small bug where one debug message was not getting logged properly 1.1.4 - 03/30/2000 ------------------ * Added option to disable/enable debug messages using the debug option in the config file 1.1.3 - 03/11/2000 ------------------ * Changed config file to use an absolute path * Changed all debug output to use syslog (Rene Klootwijk) * No convert all data to network order before sending it and convert it back to host order when receiving it. This makes it possible to mix Solaris and Linux, e.g. running check_nrpe on Linux and nrpe on Solaris. (Rene Klootwijk) 1.1.2 - 03/07/2000 ------------------ * Removed unnecessary code in signal handler routine * Unused signals are no longer trapper 1.1.1 - 02/28/2000 - RKL --------------------------- * Modified syslog code to include string describing the error code. * Changed hardcoded number in signal handler to its name. This prevented nrpe to run on Solaris. * Fixed race condition in accept loop. The result of accept should also be checked for EINTR. * Modified recv and send function calls to compile without warnings on Solaris. * Modified configure.in,configure and Makefile.in to include nsl and socket libs for Solaris. * Modified the signal handler to reestablish itself after being called. 1.1 - 02/24/2000 - Rene Klootwijk ----------------- * Added ability to bind nrpe to a specific interface by specifying the address of this interface in the nrpe.cfg file (e.g. server_address=192.168.2.3) 1.0 - 02/16/2000 ------------------ * Added ability to run as a service under inetd 1.0b6 - 02/01/2000 ------------------ * Added configure script * Netutils functions from the NetSaint plugins is now used * Reset SIGCHLD to default behavior before calling popen() to prevent race condition with pclose() (Reported by Rene Klootwijk) * Cleaned up code 1.0b5 - 01/10/2000 ------------------ * Added init script contributed by Jacob L * Incorporated syslog code and other patches contributed by Jacob L 1.0b4 - 11/04/1999 ------------------ * Changed 'allowed_ip' option in configuration file to 'allowed_hosts' and added support for multiple hosts * Minor buffer overflow protection fixes * main() returned STATE_UNKNOWN on successful launch, changed to STATE_OK (jaclu@grm.se) * Added syslog support (jaclu@grm.se) PKL1]ϫZp%% README.mdnu[![Nagios!](https://www.nagios.com/wp-content/uploads/2015/05/Nagios-Black-500x124.png) Nagios Remote Plugin Executor (NRPE) ==================================== For installation instructions and information on the design overview of the NRPE addon, please read the PDF documentation that is found in this directory: `docs/NRPE.pdf`. If you are upgrading from a previous version, you'll want to check the [Changelog](CHANGELOG.md) and then run `./update-cfg.pl` to add the new SSL parameters to your config file. TL;DR: You can jump straight to [Compiling](#compiling) and [Installing](#installing) You'll want to read up on the [Security](SECURITY.md) document regarding NRPE, no doubt. And make sure to check out the [SSL Readme](README.SSL.md) as well, if you plan on using encryption methods to transmit `nrpe` data. Purpose ------- The purpose of this addon is to allow you to execute Nagios plugins on a remote host in as transparent a manner as possible. Contents -------- There are two pieces to this addon: 1. `nrpe` This program runs as a background process on the remote host and processes command execution requests from the check_nrpe plugin on the Nagios host. Upon receiving a plugin request from an authorized host, it will execute the command line associated with the command name it received and send the program output and return code back to the check_nrpe plugin 2. `check_nrpe` This is a plugin that is run on the Nagios host and is used to contact the NRPE process on remote hosts. The plugin requests that a plugin be executed on the remote host and wait for the NRPE process to execute the plugin and return the result. The plugin then uses the output and return code from the plugin execution on the remote host for its own output and return code. Compiling --------- If you are having any problems compiling on your system, please let us know (preferrably with fixes). Most users should be able to compile `nrpe` and the `check_nrpe` plugin with the following commands... ./configure make all ***HINT:*** `./configure --help` **NOTE:** If you're cloning from GitHub, you'll need to run `autoconf` first. **NOTE:** Since the check_nrpe plugin and nrpe daemon run on different machines (the plugin runs on the Nagios host and the daemon runs on the remote host), you will have to compile the nrpe daemon on the target machine. Installing ---------- You have a few options here. The binaries created from `make all` were placed in your `src/` directory. You can either copy these where they need to be, or you can run any of the following `make install` options: * `make install-groups-users` Add the users and groups sepcified during `./configure`. Defaults to nagios and nagios, respectively. You can override these with the `./configure --with-nrpe-user=USER --with-nrpe-group=GROUP`. * `make install` This will run both `install-plugin` and `install-daemon`. * `make install-plugin` This will install the plugin by default in `/usr/local/nagios/libexec`. You can override this behavior by using the `--with-pluginsdir=DIR` flag during `./configure`. * `make install-daemon` This will install the plugin by default in `/usr/local/nagios/bin`. You can override this behavior by using the `--prefix=DIR` or `--bindir=DIR` flags during `./configure`. * `make install-config` This will install the sample config by default in `/usr/local/nagios/etc`. You can override this behavior by using the `--with-pkgsysconfdir=DIR` flag during `./configure`. * `make install-inetd` `./configure` attempts to determine your inetd type. If it finds it, it will install the appropriate inetd script in the proper location. You can help it out with `./configure --with-inetd-type=TYPE` where `TYPE` can be one of: `inetd`, `xinetd`, `systemd`, `launchd`, `smf10`, `smf11`. * `make install-init` `./configure` attempts to determine the appropriate init type. If it figures it out, will install the required startup script. You can help it out with `./configure --with-init-type=TYPE` where TYPE can be one of: `bsd`, `sysv`, `systemd`, `launchd`, `smf10`, `smf11`, `upstart`, `openrc`. If you used all the necessary `./configure` flags, you shouldn't need to tweak your config file any at this point, and a simple `service nrpe start` or `systemctl start nrpe.service` should work just fine. Configuring ----------- A sample config file for the NRPE daemon are located in the `sample-config/` subdirectory. If you used the proper flags during `./configure`, this file should contain all of the appropriate information as a starting point. Running Under `inetd` or `xinetd` --------------------------------- If you plan on running nrpe under inetd or xinetd and making use of TCP wrappers, you need to add a line to your `/etc/services` file as follows (modify the port number as you see fit) nrpe 5666/tcp # NRPE The run `make install-inetd` to copy the appropriate file, or add the appropriate line to your `/etc/inetd.conf`. **NOTE:** If you run nrpe under inetd or xinetd, the server_port and allowed_hosts variables in the nrpe configuration file are ignored. * `inetd` After running `make install-inetd`, your `/etc/inetd.conf` file will contain lines similar to the following: # Enable the following entry to enable the nrpe daemon #nrpe stream tcp nowait nagios /usr/local/nagios/bin/nrpe nrpe -c /usr/local/nagios/etc/nr # Enable the following entry if the nrpe daemon didn't link with libwrap #nrpe stream tcp nowait nagios /usr/sbin/tcpd /usr/local/nagios/bin/nrpe -c /usr/local/nag Un-comment the appropriate line, then Restart inetd: /etc/rc.d/init.d/inet restart OpenBSD users can use the following command to restart inetd: kill -HUP `cat /var/run/inet.pid` Then add entries to your `/etc/hosts.allow` and `/etc/hosts.deny` file to enable TCP wrapper protection for the nrpe service. This is optional, although highly recommended. * `xinetd` If your system uses xinetd instead of inetd, `make install-inetd` will create a file called `nrpe` in your `/etc/xinetd.d` directory that contains a file similar to this: # default: off # description: NRPE (Nagios Remote Plugin Executor) service nrpe { disable = yes socket_type = stream port = @NRPE_PORT@ wait = no user = nagios group = nagios server = /usr/local/nagios/bin/nrpe server_args = -c /usr/local/nagios/etc/nrpe.cfg --inetd only_from = 127.0.0.1 log_on_failure += USERID } * Replace `disable = yes` with `disable = no` * Replace the `127.0.0.1` field with the IP addresses of hosts which are allowed to connect to the NRPE daemon. This only works if xinetd was compiled with support for tcpwrappers. * Add entries to your `/etc/hosts.allow` and `/etc/hosts.deny` file to enable TCP wrapper protection for the nrpe service. This is optional, although highly recommended. * Restart xinetd: /etc/rc.d/init.d/xinetd restart Configuring Things On The Nagios Host --------------------------------------- Examples for configuring the nrpe daemon are found in the sample `nrpe.cfg` file included in this distribution. That config file resides on the remote host(s) along with the nrpe daemon. The check_nrpe plugin gets installed on the Nagios host. In order to use the check_nrpe plugin from within Nagios, you will have to define a few things in the host config file. An example command definition for the check_nrpe plugin would look like this: define command{ command_name check_nrpe command_line /usr/local/nagios/libexec/check_nrpe -H $HOSTADDRESS$ -c $ARG1$ } In any service definitions that use the nrpe plugin/daemon to get their results, you would set the service check command portion of the definition to something like this (sample service definition is simplified for this example): define service{ host_name someremotehost service_description someremoteservice check_command check_nrpe!yourcommand ... etc ... } where `yourcommand` is a name of a command that you define in your `nrpe.cfg` file on the remote host (see the docs in the sample nrpe.cfg file for more information). License Notice -------------- NRPE - Nagios Remote Plugin Executor Copyright (c) 2017 Nagios Enterprises This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. Questions? ---------- If you have questions about this addon, or encounter problems getting things working along the way, your best bet for an answer or quick resolution is to check the [Nagios Support Forums](https://support.nagios.com/forum/viewforum.php?f=5). PKL1]snŹLEGALnu[ All source code, binaries, documentation, and information contained in this distribution are provided AS IS with NO WARRANTY OF ANY KIND, INCLUDING THE WARRANTY OF DESIGN, MERCHANTABILITY, AND FITNESS FOR A PARTICULAR PURPOSE. Nagios and the Nagios logo are registered trademarks of Nagios Enterprises. All other trademarks, servicemarks, registered trademarks, and registered servicemarks are the property of their respective owner(s). PKL1]P]-- README.SSL.mdnu[NRPE With SSL/TLS ================= This document covers the different methods of SSL transport that NRPE allows for. If there was a TL;DR here, it is these: ### Don't use NRPE without encryption and ### Use Public Key Encryption Contents -------- 1. [Introduction](#introduction) 2. [NRPE Changes](#nrpe-changes) 3. [check_nrpe Changes](#check_nrpe-changes) 4. [Certificate Generation Example](#certificate-generation-example) Introduction ------------ NRPE has had basic support for SSL/TLS for some time now, but it was severely lacking. It only allowed anonymous Diffie Hellman (ADH) key exchange, it used a fixed 512-bit key (generated at `./configure` time and extremely insecure) and originally allowed SSLv2. In 2004, SSLv2 and SSLv3 support was disabled. `nrpe` and `check_nrpe` have been updated to offer much more secure encryption and more options. And the updates are done in a backward- compatible way, allowing you to migrate to the newer versions without having to do it all at once, and possibly miss updating some machines, causing lost reporting. NRPE Changes ------------ Running `./configure` will now create a 2048-bit DH key instead of the old 512-bit key. The most current versions of openSSL will still not allow it. In my testing, openSSL 1.0.1e allowed DH keys of 512 bits, and 1.0.1k would not allow 2048 bit keys. In addition we now call `SSL_CTX_set_options(ctx, SSL_OP_SINGLE_DH_USE)` so a new key is generated on each connection, based on the 2048-bit key generated. The NRPE configuration file has added new SSL/TLS options. The defaults currently will allow old check_nrpe plugins to continue to connect to the nrpe daemon, but can report on "old style" connections, or enforce more secure communication as your migration progresses. The new options are in the "SSL/TLS OPTIONS" section of nrpe.cfg, about two-thirds of the way down. If you are upgrading NRPE from a prior version, you can run the `update-cfg.pl` script to add the new parameters to your nrpe.cfg. The `ssl_version` directive lets you set which versions of SSL/TLS you want to allow. SSLv2, SSLv3, TLSv1, TLSv1.1 and TLSv1.2 are allowed, or those litereals with a `+` after them (as in TLSv1.1+). Without the `+`, *that version only* will be used. With the `+`, that *version or above* will be used. openSSL will always negotiate the highest available allowed version available on both ends. This directive currently defaults to `TLSv1+`. The `ssl_use_adh` directive is **DEPRECATED**, even though it is new. Possible values are `0` to not allow ADH at all, `1` to allow ADH, and `2` to require ADH. The `2` should never be required, but it's there just in case it's needed, for whatever reason. `1` is currently the default, which allows older `check_nrpe` plugins to connect using ADH. When all the plugins are migrated to the newer version, it should be set to `0`. In an upcoming version of NRPE, ADH will no longer be allowed at all. Note that if you use a `2` here, NRPE will override any `ssl_cipher_list` entries (below) to *only* allow ADH. The `ssl_cipher_list` directive lets you specify which ciphers you want to allow. It currently defaults to `ALL:!MD5:@STRENGTH` but can take any value allowed by openSSL. In an upcoming version of NRPE, it will be changed to something more secure, something like `ALL:!aNULL:!eNULL:!SSLv2:!LOW:!EXP:!RC4:!MD5:@STRENGTH`. Note that if you have `ssl_use_adh=2`, this string will be overridden with `ADH` which only only allow ADH. The `ssl_cacert_file`, `ssl_cert_file` and `ssl_privatekey_file` directives are used to specify which *.pem files are to be used for Public-Key Encryption (PKE). Setting these will allow clients to use PKE to communicate with the server, similar to how the HTTPS protocol works. The `ssl_client_certs` directive specifies whether or not a client certificate will be requested when a client tries to connect. A value of `0` means the nrpe daemon will not ask for or require a client certificate. A `1` will cause it to ask for a client certificate, but not require one. A `2` will require the client to present a valid certificate. This currently defaults to `0`. If you want to use client certificates and are upgrading the clients over time, you can set this to `1` once many have been upgraded, then set to `2` to force the use of client certs. Note that the client certs _must_ be signed by the CA cert specified in the `ssl_cacert_file` directive. The `ssl_logging` directive allows you to log some additional data to syslog. OR (or add) values together to have more than one option enabled. Values are `0` for no additional logging (the default), `1` to log startup SSL/TLS parameters from the nrpe.cfg file, `2` to log the SSL/TLS version of connections, `4` to log which cipher is being used for the connection, `8` to log if the plugin has a cert, and `16` to log details of plugin's certificate. `-1` will enable all. This can be especially helpful during plugin migration, so you can tell which plugins have certificates, what SSL/TLS version is being used, and which ciphers are being used. check_nrpe Changes ------------------ The `check_nrpe` plugin has also been updated to provide more secure encryption and allow the use of client certificates. The command line has several new options, which are outlined below. Both the long and short arguments are presented. `--no-adh` or `-d` will disable the use of ADH. This option is **DEPRECATED**, even though it's new. It will be removed in a future version. `--ssl-version=` or `-S ` specifies minimum SSL/TLS version to use. See the `ssl_version` directive above for possible values. `--cipher-list=` determines which ciphers will and won't be allowed. See the `ssl_cipher_list` directive above. `--client-cert=` or `-C ` specifies an optional client certificate to use. If this value is entered, the next one below is required. `--key-file=` or `-K ` specifies the client certificate key file to use. This goes along with `--client-cert` above. `--ca-cert-file=` or `-A ` specifies the CA certificate to use in order to validate the nrpe daemon's public key. `--no-adh` or `-d` is **DEPRECATED** `--use-adh` or `-d [num]` is **DEPRECATED**, even though it is new. If you use `-d` or `-d 0` it acts the same way as as the old `-d`. Otherwise, use `1` to allow ADH, and `2` to require ADH. `--ssl-logging=` or `-s ` allows you to log some additional data to syslog. OR (or add) values together to have more than one option enabled. See the description of the `ssl_logging` directive from NRPE above. Certificate Generation Example ------------------------------ **Note** _The following example does not follow best practice for creating and running a CA or creating certificates. It is for testing or possibly for use in a small environment. Sloppy security is as bad as no security._ In this example, we are going to put everything in the `/usr/local/nagios/etc/ssl` directory. You may want to use the more common `/etc/ssl` directory, or somewhere else entirely. We are going to assume your company name is Foo Widgets, LLC; the server running the nagios process (and thus the check_nrpe program) is called `nag_serv`; and there are two Linux machines that will run the nrpe daemon: `db_server` and `bobs_workstation`. #### Set up the directories As root, do the following: mkdir -p -m 750 /usr/local/nagios/etc/ssl chown root:nagios /usr/local/nagios/etc/ssl cd /usr/local/nagios/etc/ssl mkdir -m 750 ca chown root:root ca mkdir -m 750 server_certs chown root:nagios server_certs mkdir -m 750 client_certs chown root:nagios client_certs #### Create Certificate Authority If you want to validate client or server certificates, you will need to create a Certificate Authority (CA) that will sign all client and server certificates. If your organization already has a CA, you can use that. As root, do the following: cd /usr/local/nagios/etc/ssl/ca openssl req -x509 -newkey rsa:4096 -keyout ca_key.pem \ -out ca_cert.pem -utf8 -days 3650 When asked, enter a passphrase. Then follow the prompts. You will probably want to include `CA` or `Certificate Authority` in for `Organizational Unit Name` and `Common Name`. For example: Organization Name (eg, company) []:Foo Widgets LLC Organizational Unit Name (eg, section) []:Foo Certificate Authority Common Name (e.g. server FQDN or YOUR name) []:Foo Nagios CA #### Create NRPE Server Certificate Requests For each of the hosts that will be running the nrpe daemon, you will need a server certificate. You can create a key, and the CSR (Certificate Signing Request) separately, but the following commands will do both with one command. As root, do the following: cd /usr/local/nagios/etc/ssl/server_certs openssl req -new -newkey rsa:2048 -keyout db_server.key \ -out db_server.csr -nodes openssl req -new -newkey rsa:2048 -keyout bobs_workstation.key \ -out bobs_workstation.csr -nodes Follow the prompts. The `-nodes` at the end of the lines tells openssl to generate the key without a passphrase. Leave it off if you want someone to enter a passphrase whenever the machine boots. Now you need to sign the CSRs with your CA key. If you have the default `/etc/openssl.cnf`, either change it, or as root, do: cd /usr/local/nagios/etc/ssl mkdir demoCA mkdir demoCA/newcerts touch demoCA/index.txt echo "01" > demoCA/serial chown -R root:root demoCA chmod 700 demoCA chmod 700 demoCA/newcerts chmod 600 demoCA/serial chmod 600 demoCA/index.txt Now, sign the CSRs. As root, do the following: cd /usr/local/nagios/etc/ssl openssl ca -days 365 -notext -md sha256 \ -keyfile ca/ca_key.pem -cert ca/ca_cert.pem \ -in server_certs/db_server.csr \ -out server_certs/db_server.pem chown root:nagios server_certs/db_server.pem chmod 440 server_certs/db_server.pem openssl ca -days 365 -notext -md sha256 \ -keyfile ca/ca_key.pem -cert ca/ca_cert.pem \ -in server_certs/bobs_workstation.csr \ -out server_certs/bobs_workstation.pem chown root:nagios server_certs/bobs_workstation.pem chmod 440 server_certs/bobs_workstation.pem Now, copy the `db_server.pem` and `db_server.key` files to the db_server machine, and the `bobs_workstation.pem` and `bobs_workstation.key` files to bobs_workstation. Copy the `ca/ca_cert.pem` file to both machines. #### Create NRPE Client Certificate Requests Now you need to do the same thing for the machine that will be running the check_nrpe program. cd /usr/local/nagios/etc/ssl/client_certs openssl req -new -newkey rsa:2048 -keyout nag_serv.key \ -out nag_serv.csr -nodes cd /usr/local/nagios/etc/ssl openssl ca -extensions usr_cert -days 365 -notext -md sha256 \ -keyfile ca/ca_key.pem -cert ca/ca_cert.pem \ -in client_certs/nag_serv.csr \ -out client_certs/nag_serv.pem chown root:nagios client_certs/nag_serv.pem chmod 440 client_certs/nag_serv.pem Now, copy the `nag_serv.pem`, `nag_serv.key` and `ca/ca_cert.pem` files to the nag_serv machine, if you did the above on a different computer. Put the location of each computers' three files in the `nrpe.cfg` file or in the check_nrpe command line. You should now have encryption and, if desired, key validation. PKL1]$hhNRPE.pdfnu[%PDF-1.4 %äüöß 2 0 obj <> stream x\K#7W9`Jox3r9Mؽ離~'hoV,|n$գJٽ ;dݏu嫢e'5|=3t?Ľ9 Q({8 ~a{KO.ȃtߑ?ԓ(oO\B2 Q#bUFtwK]]g8XW6Jځ9@+ &ߍ`+,F~)98)dlE' e~n/dhFd"rЫbhH?QN$V@<'j<l6% N4lS}(|NPW i ظtt(_8?C!_:UBu1BD2k_'"Un5u9Cxbݬ DWpK\ L^3(B"HI[ 0, o*AD}+" QVf_Z צӑIMif!IZ*/4t1ݴ.ݬj6L,QOt6:?56]_(Y?-*כ?'c'm0efk Mcd(Bа{7KMf8חM`8\v0F$=킩~XjP548\6=X؄Rm'ʘE)p\ȎQsػɐl%al§ u<ʇUB;|8t \Nhd3|?'(ߕ+VCI Q T _`n2 f*Ƙ g6 PhqQl _o JU)Ġ:P፥~)E ٭x.|6ʵУ<92+o~ հED&m\e$Y I' Jc؞ ~jv(2ޕ/ZAn u7t"+|Tϥ@Dn29f5v[l옳pYNnPiJJC7^Qi$C%XWtIgg>{0W!`1(6}qS^6\^۔]屡i_ܽWYWCխ <᷃\ 9bsh 䇛0W/Æ_+(g2$@0!9? \9ϧgf'?␷ o5$iJL^r. p6͹Ӱu.Vn/"1+v0 B##L3|Xt,g{4Rv[%VEQܺqujM_&\tJ߫\nP"U5= R-a@1 6`O:̯@tGiR+2xaeJEDy*|fzsK9:A)쀼v13EERC&C8:ru7TaGePٕ\Gp%~JM6K'O=yfաOK7Q33D%ɔ휤L )ݬ\ hã75{ g endstream endobj 3 0 obj 1755 endobj 4 0 obj <> stream JFIFC S {-]!Lfb9ɨ<;xZ2q'LXc#[ງ9r`;>^@a"Fߥ]:H}֝$U/b*2u!m*Q0n RݣCu<ײ̫Jzu>>-ٝ3*O='BU)pR/!&OL2:o=j\hک/N(ȕ'jX\sT%n)MMQkw4PB4x$j7YI(u%i^qVм{Oi!|^Q> O_4^% )wNG/VӦH{exJ:8חZA*58#2@q{zcFQ7G\c ~N[v51YZ/TNM;ULޤpbg%Ⱦ,C ON'or-9ac.kҽ<3Lsq *o`u/e`&U<_/ݯ6RO/QsI1"M3w$/D1J Y{# oW (iHOS_Rӈ,Ot΂t%v{u6+Ve& y-koDZU]֧{";d8->1Oo_J5h\1{w7;@kt`Bv? J[GJ^,x:s+dTDGv0a lv[3yڕbaI;$cFR.ة,,NX98kqQ_.aX.G=6bs<19'bV)tN3NufclhS-6&d%=t_a9:x_l>{= V\&#,U oK zo}0;h36EkgtV<^hT1 W {'-L8#d2ugLNNj jeN0*OвE;fڏGF32/m.ZN1-(!Y]c.@-2ƥdXZSYEƄH9ѵP~pf˞7O&z"+ @Yg'|i?ZGNte'zSXeu֕6{W~"Eu[Mzq%a/ @SS5-{TU@!6ZCa$?f8w'_tM^kG&T'yњ7I=TY- j+MCNkOu[SgkT8G`99%87ULnv "InAdפ^e{MTLoh>Bc 7(fJN>JRedSc:RڸAFBAaضolO]R7tOj~mNIr;uͪ[+O+ٿQ`viS e5VY4$;jS~|boV&N2M)tO7ѬL#/<XԛMteC9 lHRVg)i&Z Q$m7t;O!g1\E(?6:($Eڭ'm5Qf9 h˓Hcr3RGAMIW.[=6<3K#h`^JQ:QtNm?nOSqSqcY#jSɔkEN47X`LqcxxlA E%gO;-K{ˣ5+J5}#VtHP!zkO^W )+/J^6b*+fxܫ@ qXZ,gHAɀkQ+,ٰ.*pLUVOWO!蠝 Q`@Mλ 2D9-aMZ~v3^r.OE}?WT"&dڲ&Y6D<;>/(T"c[!B92޲I]osڶ~.հP{ $;G; kvmiQcd7L}2NDЛ* 4VשoFslop#qU^ 1rov@K9(L_>KQ.6˂bSRHZ&Φ:g;@U>D%;ʵWNWGzw*,m\HB!Ѣ}-ƹoƹ7ϥh 13ψ|<yk~@1&xd(w]0ı?;m㱖V[Sc&кF$h1H*,K7g:ˎW*E!`dzk- E࢐j9aRL:IĴxXָ dExA$C/F !"1Qa 2ASq#Rbcr34@Bs0P$C?[MdG &k>s %|:x<*{CX2u:Zx`(B( c/΄8uaAFk-bJ!QPX"oH$IQ >ַԖVR*qˆ8mJgPߒx7Oɵ(EW,fM+lW*?oƃb?o}=â+cRx:QB˲'HYKF;K޶HAeMpϻYC,j"&Jt4]h%更 6n--َ9wkGvZͦgՉdѽS wvnGK $Qķ#K@u>7IX-nor (i-ɲ*MW9]Ql̠0v~ ^qu*n|Ľל`8>Rk>99%BPx?ǝ%ʮG_Li m3?S%q[)†mq)Gnlz}g[{1AiOvuhs "1h(6/}+lֲXO 72K6_M#)`HhPܝ<Zw@РFmF˅*TU۲?mFHxsuXfEfdRpz^0Oo='uٟO's^}c.Ю GO1yaMyp( Zi%GklB(?+ {B:ǁyޓy-.'I :b\Y_RH35ij@̳sWw;Rh],SEC5DcolM/t}~=-k>/tVآe{ͷC>uxj]h m0 J=Į\]]IF]I-̈4e_&쫡3{Njy? QߕG*7'=&EBZkYx02i0 ;&W%KlzME ʎQSgk$ιW? jU,@GEua:(ɦ̦E ^7RE, q"U}<p4s\ǶM\n#cKs^%=lqmcl0Ks2 Q$TʮˑaMn>~t7j8g8&ǶpxWnWv \ÃyQWq櫾|&6|eIv  qqee@YrM%̍~$>'רI .YW m9k.m=Us&m66k,I=zKy &|Fόi.fv.IƹϮXeu*c䤵Q:S!s5xL _f$?XYK+:4H12lUs&=5DѮTkoYEă GP.h C.ddsS]v꫋; X2Z[])'ʳ)5nE̛=5o9lsǫ¸Fݕq. 1ϤvzA.#Kn<~^~O'ΧVXQ:;kgE\ozu` Qmm!V#ɤ{+s_J2裻L& H<)4|`2h'SG&9cNu= Mo&/?UR:u℥[cӪ/5x[:{)sQS[f\9@%mNxVM`P[iX&ZMv~Tc 0Al3,{Vӫ}VBAKs+HY/wK4-OkIpAm. vu5 ]Vcm2Edb0zѨɑQe`9sxdWS|&s̠EK KX;ǯU:YxPVVn Ʀe }Y'êYp)UL3յslєQwVa2aϑ[&`Q7eIgZ#'HG^WA vUmv~W<( R)(ݕ$0I'ub~SB}4,0VFIm'Ok_:MmkmD\ȘS,2.Ae#9Y_tͷe]+1 LݺYj?1S;8 e: F#Ql2ۥ}mQ/O9ohvU6wE'iAz(OkSi+ET[NUnN75nO>{)H"HA2MSiYSxV-{{(tzi0g.0dӹNCڍIT1Tcbl=:N}FzQ{*7P~*5ze-<ev"h\c=FHݺ✧`s>(j+r[5d%[hZmI8Žz`eIv&:Tvo;BCx7xMj>}uل*|UfϺOUŴn6}q2DV&7ͳO9$iۮI *<_d5 8s¥ds9bNnps益UDLmUb3+c3:09̻ 4a72F(Ks#;1N~xy,|5x?JkWH<7e]3)盤) ']APvX-3R[Jw#,yI`*;c,5Hy[>'Mefp?: '/%XsAq.hyhflg98f2w G;/7e\Nm?zHQkLǀSM&ð1,=3( vNk4LU"&!q 1M%>>b{{5>QIZô;+O U59=HϒC;i}#?D e#_2(6*âB5w(|5FM[nղWQQdO{]#m )-T55k,pJLV'#\2Hh~ܕSڔ#cUMl+20\F&^?a$E=(k6ԆR A{^?a!y ⸨-]]H:jkYbT{Y'PQ\iH< 3[Ə'P9\F9Fֿh+RB!ԊIX۳,e:)%MKy 'ꚏH80ZE(e>CS4v񉊶QRV |-g/~Um4FTҴhI#ri*8@ʣ,ƥʜuT[Gl%c5bHOX5ⷨA-elIY@n"H& EG*(R@ 4o9(xqJ_(QAG04^{8~|IP+y]K|FkQW}mgȦkt @99x؎Ŕ<>~Ux= +P#TyE5\>ʹ)jg<3MLHib('M+ 9Z٭` €\Bd]gH߭_;E/R@F8ihn>(xKHF9 մo6p~TGyʄzTSmYÖ gW=W/P->V[X(b"*xe`9ɦIn_&حY?>ud_Y?ȿ:8JъIzqC7pg "/·{\\?mQ3I|dAiD7sl4ݔDv3Eq6 RE s9VuGjYQ^O:qv*HInvzk=/kw/k}%ο?:\Q2F2FRkEUK"4ck$otdl2(tTV̊%jԎ#55ދaV;b?kgRZʠ.: 3D͎ksޓxT7ZVm_$6l8?Q'+1+^ȯEpɍ+z_P1"q_!}:b-DYq{ _EkUbHXޑm~[1Q?*!1AQaq @P0?!Vr4;4X D`3m BYŨ @wHjff  {*Aw kYA3ĕHϟx+::",]:8Qn?^{sZH70J X{o[Њe8Bf:#k:ϼ{X;|GG;N3p@)ۂ;$N"9p9kh$CX@67%(5`;sȈP _e ~z݅'[exE9&`kC_x߼ њZFRF:)W j+v/ ͛_UOa&MAϬ.)`υr,20eR-:veeg`<0% h]Xg,HJlE蟃rՈ/ڬy/JN gnmp3XW}x*1 UPf@dvť:08}_,p!EX5eãtٗh׻/6𒎠Nb\ɝv]g5\JYM&Skd=eRJЂbVЪ3}uW5=d6.(jeo|(ؒt58}kO"l=ބ7bK59 /eUV J/lOI\P,6݅xhyhYwmUi;SSQƊWT/&t]oTVIuˇ9_0:ԶHV dC#mӁW/"קo, w)a) KY띦k̵ӁzѸk.'@ 6okD+ބY$zsˤ׀jyʤ-iOhv!8N5!iJ %,$Vl؁az5l8QdwlMNJuм@)6H]Sm#lro xҐTt^ת܀*JB#gZ|Hїa P\XIj?0e!<|E=H[le]at:a@SUv#٪>fRmMtN6 jxK<* UJ yP2I;ڈ>$W`- Y |088$dW&$ς`n.G)YKWl&L`s/(^\V]'ґلnMCyt.W1Rׁ- 06phQ|lo^bVJ 'H9 ;~W΃Sa4«9ʽZo)n-8%3 -8 PsYn#B@Գtĵo;$VKjyΞlByʃ`yAC 7 0qj]\1¾e]HM,=czݘ(6$zAɴ=y̾bJu%P:h)E3-B:0A|L+rAZ)08c7pVo/S/2IlYD{,]H&ƞoc[i^b&x_l+4_w0u{إscFmy!s#S$IxUהvr\>A vgsEUn`I#&sĸ:KMegId|MѿM]T E6H%+)⵹*^;.. AaUt;_ЏQM `⁤\aJK?sOE΄#(faVҷ!A'$޺昋ҥO-kuR{J+1@ԮSjB; V@Z*c=P&TNKU hLY3Uߢ,tNT^drl;e'TǢx\6մ|nt?HТ@mږ(LyXf?HZ Kqm@ʴG]3ȋZx 9 Eһl[i;ogMgL'SBpQ%+EhhpML|-Gv sg Ndjf>aAN}6U.3Vu@aF: \/iQ}dl'̚T0oo" _x E,F@nv[, ٨ګZG}; #Dl"bܺunğ@(ooYBK'>s>[tUpڞ6 \]vpTl'b}B7oc,)ݧ )$5*6s D#_.{x"OcAxiK݈0h5T 8<P.F7ӛ%xsO8^fjlTJ uZfV^(.TVo8RX@ p8w*'& hiX]_")&xEkQ~U7JVU.D3=UܨhV~M-cނ1 UYU8fmirD-9/iVeT-%vY P YB9#B)0҂W/ ɯvJ)}&vny%vP7mEiBa 0p>rb']|hhG_er^*u]AZ _j ӸCO 8DGf kr5[STtCdE)* ̂cet8-z2EZ<# C{CL|L0ExNh6G6BaΠQ$-Ӹ7du 8%jCC..ALUMo,7 2"Y]}j^h)Lg1~1*f+>?tM1F@K }`0p k1wmp(iyS1Ya=N> uJhᐷS@.D: !3Kb kzAb@G?zkw܇$,Km {KkٕJS( S'q@t<?R*&fHUg;C}n:Gցlx`w|}va!(\фތ"(GD_ウYMbE Ê 5 Cߊav?ZDE. ]Ra*3%f9ft@C"DGp2;C@y*@&u `8G(Vu~Y s<~e3Kn:7r0@l@`JH*!1AQaq @0P?A%Z4$Mҁ KYk"@""Qkix%WL|T5B\]  62db@,BOFaPu- UHQ=4 n- Jg˫O|S51 J/ ئP # u ( C3눰ڭuL5;Q}|rNC2bSfNl@$7) &wfX_H&3 `ؿ/@C{h쌑1H8 qi@&HО5p:P(  I6Y!Y r9p%(uC&TxaQ+}WmOQHMJBce QF)0)u/t_nK2~*)/@}5d U Û{.]~n{sB}rR˛;Y)YjG!Ќ #PB@ʑ?"ۗ-<h*臱@ͣzXa}BCFH'Sj 2n(*f$hWfN 27=ڒf`U}@'1'g*r0yyůD#'H Р tРn?鱂;*`BAGoP On>P"g$`sQfV[3)o0ym*+qtC#|l\D#$K: gd$ _Ǎm,[{l\ubpc.^ e.8LVίZڂ@c=^9ez˖cՖR³vA/by1} A~9P؞I/JgTT靇1rrpr/!,/OBeX= &,݉i9ͶRKUK:D߅`r;zԼUg{,#&1nOF.KQل3N>aBg , x3 2Nh"Dp;ze}2|f,aWأ?*uqa*,=ZsFQDDfDxt!n?&d`C)"ĐrDQ'RBy'_[Go Ffʶ*fV|=ڞlxƴ$x" ڭ!GoB$ⴠYz;+F@njt5\_⺽Җ,-,. Rxk~lȹ>^0AL"o|N)y) h9ḧΆ|׌`r;z8 K̾iBaKފt˰c:$[ _(K)y-CN E޳(E=-`e@2k*fO1 ,O s"q !)KD8v(3+Izpw *AN(I)-7E:$'<-NNFmz J,߯.TfX4H^eу=ޠ/yl@ 22y'V7(aXcG0Rp8R$6~IF[cR`ʃasIܬ F @kCuY!ƕm z#b&>r[r~ '?R*RT{Ћ# % rRLD  xG1Xii+{mH*M2hGNS>(6U J fh !߅ nGj[Z0 ;C CaӴnT;ʰ9 C,lpi,Yu= =w[58$ŝ&S ֳA,&M> (@A3J6IjU{d{ӓ湙Q>Z <-)=0LϜ*ekkZIB CU9E@M%dFz&>Gt!@P6m40ϡnUMn0.E>A&deԪ_djF7UZ,߯3EșcϑP3V[Ү̀Hf%okyhZEM1XZ?R %K"x:ɋ*bnbyrX _T48T7P'=FC)^'=QsCDŽ#ʠƚ:ҜmOWՋFb#5yD18#KpFSo6m`.O>t'i3,D*R0y6/ꄥw'qޥMFt(9 ]'3(ǽ ̗GWo$\p lprݵ(.vۭ`r;TJ7_B#ɨkDc~8<7*jm*"} œ>ވ%xޔpX 8&[E&]3B Dk,9 cMT$EAF 9C)Ebv c6oaB IJc1 <֞] dKpcmJ) SAQof!vm˅.8BV+d s#C](X"DJ>j?v5jXĜUŢ?yO?lr&MLX W! \Jj,"i~jY8 x ZkJ8ߦ"s?r/EߢOamlJ@Pu I7WBjQOJ@֩{ fޢڗ Vc3ؚA1=g/ 15z[ 'z22qR 3vKhnԍBw W6ʐ`u"*F8E}`#ax3EFdZLWBIn zt[@\Ol1EiǵX/i߶[>fڠ>x#f}JS럦"uC!_vAI:=ptx55 3}+B_)$n._\":ѦuD*b5FjV) +ڦwFdƮr`Δ(7m*ޥxS##bBvbTU3%@"7Sz2d%,?X yr*lƞkUt3.B8i;q'B0#xҁ-"9$@e &fz`6 g9e$84 kiyP>x9[ Gǟ s6$ {! ލjrUs; f &Υ 4/m@>MHUU\}y@&5f;H-tڐl5 xS2"<)_g(Ϳ'_EsjOhT8\8피MɒqF$m1JP\ ʦ@fV]Mhvܑ1΄6zLӬVy\$ S-hxA5 ch8UB)N*vgzF-2Qn7o6MqC ʈp|GUo~_TsaKf_I:-Do@#s,4^Ac%*3Ԁ^a(`#R倉qL%A)9A1KFFpP=?wE]Ng(^  I U!";Y>>P~mJoН3,jH;mJ7UV5%SYš@p#+L1IRN M“[@bk'r!:Ϩ , hfi=v($@1Fpb"(mz.RHPsܤej%fvԘ]CA CA̼ib0F8E Ea =w#ȫ#wI#uUFD^Ik#hٌ ֤*:`4D<T?r&<" Ly\]*}ڰ9'ެ4$ 8^zn'F2Jjv\.<(blnލ$fgډ(l0 6i1*оRDN= ܩmB0MlU,ەb('L.Re)n/5k)3^ȝS$G4L RH@ } ٙCq&yX 7nD2_)!ݜ*$8IgJ, z 0a mti]aP' X#٧yd(6i"UP >6l1xchȂŹ9)8K" Z§%2ؔ] o9Q@I2#6&"7h//m^h*d:5GPBPU*ogƍlb4ʬ9 E> stream xZK8ׯy!sl` Y*ؽ afUD%zh.l)/B; ;7/oNjp;>_f˥^̬_.0a^>^~DBWlSӨLA4%sj"d#:1%YHhZ\]&<ğ8._ hw1ST}Owf"{ԅg X" z9\ DQ/ hh& ܣzT/F6eS`-6f~3 d۞0 #zmfxO!3he(:L#)7bg=;o1#na_dф^ WXM D<-oϙ u8yڞ YcɧSF7rg\3L2 l`'X)pÜ>=BHln-Xi%,!BLMR@< B^Ćk̰0 }R5S&# F4@#PhelجʒWqZ;浢)¤- bK ]+=ڬd?ZV-{I Ͼ#,-a)0Nz[HAmrX3;G}oa.J}<VP~<*qGaslѨ *x F(ɳ沿t#{zx ?,4$]@O ].$oՊ^jOCPJZlWϦ+tRSH7?^(\*c[I-˷H]GvsFGn 6  ]'?dz5w2=E?sGDPy~hR ~MD"iQ֫[fZG*;IV]* dN(+$}mI`}l0cQU2A5O8,ˮm1%-#;o"iL$@ZVfPV:Z-PdVYt:!\\\A2WYg KjDMfB.+EoHګkq+_ M4tSy=C~7"v W @[JbczjLV>3zuԘDddj\DD9D՛'[ن:Tu\7U5xfbJ bf8:9!;3*(kJGT[tu):ٙ/ܷJ ѺXG ȝ)vܡ ǣ[?@M޹)n,:T!3DMEXFJ+{L>n0yڞ1F|i<<"UV⹅[BaHgCnxAl^(rG5l6.$ISbb2S/h~$6ؤ6w¡ɺ{Xr`pYltO@ZR4ĤM4 -+eKœ!o^R _tI)(mg⸋#Cno"dnCN#,knEy oix6Őt6Ƣӝh4K96mO!GLsB 7w;~qP\leq^ F>м,Зp wLxa88b(Z< *-< 4#'s|ѥ^%tK9h ZĨz&kNlq:P9 (oK8f/ _7chKCPq/ۣuÁ0LO$&!>L тy:1рdD םj-:ֲe endstream endobj 7 0 obj 2407 endobj 8 0 obj <> stream x T _sq$rl-r -'I)[vi]h}^HdʚhEd3S߆x{sνyo{ܹw|͍[ﵳBBKڮY^^#i=m~!! 5Y/>ؓBw¬o#!==LZ=ML -2-i됐N_|ˤj/aOc$Ik/^DO,iXa4VE]4шԿI@sHQ(_RI5±p:$!TFD$Dj$ "u"5 HD  BFBB"H݃HD!R#!!BABF~C}A?qd; ~' R !R#@HUNhiћ6Biyq ^H9by'|`Wخ8w =HH4"5oU=cKeiY>{yҔI,Z[vmݰTrQ-,?H݃HD!R#VE11aXׯA0H2q\sssɠONnuWt =HH4"5oU3iX KŰ\gFR|Ч/^sܯ BF^ٳgNiChUWW9"u$Dj$ưX !7vzQ0,%Z$f5ILUUU)!FGG?~O"R=!R#@HiPc7Uŋy޽Io}GFbXhh6tS_\Zzvt ޟzӒ555˟(' &4222oܸH"5 H^w#w_H## /}·M+ԙGCBTʑ́$HZE젣{Qm=ks[[ACsII%BYUVCCF$5“NcԢjjjTRSSS<G9)))88ӧqqqIIIs''~BFI}egPS}$ُaILL-[켞po;/ݱCEKu6۷KAC ;p6!Ax r8bµKW۵Ks"Wvml0ڢ3_rG{WWwٳf-C`JS#v{ҤIlll'O bbb9sih DjzcHXH5^;էN:=Ȑj'=a˜o}5Dl̃{<9:ĉͱ;Y1bP'9ѣccqg ﮏ;"3ӎ~ā&p\[]%N_db?,VW㤶^tn?^Jj1#w^4nxاX˽>\5nnnCёRQQׯ999yyyࣷnݪ;fpP& BF"_ cuLƛΝJ%5pYJj oss/`XxjVֱ5>-9sFFzW nn'L` LBâ˦P M(+rw} 231cMM^||&sq:9Bez""rrqq;[ZFrpLyyj2ߠDAG砫2ir/H-""}Mmm-`!cnnTUU!#G gϞjp܈4LH4"q YXKvHyk2LT 1bqØ{"@LQљ`Z@ꂂ@^ .gϚ?ZCCXy6*j;|p%ml}UgN35PWX/\OMaU;ʾ} >JAz- MHH̚:yJ$%*GGEKK9(qQ`bMoݹaO - T˗/aUyy9 ^'4IH4"~Y@kg"}.j:&-*{ϟ߾`_r9/ JS j!5hXa[pz X$7 ́d"Y*;!^? `4gZMt8%Dj$z N[~AhfO-)#*:MD1,6f>̌CI/#߄HHD!R'Bi۰҄5+ni &.ӁRE2{ɠ uuGO>m؀333 IHHܹs2eeeDEz8a-/_VWWMVx ::VAp2߹s &t`HHD!Rˈ#LO/zSUӂ H -,200hkk:Njll MOOO ঁqA5 \B9Xo`.d ѣ,rѣG_,6b={<56#R{BFR$ {^4ϟ?Hކ |MM͙3giǠ/C`g>C>|ªHhHNSb^|.\KB{BFlxZae CEݑU: IEXNSF"ɵVU%($ 25584"Pc"R{BF# S+/G`ڿ!)4GpJH4"8/wņEABj ?L R=!R#@CT,Czo]{0=`+RPPL R=!R#@CQ䰬^R fs!C=Rݾ}Ϟ=χ{bqqqEEÇƆ B¹\sJz\˜>bo^ qZ1ؓs[nrrr&&&/ZHVVvĉh(_x dih D!'D%W%JJ?)'Q>QT7ZG jy3QQQѳg622rtt(^b///@V]] Bz)#t h1LZOc~}#5ԩSsٱc֭[_| %fff ?p̙3ih Dꡧ?mjkXVQdqvbq]=G {葸8z׮][lھ}p***ԴMH4"ҏ! ׎oZ)PWX,_W333 ===CCC+**BBBMLL6lذsNih D!$bdVX嶕8{!RZ}#59SYSSׯ/|4/++kjK^Bih ?KB[ {鯑` ð"GưԉS(`X<%23!R=!R#@}#5 3g\~a999P˗_B9g¹\p@_9OݡyR1$dgÒkא%߾>OAPg5B>wh7b$Ǝ+aP&'.'uZ_'TCBF߾}²rJIII:::@ѣutt 7AVT'1>kL =‡Saԑ FUV ;%$f` a}ۜlD656J| _ &/( ߾H$CCJ^uuf ԉvv;;yY[܎p8i|;wxxxxzzkO[ZZ}M׈ԃ!!R#@}&uXX### (""yfXcQPPI꒒~ Rw+|-C鎿+D.YXnXO5B||Ӷm[ qIK޸QbhܲE<+k@''$AAp(11Y AΤ/^А7o…iifpz륤f;ٹS9 ~2,n,;u5N};{^\a^4>H >^yxxvٲeڵkk8mnn.++{MO>+7]__ O:rQ͡G"W OqbEZ/= E144Ȗnw]SϞ=>p rvvtX_vmqq1/ ~W8&[^R݀||_c,pTiLTRx,pdl H-.&:k+`45Մyta M~oƍ>}>m:QH^#;|}uէ\wtmõŧ8'Qov^Mq73y&u" =`c1$ZOo)]L::3  ||0L?~#IEBl0,eTRG?s EA}_mvcǎgϚ6 u)H=e`FSba(%^i<˯~޿ҥKf``jvbqq@g̘ m޼Y__~UUU^`ްa xs+ٱrBaw{ΚO}m9aʓ,pGQOrLÁuҥ޽3vvvx cԴiDDDĠR߮ԗ|L|o^`q_ ڥNO$s`+ϻoXny=6QItX NWN,Z4 |10@NUWOmok}|B怀 d2=D^-0oތO;y_n>p@y„`$Gc#4yӖ>}C=q"jƒw,)DnkLzzz0pN|r4h##LMM͔ 2fe`~ g@p83gNssݻSCshkt;;;9nqDJ"u>ݵo{d4Uk;wV7Ax.hj(@'%%%o߾ňQZհXYY Dj7/,d;|S?Ʊ[aJ5=~q]|7rb!n9 t/suM?ד(0׀!XUu oe55vv_M ظ6ؾ]cb>h0;bXg)) :aXSƛ7((>~|`. !@ࡡڒ?~K#BjN?ol)!R#RړmMr:PC%;{[u]\`|c~ Ť (Q"5"ݎҊR~쿙ZIಯ"5aəc/inbC=@ǑnqdF`1폯uwGj:F :jnU?F_rmh  zyNYZh ڲ"ZB X,TURU[NN^a25UU4TTtש)++((B^(VUٹ~jmkג@;֩*+)*)i5&jWWYKW)tCėWPh_k6oydNzz;Z @Cnyxv3]>^>{hqB>?'#ܫ>2|[7|>ڼJ]VLáy*yQS? }Ssѣ?-o3A9o2k/^jv;AABw%Ccy\EWnRw¢9>0 Zn!gXƑՔ3Agk)( q^^").ndx[IdDGZGIx KcRZBƇEďV.H"~B ޖf[7xT}m- #a7?@{0O>v[[Z|P1q7õ~/D 5^ +_x9u1K,:s+qX2 C 4{" |&ZOBW`mO\sol3L :ДH6(:"˫&9-0{3< R3#Bа o(jC>`d`H]ʤ8?a!ߊly|%ayΆ$5zY5V^4z_AА0 ՞G'^i6iyko3tNN޾: b-z^'r| fuN@Ra22* H;JM-r|2|ղM{bD=ƀZBeדˬv$I}0;vzYa| n] (<䦑"D!uѦttt?KM>cd)4{\?fijDR>yR{@ߐ-܂3cXX;C:,Y<0#Ėܘ "t]E KVYNJl`Ũ4X쏁[DxZ[յha\tWq|L]m`lDnaԆ 7MIzs`tZEjhp>~/oG|<$Bwa_ZGNݧSs<^woHRI(j[pp}5Q*1CR̓e"Ѱ4y,c'fOr:Y_6&HA5;{HjMvqr!ҕͲ.]ZGBA Ro]=aT Z$#ygw]<&a IFP.w79@^m#NOTu$=H$יRnjef3'uX;1 ;,.^&^!*kR/Qw,4XmIw "F#{U]H]hVmNVm^s?z=SD-Mf>?/qct3DehA~{e&D֘ |74 K8ΐO#u[ 1U-`~ >ԝ3m&`ZyE_q J(BP?p|l Dn1<=zl36$# MΠ\iްlğ[$F{ȑ7q :ry"#B3F+"CnHfAl1]79F}KTtI tY t[S/ןHۧs^¢#x4w܃Mw>Եo:Kt|ipӀ/NWb(wf*w꼨e?54n:Q/Jjd׍&+Kt#FLaZsopl9I/:s0!^jk LOndM^״?# !R cB>VX=0 I@񌰊E7c”-Xy'Tx:ꋁ (Cln,X1nc6gϙ;c27}bԵ|\'jOwXi¤ c^ga)Jj8<ò҉k#G1d _?0+6@q26d`WS8fۇgnZ](\HJhNZ-pa^5<uViٜJJu-|52a@"ǥڹ+!or\\ .Þd'7E/fܲSm"}ԋ2LkN)Djι" dT2zG㩤] oUwuLS9yS^*&p>yWPz3;(RBA Ro&HK`4J@m+s oح++wI8qZC5?v4PSCqX %>oK-M7Y,&OE5XsV}6S f_1{WA ȑ#Y3m\!"6folgRMV$ 2˹'7#t2,(ju/īVڅ1!W1cF.{]`Lp9cƌV3fPKD!Qmf3m|!YG3OgE?>}$ yۘ%nDj^: SJ!y7IjQt#F9~T*ۼ|'/Rhz"ZA߉k2Say4R i@IQFLx/j}~l÷;(tybԝX]uy&a98󌵔x!ub؜q5/O8jG?Hֈهb2 ])u3:3wۉ,9$/=FSc HmZ(Ig$i( i@I}HZhfYֺg3of5rESw#1ЏH7QW LX'<cWqay>vR yYZ .+߸j/a)UnT{+z{ #@~U]yWcbyC'N5FӮt;vL@xyS M`]]_w/⺈ݸ̩W/Vvųgcc+NSK 0r31uV~tL̇^9=1!'CgNmi_k0̡"h`֬i5W =kfv~7gD ͝H`0_d `;RPao\6U'7eZSϻ ~' H݃4Bƍ"?8YKC^yL<2an"(ne}3lfS/'G_fﰂ/Ϊ'}{`p=xtV&ݓzpGٻL_mSXt+!{s0$.i6`+dz hLL^` =y\ ' ;=n :<\]/ ']-QMƇ#B);N F13P$Y1N:veF3Akt {eDfQ[L [^ P&X)Ї_ ,cJ{bV߬voKjDsw}OOHM>~%Yp} .̽ \5P}28`&+sGj!\.,lR`9,eq$vh]@U; xDvX)9',Z~W]ν]qzXO\'HxԷ|݉ N:_ Ǵ>YY>m'مĽm}nE5 &MtL NAnLI( *8n1㦡&4iON h.[lXo۪G9j>%gI(B"|_En V<\S[}?$`xulo^o ;"N\k苧ha7V(㴐z/Duzu:Dw-@Lpc70άWmoǴq$ؼ _id~2p6`"iPFd݄VAĢ7{2 dz> 5@jXN2>߾2ةubɎyW@Nn=PI=W\T MR/gi%otIF]7 RW%s]H[BOFZ6 4,IJoMgv *"ܧqLJB_.[{[.s7RiFL:Fg՜iRi۩ީvS޷DFK 3TP,>aL7 fH}"u=QF۪k:9H!WMB76[OR6BJYPaͳb6s6ʷ]I:=̥Xq [ .Vfc'g HAuڄ)lT1O&nͨ '(kK4Li@M[W/l W M^5nޙ/:>Rvke+Vܒ5 ik]òΦ\$^^Md R =u͖ S`\'_5 Cl5q Ȱpo瘝8jIEblQuxerܹ/۪h{ZU&dPKڃ0"~mOůN;_n!=m ,_i[ơb2?I(a> E/[s€[V{n[!#qꯓZ4HݪI֥X9y^GGLx"~;eEt o'^Uβ^Zjv;Tj(+/[eN*kPgڕVi*+멪%jFT% 2rr*;۪:EEv 5r˭Z}|5%@0eV›'߿AU)!}DoڝxRP{R㯷n\1TIqب,6 "73R1ڶߖVG{&NтYYY֭# ϫub'ދux+! (,8qww5O nw,Mv ou,sޝ6={|ʔwD;NQɼպev4jnkK;\~{5zxnu|^KGG9?J|*L-''GPwJLL7`DjDZI|&~E IbW]Ͼ$nؓ(\?śB~::7򼛒8?zjoٙcXyrE13aY Ǖ8ОSv˗uuuԈ$ ('ݮ+۹FKٗ4c\1^'oZ)㈟uˊݹNkV{㯋b&Ma(D_F>ŋ&HCFI~ |.;'2쫗'/YJIq3|u g( '2=&$*G~ъXѩ5m!"u/HHH=B2Dj>u"”dt}Jx\esƔDfe!DEO96Di I P D!Ξnkx.ªO&*(>}$Nu E)ǔC/0SJ^xf)Ock;'5`w& ð0"9I7:aVj{cI4ҥs0,^--WΟώaPogg&:mCjtD_j=Ǐ 98 CzB!#:kuE gXuL&'zX5SG<6Qst]%YiL=u1UyyxC̙']?o2> Kxђu'8;oi sg7:322HIưxII 8qrݒZUL Nƍ qPɷC9=hjJ6F,RWI8nii'/''"( -={-ROH g˂<=;,/'uʓ7h2-٬HXaTMc=oJ;RG'e9§0,@NiN2۷ pS9AӦ1aH[Wu:Zb.mۢ_d;gF$#RsȫP5oMzf=ThOjVZ4? NERx @tvv2eJ_ξ}~Koߚ򲳳/]TWWիWJ[{]]]zz:|Fu'*p7Y~:$gz|݌ <了|A}kVѦGpLpLnVݱ:iwMǝ;sXT܁SU7aX֫-x)?ܽ{c˖~xHMSSΞm%gT.YHEzCbÇU&Ndc?5PXiz ƈ~j>>>*M=(('ԟ>}RTT\xqFFF||رc]]]****++ˁJ.+ yټHyNNݻw755Q< i4H=ӹbM.E+5?7Q[rf!^26PѣIb {xOFFsee u఼ׯAuut`Y66xDu…>u{nE5'_d5iWN|>nhWxd CfsNcb2tG/5w͚5k` x(R+))?y$55uܸqΝ=gX^`׶mXYY?|`aa1sL4DEE122B+___MMͅ kX#R#RCFaXadER|t {=߹w!51+)1Q ưVTMD))S) mW: ?}OO7'Q:*hNԉmݺeć 8o@94qu-c 0߾} L$o 2@u]]ݒ%K֯_ef*%&&߽{ X|}fff('=YXX!ț7oFB*©":u<}ۡywڦ"LN@<!6:V־V~r摒8yҘMCsٮƕC &LYPS=x nMM ^rrrdddZZCF n޼ NSN '%%?qd5pDjA*D!% f5-v~Tu?$@_Gl@j$ diaaḸ8`njjʕ+[ZZ k¢хӧO߳g=zjժ5kB(kiii z颟zIԏ:1= nhhj{yyՙ o޼Z]]ŋ͛o߾e˖ 6ܺuׯx锔yyy##Zr6"5 "ҏ!nxɉ9oa1)zץD۷oݻwn7{GX]] kKJJ Ç)..C@5P4H=nVE1f2cXf{9< ĤyBFG.p۷ѭSYJn?u RTԤYCMnQDj$Z z Oc/Xn\%KW7N:ZO74hMjleee^^^TTs|||iiiO u.];@FFpXמ^x^~A8p\z= zhMja]]˥mFGGw^(|ȵ߿,644C{{{ ;'QBpêN~u޾} u ԇH"PM7ƞi$_֤.'ȑ#۷'OFDDmmmEEEw PRR233jgΜqrrjll ̄vvvl -[@.7ZIIIuuu5xsccM6_=^ZGFp4R܍vi[HCX&5io80}ѣGKII=yp,!!q]qqرc2gÊ>جYZAE k."x ?ӧ׮]qF;x$?7779H"^f+Xiǐ֤111SQQzzz%9*TUUܹ^/|CsBj  PgܸqpHhh[]ztH4"”dEZ~<5$$R&5͛`iutt֦ǎKMM_lYIIIYY Lhkmm ={ȑ#Y{xx633 }||Њ% >ZXXzzz@[n~QZZ`iPzH sYök*JKv0I Crppʚ3gTHH0o߾5k֐7z  ^:Xc...WWW;P333!tRuuu_0';߅ а9hxypƋ!R#RCZ>Y")h䬑~*Zw ( :77Ou4?-5<{vI="5-H= 97 Ubqh66 M 55Z8Yo?[[[[WWWYY~s@MhX]] c%!R#OyoZ=GE1Y0,ZFfhMjPYRR%o߾}ԉ}o% dgg'''$ŋ!&dN ^^^"5-H=Tb{ѳhMj 6ppp̛7oĉ`MMMZZZ̙ ԦlB-bCCCTTSQQwǎK.# 1'[A @^~"qDj$Z z8 }@m,ghMZ;gU"RXKBf%e D S"HnLC2%(fIER3%iHMK2ch]\r);ϯ+S|׳޵~gy礡ҭ[0aBAAu낂 tfee!޼y3gv۶m!!! 5(322O>pG#b@:{zz<Lزe *믿l7&[fOOUl,R*캼hEHY uenU[A]^ɤ?S6>4h֬Yׯ_.٢E{Dmaaagg>_~ݺuw!p^ln`󍌌@j}1b vLLLEMgggssx@IͦdcR}4=jP?PX ..~.b꟢a"А xx{(b%%Sf4۷o D^3ԀBBDjD^&H CН\]#+X1-42eB`sgSEJޞ}{%&.7Ϯ"r~&X>dʳ+WG%.K. }k={'$$k'Of̘R>|XGGԩS_MM pOIISLP\NKK;v֭[{lJ6&j +9`ĀմIuTBONjŊ ?"ƙ+; ,?^^ڊ9/ظqX&,2csǎ Bc5Sŷ~mj|QVw|k1G(- LI ^iiP̴Aݭ[&Mnjz2(8)) 1/r@Occ~cǎ2h.))A۷o5k֐=;"S"u^={6"\䀧/ҢwqGEEy{{oF&`/^NOOGr|p<223F+Ϟ=w]Trr޽{삒_ϟ? 9p޽{xhh(Ll7&muƎݞKmGmZE~= ݦu}]yGSSm4MƤ~Ņdp< k_%/_^? N ¯G,ǷK|Ԡsr6]hC%vw CLMuCmIo"iQ'R=Bkirū:RnEF'v4dF3Pll,"َ;/.]rR7Z1ٔiLj6]ii')µ~#z|kbee,KSXiFFzWϞm4irO<5u"kq|m?#gƷ&&s߹}t\dأ޽Ǐծ(kTȋ2B٪O3###z̐i1IͦLcRBZKgZ-,qEYhV=:0[||S`̙fbJ{>~AvK+) H;͚kϘ{,Dɛ7}vm.I}AҠ'NN ӧ~ έ*eu_ zhC[Ƥf[?~s.PK|t|nzR@ 幹>H]ۀ踸q":Dž> F|q1oNRRV!7C&gdAgς32tqWʪ{PI]508PTTDvcR=ohNHPf^C&OʄT#U"@޽;w"C:ZvW*xz9Mz/o L/?aRɘl+wYYG=o?V~CikHwUVI췉6f1ٔiLjZC[bLŤfS1j5&[bLŤfS1j?JKvHU3&u$Rm*,,D#ǍǤfS1jp&*km#{5o*\ݭS8M1775x3ٔ`LjZ̶ԠI&<;S8핓p5??+//IͦcRfk}CLqM1<\IͦcR))~ĤfS1ȘuM Ƥfcc#cRALj6%I]1ٔ`Lj6662&u4,Wo!3L/|H}~{9~0+äUL{ܲ$o۫c\˿jyQfg:672UTԵ(8(ijڴi.]R_WY`Be3 Kf͚.UVVVRRz {@3&,VC=T]bX,bX,bX,bX,bX,bX,bX,bXZ>EiʤPQ^ā;pt9BzX,U*((XvGff&?6l8qKTsNJ߾}իuiii/q\IE}Z|QVeZE?~<77iin<Խc O΅O XL.\h֬;C9#FСDL#SW@A e6oތJ~wA6R=|PW>`/JGG$)w+Wyul~bߗv,%MU`b&Oܳgݻeԩ]ttP,+9;;{u)djjzi֭[cLLLॣHnPPP ;8p`]oihhHe8C 3g !&X,y mbǶƍ͑Ӿ}_~2?|׮]K֭ۚ5kAСCKJJw!sƍ;v,hjjT?#aĉ(O"R㷐}Mǝ={6e]t4'ԩSh 61ޢ '`1ֿ\6|ɨQ#T@*򯤴Pi }&$$@_} 5ÇL|D*_JݻM6BE7}6}{Ul_^t״O:Ԇc&LvF-o2Qo9v7o^3b5*1hkk=zqqqFQ 6$''#X@СCvwwծ)1RM4 FQO?={,6h$""I&Q e{=޲e 277Gĉ-[{.MɓWn޼9.FCDVBB"ŋoi''':SG}#rqN^_z b޽})Gޕ \]n))z͛7޹sҥK[nEZ*--?#X'O<==QNU=|pϞ=@V4AT߇+K.~ooo4t5\Ե bd .e/#uNN:5r"##3@eGg917&R1RDjv/3gpP0lmmwVŪw)VPG8Ç·nݒ\?h RG+?~<(.4>?#yi???$VZEDjQHiӦ譛6mBt@GqyE"Dj #M6ŠG%A-Z`Qfƌ۶mJ!Xu* Ν;O  tF&\Yd9fu(\N)6Xƍ#.(3elёH| H#YXXl-͛7Syy6ALp tϫo߾4FaU~ R9Hpx5S<N8M 6 eYy?QDӧo!;v@i.޽{8 5W^gLDjF3>=էN*TܫE1c@?BLX[[G vDRO0occcFVcF0$F< ! #Rvv/a#Š2"5#-_d _h`l2|KNJzC8ƒUUUvMWWWWz Q`HO<MsM<"M0]R$;p~ ()oXu|]iv ^P.E~޽;~ U+sїX|8ը 1兪fDi.ӧh &A۷oO%!!ONj"Rݷo]4g$h3NDØaHjj$5Q=]EB@0ww]{*3 #`pvZ%\Q4t#9w|G,i<U(Č~.]J_%&&CԳgO###/\h)#ǑFJ5k( >xx sAP%oXuF)A:H6ZB&@I=~x2EjܔԴ׵k$RvAt}Da2HŋpDiӦaC68p{atq_ObRQL+ᲧVtR0.r\C#GD7?u 45j/0&VHa'**!3hСCQBDHMܤJC-HC0 A I@<8 aaap! S,VPH6p XiiKKKl.^W)M>|(TҔ_ZZJAtOhfjjjrr2WF&Dzܹ>QOŭ[Őo)gΜ'oZ&LjY("V`ć;|p$h h)*''AIؤ@jɱ4 8R|0߻w IG~ 4שS`QSz@[rыi٪dQFlң]vŧ  B[<̩RauuuKKKW$Bmmm7Doʴ +@hM5PgHϝ;iϡ3),EL3f̠SB YQ6"TmsX,Q4ݶm[---4K"4=ҒEIE= \R9Mܾ}{˖-i2Qo!ɓ Pm8W!ԌڃVzƍKff&*'_GD M!RzjzzzBBNIZxYD6l(ِ> stream xYIFW^-* mC)&a撿jKChP۵{_= _#G=|w_iT 8mǓ`G7)=Ie0qzLN[T t2 I SI~ $(`'2iHJPy\QO2}GCKp#ЄWw:ڻb!w%b&h9obDZ5$Tf11z1-n^praD-%q2JVr΁>mcv~i] nbGq PKדv7zDC@Q@&r=ET̽%@y|ii2p(JU،zYKQJ[x,Px#o3s@s4ݬD4iZ$ɥF!%-"gdI-Ԑ&Ĥ~9*(Њ .׉&Hch7IfyF5Cx,6q.TR4Bi|!#P6jH(owGC`bɝη!Y \6F]|[|leMdD: VcꘓDŽΐQ(WlW \8$;cz靐,,_p{!kxTuEZCwݠɣ*F| ADbRG?-@4'Q3.iyЋ]] endstream endobj 12 0 obj 1547 endobj 14 0 obj <> stream x_lǝiX2d%Ad)6p Fg}ړ}ͽ#ZLqbŔG|&Nr^6 \h GX>9Dp`CgS|1SLUw|0IYV3;;MKHe~Z${D#?6y;wWK-}C^v [wW]= P WoH9£vvxv!P;AjHj@@Bvxv!P;AjHj@@Bvxv!P;AjHj@@Bvxv!P;AjHj@@Bvxv!P;iM>R?f'_{Рv!P;i7$@ }v1]IP;@v jW j>]ڕjWv%ABv/~1ڱ_Pv!P;H7PRԮޜ9{@&*xUJAjwp5xg]iP;Pׯ/..z.]tɗ/W#SRLTTڕQ"cd@v5==ԀlA@P;\*WfBSSSXdEAڥ7?7wY Σ]gģt6W햖 򅉉}ch&޹vƹjv5m@Vƍε0]IP;ժ ‚<[9zpC/O|73#~Xm&WF䪝]^ :aw9횓z<.7viʫݕ+WVyرcLS),^Pv!U)7y[5{^um78v*fbJz]:3s7屝,'~%'p3SFθWL9o2ۉ}.Eo:7?FJBg١v9 eNS^ jW DCoBԮuWUεڵVnY: jWyY!o^wOϢ<ӯk{ť\na j7;b?)R:E#|W-|+ йtfz_EA jwN|5;m䞻w=GNOB|um?jnlllxx؞j]na jGSy#whnvu[n=__JAjjtv OC ޽*;_\lA캻T~[I[XXNLLLfyyhV;Xjk2q<}AԮ$jL_Z+v7<<<44$C333kYTԮ<6=s:|vqP+ j5]"ASU3yvqP+ j5Ԏ:VMs#ڵ+}rAPfQPы&.;Yd⁛?uvv j5Ԏ:V2MϵKo{]4і&=0jWv%APfQusCv P+ j5Ԏ:V_s#Wrr0P+ j5Ԏ:VN/WF~̯]ڕC jG+CGMl~~%]ڕC_;{);ٳg'k۷߷oFP:FGM@4\~QǠv%APfr?<3>Gq-dg@y< ZλCz_ǔ,t5j{]%APfe'm{H?vL?_Sc#ݾoiuf.B{N|1.5 WoHk&6mш׹jUXnj:)ٴ^&U/~XߏM@Pfe{XL U"^'ʼn4\4Πv]szmP{S)U\hD|rQx!u˷Uv->uɝzT?CM7E jj7u 3?/@A%e j5P;iPgpmd\ _gof">Vao}HVa7Go?ϰGj'FOOrw& tv6QmO<&jG=@nɬN>u ]v(U.߂,v,X]|c{̮UX~l|{GmξY䪝'FB]x fS&Ut_#GNbUL̼˧̽󄾪/.R;Y3;Co}T;Vμ?o-;ej'%:;%Ҫ$-;O{J +O}gCu YYOyIVCfӻ'de\s]zh|3'} 2 Q;b{>=o;H~vENjED$:A_NCvsDA֜I^?Ʌm>S?}zԯԬek,]IS;3kmz<}zp_;O\}TO(tVnVe՞\jjE0jgSxjf^\3y]G.WD\sߢ+c+6Bvжkܶ)("x;]T%{FP^X|,ڹ+hsK]m\fx[n)Y57mg7|pȪy_E)h"P;WleT:TWwV]a'kbɂr+öl9o|o涹;}yo# fʼnEk-,2'jw-{w>{߼{辝J{{5gxϿ"%|y_wֱ/~ORεO-v{^u]:kǏ&j_k9ِٚޡ.<ڹt74ڕs9dUӦ$> V6¸YXwGv@VŰNV^;|Y[7YzAak{ul-<D.Oܮl}]}c8Ѯv}W6:SNu3]%O=}b0vmg'D8]dzk7v)qsDxԦjgCԮPӳ2)Zզ+dVi]=n"~v^7Q=/ўjvV{JȻBkqylv}W;\sENkgR;[{K_iy{ VuN.+uJۛMBs۾ڙbeSYr[[i{dmn`Kqk}TGߟXyiZ7? ]Wl^Vӝڵ]v))VV.7,Ȕ Y`'Swz׿ڥ7sN)r.}FZ]˻D7K2tU\hD|rQx!~aՌHz3ύ<̅jqNV&{\? k?ӶIŠuظjg'}}Pg)Ҥ#jncڥO=yG\;3>-p޹_?pۭ\F`zuCvsaEOiM>R?f'_{Рv]3q]g??gϞ]vlڎԱ{KŊ^pECodIP;Ԯཻ>~mwX kI:+ j5Ԏ:V.Q;.]ڕC jG+CwMX P+ j5Ԏ:VŊo_P+ j5Ԏ:V2M>/VN+knԮ~AJڡvdӣXQŠ7_lɕ+WE{AJR\F֟ߟ'ύ<*v{IJJZGK:0>3s\/.+/"t V788H +U;'xPHHLO;*\PҠv!P;Xg8WF޿cۗ)umnfL0s-93OS[^ OZVh&*cEzT%y+VkU;Ozv1aUSNɃ/VvABvG>cmN{۲CvSSGu@:B3N6D.QGcݞ@H[D4ΡCr{tEzvlK.iy\M^jW j)V#ӎ;E/ DNů(jA{)>]۫oNS\|9u}QPv!P;Hj`gDt6W 򅉉}ch&޹vmծsY:} \P;@[_kʈhYpکq.Q^(vU=x]ۘڵkzzƍRj[o]ڕjWv%ABv/]IP;@v jW j>]ڕOGԮ$@ }v}_WFC j> WoH j>jHj@@Bvxv!P;AjHj@@Bvxv!P;AjHj@@Bvxv!P;AjHj@@Bvxv!P;AǪ=;?o{hy*j "Gx9K@YWݓ|޴Tk׮{['FB!B!B!B!B!B!B!B!B!B!B!B!B!B!B6^W.//疗YDܮ_^l5v !B!CCC+Q-W+Y;f%%k5<<\~FpENTɿ_%B(v/Ya%n3{,Zu_.966V~NJfY̤kTYzѝJsss=]l|kwjcnKV5- ͪY}sHhYM۴RU\zݿBoES_*v% V*/RϺd=J=N"yɯccvjӽ_GZYbG3[FGRdV ΢s]Wp=66&Bkc&HMs{ܺ3BcͼuMR̙8cwb2ƗkUNwL[RYO%#tV/ilL톝nbQw٣mJZp= t>j{zq6}oX_$^󋫝ǎ`. Im:67*V%D̑㳪n~VLl%R2iZ1tVeW "˕VU=#j76{Dd=KI֔m Huv>=1)m^0CV&bY fC~k5H^a|i <'w_k[Zd6^uFw#\Ȩ\iBԻT]aLlb;^Phs Գ7i5Sߨ3 lQBe-mwb&@B쨜وN a*;܍ӴxF s쐕$#Rq˚[7^ͪ]h9U;Ywd*'jG,ik;]ݧV]J9$['4Wb٦ӝ}2v+U;km;{=mޯq~ZC;#vJ{ƅ}}$["a֠IÂSNyڗۤR(+`+-pknggv"*ˬ"쨜zU-|W6YmE{J#՞]gkˋ{V«un / :LX";jcxTrjrۖ{GyCQ޿Zhu7z^FaS$>_[ i ؞5J毧 vNN*ۅVuKžK쨜,yK!-ǎtj m.a֭ݩ7lZmSSzuVeO4ɱJ%ovDZʭڭUr[c;RЎVZN{v?Fޕvys]h{qA wG4ۑs@"O Y؞0k:O|NΒ49v?Fp5="YJjEkQzJeеEӶly_xʾLyCy>4vmwMެy_U;베E.kP7zˆJ.ho'UDp} p(ٝ;I\8NŁo@Kn)vNCnyMiٝvtkO4-v7?.ٗV˺ :U;3{wQ1u) 6[kȼ&uh ޷˖s6;jZh-@~͒s9jf~?,xqGlq BWNer Ootk^riWtzǐNCtXA{/k)]{6h)̽oFk?7Lt_="o!JVUZŵgڷ:Q;;2˱]*jױN9'bvO|i_QD ,Kv+ ^ c&[I[7w'2+ľxz]E.{ɪOsN_*vaZݳ4s ^5Ў+6%YI7tX1r; .z_eV;IO(]j.vUlO@"7 [v݆wGX{P\B mkڵV{V\xMܑڵaEa!O4#oV]5rX]}EgR2c̽cZb8Ӓ7=4񧭕]@o|Wyq' #^ ^-ҝN}sOqUv(A{݅3wB m"toЄ~>U?e+\֊>)XCr[ZwߑՐWu\-h ^"f;kI!B!B!B!B!B!B endstream endobj 15 0 obj 10403 endobj 13 0 obj <> stream x]Օ"ÂXƘ!!28K< 0ex,ؖh)ijV+ %1JXYYJyO<{Gstnꚮ;ѧV[u{VՇ~8J8{l=8|7-A ' |sgv ƚU_vIx=o d 0=~~yU]߼Pdo@!4 у@ zhD AB=h@4 @!4 у@ zhD AB=h@4 @!4 у@ zhD AB=h@4 @!4 у@ zhD AB=h@4 @!4 у@ zhD AB=h@4 @!4 у@ zhD AB=h@4 @!4 у@ }khlvoC4 D;4r#R877WBZmttD>{'+ru QHsbbbBw)-SNs 4 ˓k=2j{Is?==-dG4;;+  vv.?" &Y~llLv>%=`NPr5@˓ .hAR.PG`1h@ǶsvQ|k]?+s(ٷn6 ,oP allL}`bb p~t׿*Sbzz:FrLz&'';Vr5``W6`ddD˾B4!P wTe:r&*y*{qM'L`G.%}K%7n,^O0=~ Ҁ_: Sacd!&m `zzZ uJV[Ujj$־u5@jhS5y4@V&|6}vӡ\0fhF%.]җĝ 4:t^spd|Xoڀ&.%ЀTANOL:=})t-+q5@tL-5(zW;>/tJ1-9sRdnDtoKў[ܸ? ??jkFZ;U4jmVb]GeХWh`۹xڭZU hPiӒ$ Ds`f5+ouwȩPo-Rbj)xRuaF%]`f ;gP'vD%몦v;C|@4`Eh9=IƗ k'ܷt4`NHkggCWtG4`YzG_ܕ=hͪۏ=:]YgGi!=6E5CG?=u7KSݽ8ыˊo|jvl.R叮Os}>h%=Z躵GyݍdTʻEE4`hhHG޽DU +n^ΟN;󺋔!-??Q_X_uAə$s`OTD<>; V:h@@Í78yx_P]bi@ &Ozݹ7D^ gw+艁Wn1R &qq=Pjm BPVtpӀU2WKt;2iٱgǖЀ^c ΁^uĮ!,/A*v!Iz5!Q@gAh@OP 哿-q( ]-/k@jN {%|Ўހ߉[x⼾tI~ m}fܸ^KLO]Oh^P55A2̓SSSRbyQY&gAj\EWRk,K_Jj l'6&N Rg,2k/ulRf8VhE H@h]*Ah8Wvh.,o-l.kt%M,ݦw-ŝd+H$4v)`ߗ|-Ԫܾ);4@$ K X^ֱ 5AI\o^0[ iM,2bRߕ+ZOW|ԒBd`_ЀDZt>YfTvVwvXK ! pWW]T>n(]Qmj:v%X-.fWX0 2jh@74< W H5\@B'F(VHa`o7uf季޽~]4u <`$F 7v|/oo hs4d*`;jme(3dƜ[7#hC=(`&Ks`|~ ˕>7m7:a 3ں,Qn=_:/Yw"Ѐ'6`n='9q}%vE\P5thbǛiuKV`Rn5&5I О [73LЀe{wl|[~5%рZu%j?_Wh-zBܜfm7+cL'B`KqO47 ?) AYg.U|P0h'^O4ұsmJ=򚞲A(-[x+[uTN>?utEe0:-%[h:d5 ŏ 8kݞXOdKq+`'9ڽ`bRM F~u=^Kmz;`ހ?N*JI+^Z@ vڧ^bHϹ-6oz\ u.k'aBҁ_hOE`\7`wE_Ku5 =B 7S+i矎oÔz!I"v`KJ=. ȦbŸMضMGjZ5@+Ǐg?hyj@)}iQS+рs>-VX|ԜP]bj@4 ?=}w?ۑ~e~z Ӏ!)d%FPwU툀]f, >7/րԜ(*K, 헳Eل;xf(5 Wkfw2PK/7\7 {\MFz:?ώ-%^` Q Bĭ&vCJS 8\7 {\Mvzi:} @ZPD~ؖv?[\}駎}9gzIyt {|˝k|! Ȧiz[uj_A ɚwFd#gl%eK.]pA/ZP5ЀEXjzݹ76nX+2{vŷ/TH$ KK\LL*͝ J /j.ez,%Q.5KX'5@2]vΟ^D?Zs[7U hPғ~_>HCN~5@Sˤ~B4_udKjrQfUj+<HRUrYNltL22<4:h@'#20m衽L$kCͧC5k>ۻ%                        W\^p~~>"cΖUaMAZ#FFFpppP R366vԩ֪,kskn7JE>/AA5LjFs8;;+9<<\|hEרNyl>11Q/(6>D 焖XL̓MQ\]IiQ84{h׀!q"y ?Dȿ4cB| D R 6.tױM&BGS/_xFFF^I$*nMXkemyV++t)e/We嵶ԿUfG~*De4`ZIh-;^B>jG^$3d:M ^͡Ǘ㑬gOAJ]ػ*uG-R**ϺyuvxB_DN\yԗR.ZЀ.\LL9tb)u5t KUԔDa.D/\Fg_Ojv f최t %eQJǦ&tlF5OE?K֖JԗNIMZ F"׽!UwL-2XN )QW 㸋CP m#n7ɼ&ҭ6{-[:RjGN).Qw#Vϥm{uAQi٦w{/d/IwUj@FfĘėBDyֶO+wk%A~ʶw} -ׯgaQ]?ԽOL/$;ι/rt}hi+T;%Uݣi[ ?4 Ķs/TgV,=c ԋulZcP"ttlIU[8 G(XYw۪ؐXzi54h:D0񿘟w/y[ w;;ׂv$fk@}aWn`h 8fbWi~ch̀/-og_$_a m ؏G~!ߞXnM]ŭ"5ˆ  aGIdHǑK _k{j!2{׸.O-UBS[܇__8r_C]mĻXc@GS:6݆]YaKm=vX#ĥj(䓟k簈XͲ,4~R} wfLv}^r$~4TeD;H]yAX ;5C+ɘ_*׀ ؔ-&R2>=b~ ЮĮr0hǶZӀ%k^g`#nQ'CʗkĖr9p94@׾PX:ݞ9RDԀ-f)OG"8ko&z]wuܑA(Lc3k24R|ND?L8&DϤM =R4 {il?/o `#lpW[AfTk%AWD,ұid)NR%IGjƖ[ u׀zf߇fxXy?Xۑد;YRDjm5_w2 vlڇ75Dυuv՜3m kڧ&e={ͯ_ImK]O70qOL[&[&fԶs=ANT6~lꕔԱiotlKAAAAAAAAA endstream endobj 16 0 obj 9685 endobj 18 0 obj <> stream x[Kϯ@Dh4У &`l?"Y(u $W_=6g;e0l~O? y18_28N3@^4_~bō]p~|cb_7'{1zyx]'cb|է>oS QGchYQO.fՎs:^#c^\]j;yiĤ&_s"';RgtCbP*N]J09q5Jk.|E[\(gWXQӜFr`=Akg\uޠW{-.E@PWn6w}O;ޡS, (Ȳl~~%W0ix."n;)'j/~.I6ж4)}4[mtN( f*ځx f(3?э4m#7QF/x]b'A5/rr4^Q$2HA(r7T ֮tHI)˴&Rm3 )K^-jVennc^X0 rPM4WQ].c+@'#w>k໲"3hqrX"_cChSjZ˥I/! AƲ5ל \(wSV 룘| eɺ hZ93NEސC&JuYDNA!H5L\'"kB!L(Ŕ3Ϡ"p=x^YWNZڬ VDvYF#̋{eNYC"7ԸAZK]]؇f5*HD2Vr@.:,80)MS”s0N>߰HnXq)EMcc[7(Ca V JȤ\q|CT@S̼\y &!@W0ױ"SvcMᡳlI[r)J%YY q,t5\Z/ H`tX"M|%q:>ar:J5>ybW%yi,k[ 2$5L2aea'_;fiYG5:MgDuͷcy%*++d%d].3'fS𠝭"JcEKT⚴H-^+[9m*R/|vJf=syƸ*Zg#Mص׹ܲ WAh \R S \'*;K]b0l. ^%>iL]K_,Jf Or̪RyܧVj?QGSYQU<Ԛ Oj4Z4QR\8QmIM^UIOVuj靚O<Ի:Σ.Z)DkFϘ:0٦=BM]u)j [5 ?rkՙWE pC]򧵄2G[Mՠ0ON5f?s: o D]quH3+RR.}FKjH*#[Scl*q:ױikt_z4iӫW K6VUzNS8Tz.rE86y5Hk^ %)xklb_юo8$Ίu9N]1FMy$ӧ$p`A:oE:ļP7 ]p!5 P ^GSCTCfLY]o \=&l#R;ۗ:mzZ|[e 3L\&&"')WJL*Jjr~dg/'ϧ<,Ъ9MORONM\W]{EfJ,W>JRsI\͢Wz&X2uPlμmoIh9=Gi_;.6X65,N,1rbdݙR2aB8FS|S _?!{/wS_YdJA%OS~qwD~uiK endstream endobj 19 0 obj 3096 endobj 21 0 obj <> stream xZI@& $IS26UM{6R_UQT'=~2)5L!ۿ?|7rP'to98Oqf>! 9ΝAaߩ?u,p'V,6g艭O 1b3/ۅ쬨wsҡ]?Ceb)&Ξ3c< 3XZ׊6p&i`6BU[hi8vLOj N.qEq8%xM߿ 0}Y sVFY喣>+:A8+4Ls-sRDfB3Ŕj&Bq.vq]>o<hyGCC^#fOzAxE].*n>kG7i*J|;sĭ,bI410`q(huD2eFne@Lsx!M;'OiNoL>RYz} |FcQ@ͳL'~dH$n2@l~Ɩҭ#lD+1\y}}V*(Bz|_%[]G%R*{!:/kGKݲq.Ivj^h4qVhvC0vyǻ5ЫvV{UvO<1.A?s0bF*]pıԶKeZ7|ֽEˎV`j+6VƄ]wr\ǵ$ҙ 2d2i.7k ׅ w t,ƾx+^x"jhQUMf_#h-췭.=NqL&1ƥ : P-89?MMށ[z).I f@ fj O=jD@3) m|Flڽ̅i+9$Ȩ;&!6];U$/TãK 'Fׅ:ڍ'mv(n (%02Fxر{D } q5+a~σ*p. 2 @)c~@/%s_Ɉ81;e#m"*?Pm=29Ry?ֶz-AM쥄CJ#B≢(%'HWkyJK@?1T/pL=j[U@ nUK @d)=5Z59g'J!d o$dNJi'M6YM$:x=B)[j !Lk]s,xgpUY=J`,WO1KT̪,皔),ƕ‰&%j/ FRIH)Us],`^~2})hfr\6̓y1UCTYH7@^txb7\KPS,)E%aXqp j(tJ7&0*xn{LISsU#7<p]_9ص@J Q9@ ⶡyiAt(0>DAݖt&˺9&yNSRN=3Z>ܖ'T i͖seWj˪+CjD5|~ə6aߥ>y+ 9T<=ԩTW%$zhٌB1Mɘ؂y/h}VNqAMG=}[%E<4,ՈJ c&5_S"ą]ɺy:i2@,1Nj{[ZD>n5oX뭙bL>.Ǜy[Ξ4a7lڑ*/j?R%UwMQ*R4BGy񚋆&B.~RJhtp3?EK|LbK%3* !ZKg*N-ks1%C*U>~T_[#zS í Q ~"x.%9F.L&+_oqmEhqv)Ts4JA[A鋶gdM̏sV{4}_H_$r| Sevݷh ̚?A;J4;<1P<8|w5Tqk/$YB{{l0efe-1m0I'd%LxNh<[vP=^Zw$UTj. EڮoH xRTѐްH)`ySeu65N&ָqJCo%w$_oI \ǫU.>uק S |GV\BmQze(NZF$ endstream endobj 22 0 obj 2454 endobj 24 0 obj <> stream xM,7޿΁74Ӱ{{0d$%?r{&;o cْ/KINN"g%L.n NF`?~9iOa^`2Eu9ZBXGpd] )Nv8 &4"UZэU'CBt'7B;!>|BK*iN)-6(mzd}a ~8 .ɠ-aS @ Pʸm 2|-U ^ݽ4}`zќ,Gyv?o/N^NE8pEB3"E#0K}/1~Hq]^g6KuGSFȢL=aI "*1Όơ,o @+O?4~^p"Je'P:K2 >(d/AÓȃ<۠5Z^TQQG#Nێ;{\y0==D}P ,icE紝,ʤ K,͗,GVeD_D =~DTTKYAgOS(zeyGBbЙX/U5/P^a)tDVRz(#V ѲEDaCQ* bh-)CBgjVؖ} ["`TŜWW'h}3f㞱0cXm;ٗBYY'"+^7} R< 7dmDA^\,{<&zlbgN3~MGg *íl€YH[[!CFץȅqM&`,ԫ$XJ^fh}Ͷ1Hp@Q`&^qnp]V5w8>vJd&G&1-vggTO39;fw*ۭ>4"F*Tqc:7ia/2+Տһ Ѯ9fF҅tzmSe_bwP(_Xۮ†cd9ݯdJךgwd{?4[kKt5~vDȵ8;|rؼLIy5;-Ja#m̕P"g{**WgEP@9@:4XM(fâ1t7k%W2lIw)R"B\xF- F8ck]20;GG .·ߙ,ҾM$(Xe)шr]Dv;]RWV0`H Jd~%[[v%Ԃ,#h9[2S9g+k X}>,+xw]23 {W>3 m1 8aTnXC{*[Y߳oqZOU[I0?|ݲW6 V'kM %bGSX ryi!SȇE[  Uz{xq:{A9>V{D HI⟘@jFtт,US`4w,"f /x>!wof]it{ߋ&MFw0K3v-@ bvvWݖ&W.jBe@uZT<Зݜ.-իddzv8"FHv.?Yl"n| tϞ(J-k?C<dl퍮Us.˅ZeYCZeM~pHz;@&+(a`h&j 𠷍#Q#'` nLb1v&ՒkyZÐ4x`qwVZk`XTHhCK\ouWnr_V.եZz6V?mb}aº0y xPŤ%ѤȣJIP_H(N[hztc,ZRpC#z9l2`El"f\n GmXCأe"H--m-C:> stream x[K$BJeBPU= mŧ`Xً/)gN"Be^/N&7[w;ϗtϋy Ʈ;x igLNk8g4=rOKK5#<--s igMz0j5qxrkL"`Mp(~~Oo\b/ƛɄl/fח//_aW1b|5XSnud%Q+-^ .溝紭IyߖżmW c,?twEpH{ӾvIiC^UMfVۋKlby&x x!sfh@jyPd5 vgK).^.vCrs,ϙj5v(ߧ<:kH[7j?2oRq14 'n~9~лj Ai L),︫~Ō2H8o~mNk]H R A.Cәu((@f=Uyv"oOc[f O[Q xn-'"c(_\b5[]e~V j(*V[!+#UĬ󤜷OI4I?I\IIm F*eH^ !!F %? ,!3_u3;|u(KfE5yjtȻ{"94^||8o%e9XD>G nFP߀!x%[3~m^D ,a)DY[bȾKl',f7e%{э`Ub'h9ƆiԏDSD ɀUl4eQǧkg( fo7 vxQK7w&(m3k]wVf1*ܴ\ `88z'dpů16te$8$Ů^%"Gv+yQ) ks $x/@MSӖ1!bwx,wW'խ#{"FlQ<Ìb! (`Hv`I D 5pű`$Q'cUp/SUmٮLASP9/\0m`E}7[ٖ9.ܾ@s "2*BL3 0|Z'YQȨJ=53@)=]C+`}#DQ#Aˑc`y.c< 5ty6a4"5Q; 5} %!Cy[ok8| hK`O"{~'1{4D6nX'W+*ܽ Su(v(=njlqSw+%eߕEZj[ lM5*|Jg9I` ҃8)~Bz Cɳ/@dΌ2/\`QQЩz +-5EǖR*i^Pl`xr/+YTTB^5X;GM'; Gݵ!=RukMiD@mx҂Tf!.-zڴwB{a,;]!*u5OJIj)ǚGJ?=ԨOP>=c{zP?ԓy Wu5}ZU8H~րҳCD̎{Up݃[Z\+4jgς8}wvJ/Q,A蒴?=Igh{a{OɵRfӚWngi]bkw*uj೷J9m[P6{ t-},'>fݒp\_(Uovcj7;rW;JDzPt[W;Py%L`Wӟ#cQ A1xAp̴@ϞR$,ivC -^x2OCZ} P%@#4~l:hk'+8e D_%bBӯcnda9 L(2x>I#bYX2qMffDY:kLJ<MNOn\ @*@jC8ip'ez!VwNXBõ.xyg_Nr!1`"U'wAC_O xDuS77xHmD^_~No=}Ezz? N endstream endobj 28 0 obj 3131 endobj 30 0 obj <> stream xXKk1 0SK~bH6YhoJOmS(%W{BI$#_c/T{|1X(ќ bb#@5:sBEXWx&c0aH,]>KJݎlٛ=K):sd^'4{ u{ކ:vw{1Ј%[ts\A≁| 63P4ZٸC͙ۛ *Flf8dj4`hL=VJ:I>ӭMC২,%,}츥?,48lkj+2\tm CI6yړ /Ć)im/nִ8+/ϧ^Rש9t (F~"uh]ؓARivVWEͻ{i5'ȡ(g VC֑gŁS3 WRf[/h }\pB=Yx5lWBԱ{y]d Rl|ZI&"%eB jj%QPj˂8emJUcKGJܾ> stream xZK4{'R+ROzm`$+N"!{ٿOH{!NQ.W}Uى9ScBh>v毃9]vΞEy͇om{jo)4o.eh0:ekE`k]s 6]SUW)gYKm̲*?l2< _w7T Ǝl`tg7xgӍ?~x~=?f荛t, rHzK c8 gs@Oc4=}hѐ1Dņ9CdY]<-a;ZDžl`'~Ҍmu*!yl 6Y]ۣҬ.4ֈt'zb0 ^vy,Vؑ\>8jǓh)DmI$scSi˂t:@YР]FdDջ:qH) Ơ,Td=bf6;_UƶwƵb˥)FGmKcn(M6E4f>EqPm+LSP"9Kڙ?3 R/GaK=8tTAkXS*_ P4ݢ`s˹1-ODK5 ]!9<RR0l+'^GmEJ,~eT*"$[v $D .^꤂acCtq[`t ͼDpn>zZEV¹l+tw ?;b-Qa kխYv\"ɩh#/ M$eZZH<2<Û +;qNsDm)nV^cM 6{T0&̠nz\t FOpAKQ~S>;˻ŭ34uEHG;݄aɬ1۹L`;"6$P|txet \(XvICHqӮe#ٜ퟊-VK-\5L 9s:]ҁx5%ˊi#ט"/Х#Mi˶M/U_fFۃi6?nٖQ-ZY]ZEIwcXڄNAW0$qPfuR=ªTItdYRNZV,Iɽ~˥ɼ|^Rr*sb<~ګqޜC ]#Ѧ? G"i OxF+Φ MM@wkj|NcnuPM\@%XKyL>2p/ D|9zԉȖA3Z$%$\bDQZA(MZEŃ:~^IWra J_*W{ɚR1M'C>Ub;H44;;N],LٕO'L3%bh؉Ư*(B's\PʱG\gfaD %XFDM p$/%xn{8l*fwcGA#MU }˥cJeS}9w 6IuOTQ3 8ƭ\,*~E-.JTnnr&ayT_$"q-edNL c>16ιj5I&T0u 6XsΕ8%wtB12n-vH uЯ-U*9ػ1n%Pw9a[3w 7%g3_\_H K)Pʇng3 _oi$g[Tj {-LR8 R'O`[eOj*)NDW풏;ycœIvGՅ],-_P ջx7l$]/'|D2 5|9MpP> stream xZK6y{dY` =ݐr9%@`v/~u0˲dU>V'w)k|_>u)n_SzruݗONsytqW`x i3hZԷ3Nv!L)ŃL`S;A7$Lnћ"_`iC2_GLfTFY妣U?zx!B'eiY L&Bn)ɏj BavTOv y'4 tQ=Oh#l#$ ?{aCՆe,k15w&`:PfԞU_4Rq!Kǐr5(nd(x9У,Dbޟ57#\&FB:@.$G J<^֣hf<0-m'Z,iE(# K+Bņ])7dĄyh)?|~7JKttC) !ҊXBKEƜ\2'\P h8V֙3E3 ,͵ "bmTFes$UY5"}jxgP8?Ѩp Zi_3}k4٢Tea[^QT=o 0ى]9aH%. bEgGe@']@ 3@ِJ:|XkZ)E\g*QNy){} ><. FK'GH` 46 p ?ԅ&p˓3H0i;ATBYqnlw^dD? BŸwQ会aHItJM2S ٗ37C.do&'O(TG8$= N~~=?*۝anQl4=SnrgyA6b?֊uVM*GX1}(Tw#_ͪmM`0ͶJ8)l9b>KXz&Qk:Gvl\ذ" {$Ѳ6v<Jx[*iO92}mx^ogrQU&}%o >Bc tA#ՂRc=OHSU]QU82oU Y>ZeLV r@\{iQ5SoK>BV]) )1]gEy7J=nd sYzm ؼ;%!-Yo13,Xͦ?\]zfpgJ'/T^,WXITgqgE9_ʭ 8.nbBLV:)9m.{qXle4FDrɾмaΚKW.R8 .9RxR›\s ~eST\744]w j΀lsS@4,EMHD"cCbqzihHG^'z":R ZIc_"KJߞjnID{_" % w)3֣p&b49ja@_Oڀ+ߛX!PԎh9N -AWγ;QT2.D氹KMi/"V٢fImMX7uI+Wt)| H+ rC:d[sle}5odTJ!(9#)#27Ga>RdSX|4=u*$Z j;lhuvNA4aq|YzѸCo>}LyhOh#[h,5Y2?矾}, endstream endobj 37 0 obj 2226 endobj 39 0 obj <> stream xZK#y*m5f|VJY3LxGdRg8I' wcy)HB0V-Arq|rGM=G1ZZ~4o-iǢ|QđV j"lD 0+wYpڭc6]D$;+kXAhDJF|kP1 ]g멒,n@Y = K]1.*n#r#\tQj[X±DARlIvk/mr2&6z|mHύ) Ӓ%9CZS5yZT-ɜ=`b!vHc882jv(ybz,y3m%nb &EBUvgZk,*Iu0iAc%aj!Ima>~Vwr6Bқ D&U_a&^o lHSd`-]Gu.[R%1'&GȃSpzU`ܑ˖?ù8:9=@du:tKjpœ&ura  =15(Ӡ#NGni4o ڵbVZRЬ>Qڑ%A3]^]&[;FˌgSl/䣝LBkMĭ p:h -ECl,g1oeeGkL봰VQ,&5Bڦ[j^jLrAOwGnDpd^ SR^W֓=5Jk&c>,ww˜W{Eb3:%u X/=t2X5LTxFiRE>+8i7'c5hЇչtw1ϐqfG#uMU8Y=mW3McV/@$Eˇ&ce9gSmPmqsW2ѩ8":E^>HܐQ5I9'ő%{&4íiiydaS.t Hפnи+.jCHZt|hFy{wf%xQ>6~auژ:Jܴ6p*CH#V'xᘵsDWU |q 8G$q]PqVhM~XB]@K9Rֺbǩ_)~-=y]k7L`AbAoΕT6Ge":gv xkU.O@Yo~ǥVG4nXk c-8'ZQn3$8w sT/}`|^9lxVϟrIJ-๴uI6g9WS :nUI2[}i4mߣ 1㄃ P=dEC>uTkSHV$+c\g6WP{m@Hl}^妒xI#[qOoSA3N7LV4%I);8?":4`xۢR|͖5y%c%yT(ޝ}יb3.g1N !=#oțxQWڨKUPUnW<x׏ϟј(^s1J7qC01cDL7?msJ^uqA5%S& ۗ97s zLv;y=p$u46q_}ߧoL- endstream endobj 40 0 obj 2472 endobj 42 0 obj <> stream xWɊ0Wpd[g@C!lISlnٝpzR-*Ke_X7d5 };;CE/_?b5ic ˻Ď蚖3iŧ yr(ё?gG!Bӛ!lb >:z4h`+#J.e w.T^)7IcC0vϑρ= m=Z(V-7\]7j.渜xD|,aJs}]M -#a|*HNj7jToI˭409y&1O[xgLMss!^븗#8p̱TP_Q H6yOMU'3 PɏHK lt qH-z?wƀ1Ƕ$߾܂Ha囀6+Mۑ#+Lk_(өGK_ D9d7jI@Y8/FR+q#8ڀD-$*{A;uH^{zT4Y2vdK @1I g1-|{T?*uR}~* endstream endobj 43 0 obj 987 endobj 45 0 obj <> stream xZK7ϯs`ƪه!r9%q zH~wfcJSOsп8Čç?v?03o aӟ;ᐇO.k~g*لyn3t~&GyK/G hqƏ{80i0:OLN|Z>\F;rQa8ƣI(4tcf¸#cJyG0r&W #Ф/^q0 G<rHmT)޶%Ujç0hx3xH:/[\4zgDr؆fs7^ݜhḷ^3BJLۅJ*smV .Ú4 '0u\-ei}|U^Sݮrw#>6]yn>mFNc(pu4kö2W2JCU߱QbR6%\G)MOvLXX- dٮA6oIu6}R*0 Ձ8n E$7'qF`.EVF޵.K7\ җlIn!)]x]@)` S#/xx FvjqFKHhApJ.8m&2ꞍxaS!yTIP?yx=yq95qsyqtߜXhĶ ,6^ϫ#+(uў{AdlZ.GdM qAڲRڇs'rBi5ecßL,@/xz"cC^Q_*2]'2֭n+1k Ŵ8~ eg*A{嬅OՒؚOb.V'WP`oBƹFRP0YahO_ m3 vnz IsHvWw'ti}@~=AHCKrZ>o+1= ĸzEB}df(Ԩh"s>߀~y)FRb&h^8 r^|ry/( WtDgs >$E滏 V3$uM48?Ql"h[*I ⹁'7<[3^$ 1UJP\8FO,^Z mǻ~tbi9<"k_O~(hefUbKeu˔K?7%P}J R.~|Gk#l$KeG,"lA,9f2 ?@0V6 ȯ Mګkҟ6l5l& _=k>؆M<:~UǥqaȺVDq#e` 4͏N~En_0 endstream endobj 46 0 obj 1554 endobj 48 0 obj <> stream xWK#7Wн*M@r0rJ0{O=$u@XVVI+GPޕ٨~5n!YG<τԗOU3$2y+y ]>*Wm'B(HĨ8Dc0I!vMcm8飳$mJ\2E7br_QO%c"C+RiLb~Z2~ܐ5! ẚd ~TΟ0JVUڌK-;okԅdZHN#|c19_{ x`)hj6  2 <(nS3 B{ֳ+d Ig`9kp$ mrHݜi a]'x8O l[h#*Yf SWE\m::F8NDw&1tXJb)&Rtjuv59&v7wwv=̲> _EGz;Ol.%c$lD=N- }Mf.e37}źi ;&̞T:TvAj|uqsξ-n۞c&/ӹT){\aZT-w*EӒ(yqX/{:r)Yʙ%gK9F2s70gV h<ԅ}nh[Ԁ"yHv݊Ի__ԻD@@'> stream xZI7szZJ%h zzf rJ윜`_t`\OoO_&ЃzO'uv 4~ 4|8|`:ΆGyjfqunbҡEje86v|H45y. ]^Ee[FiQaVi4kOl"4XL/f"u]F%!x{[~E=/ihhb^ l&46/ˬ.`Y_h :a/ ĕ97C.&|h䃹"}eGDCfdf6$-MZѦUB" "j>+êctnh'}320 EC4Lb+&ddHR\ j$ QJ9R%jT00.y4ed NBjk+:q)sHF/˙vlIHm"V\ך+%ieO^&˚GlSGt|!f oTI&3cS2BpķrCk|1O< j~?b2b2q$&鍍Z ? MT2%ki"(\ZCf=X\iچt`ZZ7Ty]} ǵ`|cIaDC葍K.d]ۜ@_[K:Gn k`gU1ge&d '!*uȷiCH`D7{޹o7gjo|_uStAMTn|^34Kbf>V9/'7xguw$i(Ӈ# *Wp_5H{ނOsTR0ck"YFC:YUfWYo‡(#߮rRvՀ;rBJҲ#78EF.8dJLE7jT]&W[ps,JWy`W{U [FlDL[M%^ѯ0Cs\T2ǒr"Vx©RqGf.q,IUzJ)d-ÛT_CSIRbP6*ֹ"K_owP raqK)lՓh&OF@;|wHڮ`8c*F7zbg?r[8R諣\OEn}\m&`Q 5-f)`ԍ|6|"B9p*Kn.śGrT>Ys`Q,qdud!7KQs\ʨd+(*SHcCq%ͭ*,R۫/kškng[`o.rcKc : _K6==qœB7*D k/}gT;7ޥGF߽4jPc C48ץY`k|== {SMYg< j&&4Қ8as`y>['9;/oT#$ՎXX H3ƌLښn>t~kuw= l,jR/¶9`3y\qï()ik0e-#ʎJɁNs UEz_D4Tȧ9aZ`)ޤ[Uyg/6==֯)dzSo×L}X`)9/ϟD k$ endstream endobj 52 0 obj 2026 endobj 54 0 obj <> stream x[Ko$WnрԒ䶀;'ؽUG񩑼{ ώͪb'9M\|zYVȋۯ߇fK<s3ߍo?=ao[on7G`\mL?{I ^.'zAjY:ioϯW?EW/P*z tNϲ*h*~&n^Q@HGB/+O}lx:Fb*ݼ"LDE bvJ+aJUhЁڕIJ`&aS׏ޕ'ܛ8:oźcÆɡ,֍6>h3ōq'6}eMJ! 3o~u^C#\E2F,|E,djb0^=#R{빡[]# Xa*u -Ӽ3>. L!"-$ )r3[0FO|$)N>w#87| ‚$Uz z"QAOuzR[.].T:3]P\J$hR&f Aa(ZdY`eDhOϬk g'=Ep!L?#比MҀ&e&j#Abh *1 $.ÅXasƷ[g&r_fjm+Bܳʹn5e}nVv|쯔FFϴP/Fg@ ׉N&aaXboK~? $Gjd 8"H}S?;Ss`3;&tPK 8KB Ě 9Lkف0,9-;̠Եqr_V:TeGϦRJ$b,]8",ߵh˃aؔ'P ʼn.g&!~-m3oaCϙji0VsLhHܶىjmxQue(I2 cc3aPg` SqAB0cJq,Q, :͕𮚾^`>y L*ʎnNxyMe\wUKJGNrz>_+Ak=7QU{8L$S-V{sd-EGm\\"П},Ot˷Rk %*Yﷵu,rK I*fvB0`EI}-It lJܐ|UQCuu]gO EE\OpYҭz-_ sO@,xi&BfXl3 Ls˙Դ % WDBx} MUPJ:埴/xޞhlvU )Nǭ`^CO$n%❘WGN2P6L;D!Ҫ jϪ;ӄ^=IHܽ}Wxgz~ < - endstream endobj 55 0 obj 2732 endobj 57 0 obj <> stream xYK7ϯs`*C.$7B!$`_S[;iI.U}R LL ySHzO$?~_EOYk@y%EOi9'QawqCqo]PȓhhQ?ec$s; Myc(NS䎧4G#~>=}`>ҳ*rϿtzy;}$F?*Ee< W.i 1QDSUEbfWus"!(i1ﳾ4ѝ -yT\W&`}T Ica7|Ep'1d"gOgJ4L ' ٣Gѯ<{Hv3IJg.ql@QZxU7Hr, +I QטV]qυVD 1e!MjtwY q(Y&jP,3C{ג="5]3I2HjW^4"G .:h'MʞS ]VBvأB.;L'kv/ө5ܴi>0Oܑsj][ u͜3^Ξ9RjÃ9H^kT YroB,I@h$w[sք>^9=yMkhzdƁfTxuT}ʌy>*. ; 1n޽S*CXۡ4MpJmĸ7䍪 @{ ՚VW79m4xl4!c L/u?VIvaOR E_4x0TŇMhK% S/5> :;Tw6hly]]hUx֎j_e"MSZeEVVWޏ}QHai"vR^)U }06>j Pn`ϲv/b$Mܮ^{L ؐ6i @ CwN#ZVߊ "G 4  c/lUenN^l9IQL8]T+O"!X]'_=C-F/$u^(/#1"3!ژGQ=[?Ed@ H ԙ@;{-g MShK=(ȳ;]mU2'u/m7 *Xl Р4f""k zze2~ :UPFS}Nrs]Ӈ?#3}8Y endstream endobj 58 0 obj 1732 endobj 60 0 obj <> stream xZK6ׯ9@UDJ$`{f9ubr_>$Yew  U%Y$Gjsӗпp ?~9📹xi֟v0^!] n?Ћ8wSʌ+r J0w9Qki]Ʈ|֎$yuG7a]r8}r %' >uFdXOo'tL. +W _}50dgt߾?>1 äh삦+h%$3!WEڕP SȄjnәnJ̄x{(@ We 4AȮWv ?V]CTgٺl&9eMlmEWIf8-_?̷MEh׸[sR#<XS5gu41Eu/[S:KI 8 ,cEk&k rJq$-^/r] -Td`/ڍ]\3oxL釶K DiBuadQZvWU_U.p/+FB j@MzB|hgZQn9 OR6C/QdT@W;JoMеl5ulk2KpWF7 >Bq g>H ߇W|wLT̲d3w -W9]y15^3S'5w,V狂p{XR`.-Ol\pl[qOGz|w)lu,)PRscʀ#~:F{Ca4Oz˙UK"gyT_w ȰR Bto j.Ӷ'@VRaY"NJUֳ(Kj^s?M9"g4+ r*7pW \moSȁ\Z3^YYo,|p@;]dQ]u˪?% _sO_ SȆ=-ԧ C@h$L _5蟌|tW`/wɧeG endstream endobj 61 0 obj 2123 endobj 63 0 obj <> stream xn6й]pC$E{{m^K,$EɔAIY8;1'9| !&WßsR!9 z o'?օtA -Œ N-A'F%g-k$9@ӕr6}!}&X8Ī2Dd/tL.b2|LbOgџ NlqOG80 0:OL]дBs|Vde& V%fdBiw6HW7%fB<H4|ijyh7,#Ռ)fai%g|VOS8*4#&FLL/#Ng!A(["GTDhְ\pFyr\IMQ@I|LAdِ)GVDxZܱ׷kGĉ9 ɩ*cI?-/YK-*+S#ɤfY熅RCD6qXZ$a (E&=N39GioLc6,G;+ܚ 6e祵1Mc*0;4Eo]=/`A]3+֐yo2%VUׅc\mC?c.%L8U3㬎\TeyRBLO9DN%+@bQ%)WXfWrj/r^-<ߕɏ-J UA= e+nKvb VNm*ߵ\*f3E*n. 8},.Bd69qtEȉeSoܺn-n(ǘ)Yq^xl/ TvrCN~Z!U[t-[ g(>3rM.K5I vu5:0Ppu@;1_] I6Ӻ#MnЕg/5re.+},Y%疨nDu㦓1mt0[׷6\T7n;7$*~-_o>X+Vs@PoD Xz%dp)SreIO[Wr,6EΤǨUT?wƥ+վ,0#ӵ0j!62NTTXU~S$Wp$P5`*l(QAoї^Uȇ.+|TmTg#up^Lu/elJ{[X; Ѻ:|")۱T Y@ZL0V+Uj̈́k+uPj[Ϧ-1|. ΅l@tkE6w8g9edjl].E]MVs{ˮ g)ssۄڛz_o")4k?"\QlۘsO*uʦЭsMe2hIa|ސlrS{ӜD6C%Mw(^(t8O#mpFhr_ݘc]=CZw.C$#_K\W83{<4Ͻg8@;hm&Er7+ژ b'-{XW)?1=p\9y|׹MqWZeqR`Q)NfaƑZ?)zN=t|>pˇن;ah!ٞz*L[yWEmzcP3Ժ >5rLy p>m0>HܶЂ1qU$HwuAz/y zfaD;[K:c߬~|=|>޿&| endstream endobj 64 0 obj 1997 endobj 66 0 obj <> stream x[K y˖4 ԣ+Hn4 2 f.Çlzv J(ȏzˠߤw^qT:LC//x<Ƈ|iѫc܌8S}Ex`zlGۡgtt4jtl+db^f"?`3Wb_UNAi_^_>!n?*V4-ќ?@S2! QU3 v-5΋2`^u,!f}W nǬu,Y;"6sO@@#.WSDM&#Q\rΨ n|5Vp.՜ 3YuqzL3Z?bYV8e͠+PQ}pY=.M3U`Eúy#Ok}tNZ:ỉ6SP\95& $fQV].c6s!FۗwѴf#ÌشvҡR,8)T$Y@vx7aseq-v-7GHѧ#C8&ewKqݵg6dR 9Ɛ˻1WwV 9'ž҅71"B8*6ioqO->3Sٲ/{#&%_[/Vbop 0eV7MxhL>t%R++zE;ZC{1@ p1#Fm#KgfOGj甈tBL!m]8eZ߽h+ImHQƅm8GU'W a#%-ˍh_<(QLh `O>/\GS}x?.Ul D \1ewcI$Dڳl z-+j DgnF ŮjYJ0npX*'Qs!c ZpPyWÜa3sAjz&q^o˦]ٳ"/yqL]Y `;Du__B{a<0=$JkMքME maǮu }ؕA D[ !25lNQXȦeb^AgN~o 7mt%Fv؈1_3^`Ϝ3pTRX"Zj,uV ^ĸ&2X V.U'w"ۣ9/ҞW;8Q[~٥T'q2-OBGKE|$DpVex[I%yCCN6.% =x#HMĹWa6pz\1TbrU`5paS x/ IB6W8t H5*N+H2.=Nsfe*xVPm_qu=&\|i3bsXsA|l]ݒȓj|]I=?oiޒb_}\[]8~?Rg?"ĩX,73:lMj~=ńîKɐcSVNN xBzxQ&)B/tn]GT=F'2TKE9t&c Z 8%t 2U8ǃ: Qwh}j28j! o_ oDfTyu6]PѺiLR_ ?QU6HzyQASF ΍)jDAt3A\k\ߝc.-JTѪ "zU-)mUӋ"y,LZǪ\F2B Nm[vCبC{ŐƜ,P(& nmvOLSR\AѸoԻ"[h@F(RӞzkTD;5}ܱXZKľ2+mŦHv"e5jUzH֤^nmlfΏ2IC9s[̓- ._sܟ9lNfdJJݑT[,VZqz$l%x=)(etT"EUX6_g#&G>Zts5Bx\/AYJ-!F\ s32&V lv]HK^8cHމQU٫0nJR<{D,t|{qb3*g-rEهuSfo]sfvA~"4B$+D8qբ =_52aTm>uKOg{Ue[$AVLD'^>+ Q%ALB+GDF1WV#U\߳!g~3aݗ5=- ֔g9H&ДUH@B`&./9>Gesll)NmD3(ZO$@tToq\#+BDc:A@L@k*9 ODdeOц endstream endobj 67 0 obj 3045 endobj 69 0 obj <> stream x[I_sɽ& ķqC2~jz!'{a0DأzAY-f񻗯2|^̨~pfዛq79ڃjTqj>˗׷8޸q-4bN)b&D~LDQu:s<.q>:;sPף68ngDO_^`^ Z>PGZ t77qq"W W9HdFk>}z=n⦋5o _/i. ?uMhCR7_~~*__԰7pIfn@W-g^-PiXLnFn~;8 f+x wxY^BKryZaKsa4^ p,$# [Ӹ3Z4Qxd9K -mnh?7uB)y%A:.+ B쀔JaI<$5ʯÈSq"C DX`2ѮHO,4qL9-I@rT*-KVtG:"SZVh9Rh?^sGh3280 A( wpRp Ǡwr@H>#@"T/];>}t̏j/&}4LʺaZ?E-0<0fӹ@"3[!@몯e eS ic%΃y,i—ʠkMnĀ:6) R`b:Үh㕿Gw OBb,9_a7"*B Qu^sQ&` t . ݘ.e*\dfe'G4@:&ðeg 5${W/&|І.5}!]IX#?IWP7]f~F5:WO@7o xΖf(1^uY3rJ|b4{55=qOyp"N.odEX5R-[ǤTHd3nKPi_B$j_v31U/RY6lOD~lAhɱaWۧ[}c%:g-8VSmnH Tk D4$`#>(sw1Ks,&l.{ i}ʋ Wm ]^:D ade+|-_R0$aŸ]lT]et,hAOm"yqaXȺj+ aV;;~O/FDze;kJP ٪i{OARPC4yݟ&ä=@`ajn+q&a3$S/ efޣiӏ ?mYϵ|.G"C6V%hqΛ}`]r",k`Ck>,QV(ҕq?Bk-1R$ۦTW纋YK&%%[MgtՕ뷴~ VXu+n FR۪Cp${}1XO۷<{ucC̟jj~BYOE ֖Y*?U3!"K)^BO^O`Weo ˩ĺX2T,YqSC5^q궆|>&bZ,&3N '+ )"48s!f,N,h#]A&п+@;Llâa ƶ#=ԐS]eFu/2%o`W)@22`5ofD$\N yed4ܣ*l8M$Pèv7QɔSf K<ĻZtX^압;ؽGMs)6xHu>Ѧ\VsYMS@}q~ZݶuxANhWζn!.ꟕwB#2GxÓ/8:\dgc)[״R+siOLo%'Fh\u 2?zi*`2D"lb hm Z=BfPAA.#)G}^Б9g5,^ygRj,0Qq$cjE> stream xz xSe$M4I[ZnikHzDMڦ%RږM$)7 hao㲎S8gtupeY8"79综{;XG^Y7!ֲ:&"!т4Ouiݚ#K}.#Ċdf;(A=!,_4@t؟ҎPjr$Y?)|nr{6Ɩ۾"͇#_\{ŋ}c}DI7$M)TՖ1& z>[z"$>rNG_w(F)5¯,l%b.n%ʭ!9lɥ#@?}-Cd/}9E!^Ѐ7xOfQߓgfr<(&˰yQYAs J^An.#QP#R Ӑh!dtLzc'D].]V0/B-9ג&'&1_d@`YIޒV}>٪kkZ ry6_ Jhs+]g!o}BUp5άkȃd(=DJ[ԋvBlH5rW_/KKIAaX&O/hRcZQKz8J>Ǥ Ͻb.m;ߜBy]lbғH mDR|tb9:pt$͚k-ȵ涋d0 lכiD7 %_ Y@i6A䫑%Ú3/I@kA&cԸ9inL/uЗvKqOYM8l͞\O8e93%4#7#}LYYf/E4?O 񥧗]|'~'w禧, tϽzMiMy|nm#h0I#Yfɐ JzS⤳閣s=\*8;@u6jdȵfMa͝kpڣpC['zB9FI+﹥G_VlWCMb3;%oN9`! ~9.͖LtUr3%qsKdfp5LĂk~Р *'hUO_Ԋi:^_j9yWEEbaA9&H$}\9oIV:!gJK6>g|kYU`lRB#E;_ܱ}[ο3nm\RHw8vwY db:Tt\jԓqrrVfm&v_oۙBıf.RuW]D%IOdj2E1~lKKrJܒC{ciϘ̞=ˇ9c5b^ltd3c2tsǃO矿g|˿|No׵_+'B¾֜Q/pkf^7yrCCj^C[uhdp$ fSfN!I3s'fgM9bL3du[~)zR7^gvuy)-`O-̔ff s]wRE%IMK[?~ieϴZYpKRTj+@21 Ӥyƥƕ_j7qxtq1k9]n-O7C=?sWbϞ']_w9j w'%qij]HZj-b[Zl^C~O]XǒGRRܴiM li\LQ+X1{wG8|{};8YIf 5ڟ|H&%IgJg⹨ :ioU F?{mXDž;yw+[r]6<+s& VaO:7t`P7X8 ,B-VTܯ,%Vq ZOij[NՄ'SxzrLXSt{o?"8ѵ>5? qHtv譛-Hv;SvȆluØG,9ٖÃ2;cQc턉%dx.2o ggjQy+׿]Uұ',ʙOdz3ݒsㅽ{_>cE^1cZL*HT: DW.9($,&.=/ Jz7"`, `=5A%@0ʒXz_.ZS 1|u|K")1K"uB5&j|ތDŽSsYDϖ\vFsA.-Ǘ`4eo Bifs ل6yRN3AԳ$RB/)IF&#VͤLFHE!h-mйq_dg^iqNz^)NJt^18G̸L\d4 nIB~?OA ѾcJ1ڧޠSdq?/+W ,e} E?x=Hq!iͧt-/Ѕ[.^^`r<~$Xam;9l`˸*VmE'KYW{{ӟsw8q㻕wUN*Gh!eoK߇1A KBυ{ĨHK"`M~z%a7$a, WxqN_7s}[w=6AqR2)l6 Iə[[3mfLZR)fsJ%-iVKj 6mv?˩ҳL7 ;`rDj`lcǦL2OJ궺mKSr MAo vdcXˊ[~[뫕CV/)S[b6 ڙDXޘ:3c? } eB !\(@G@#!O6{6{?v.|W݄R9pEvnqm䟩^Ot93!+x\Z' kȥBv2MJ$"jNwcBW7jmBZDZ["~#f6Sm_k$ONhm3DTL^q֦D616hm;ǴDLjm`@kHiPkȜl6)y6[+B5[{L2U.-))X4yvl)r /-2VVzuK'ʞOpgsE0N F`<Z5zlt/riQ uM l Q{q|ugQ4i"m/VɘZ̴I'7:B]S`D8*t‹~>(~TQE<^_Y%ZGs1}?Dv_ć"`˭4]dOpFqA9m(fv%#9##w"y+{P߃΀/Ę>x ȍXb7k#!og0sgu^j2MPg 5A>Bl;H̱7n&d"rԇ~@j??J4Sن1 :.=HBoHry%FT;0$A-1pZQHA0C7DQPsr݃F54P r;CAE|4[ Z=(HUjlV? 4OG CrUX~y"Wg'y}Q[ֱ&eXzZI-I8 cQLuq]85DI'NQ&MՀPd'&ƵX'ì=0&T(Ǵ{br'}ʝApȺZx1FC,똣\^4JlDH'R qJی\x#M3#C(Fi\Ho9~Cdշ}"NhE1b]|ՅyQC(!xy5H_t!|Ff_!-Vk_cqOBZ;`>5^P[uzIq1|alk(|}ਮ±ztas~m(U|Χƥyy9V>KHS=F窄riPmiѐq-FƸZx5qZ]$5EI[(׫x4l p.1>ǧ[ZOI8$9?98  =R:Cx1k8q,R jɹth9Ӑ GFDm'>;z( vv#sj>#qȩچuCuq<IB<Zy jI;aOJhTqܡUɸZl/دi:ggʃC2 `x-B땀1-#h20|mhjNxhs#kP.aoy4F u 5 <<Ӫ:j0_LW'ruq\S04ڐYӮEP5v2FV8p]Hk2Rh\.]{_HUh &"37wV|#<ŭyv^nްhSsf>>4LN-X #7qZFRw1ĊWuxƴJ/gT#EB5vr_Uyr}(={(N3HD[1cG*iS vEfibkyԑZ19uk"<8&ygaG+_|l\mƱ,T xg->GZֺ.Å9eGk؊ Y}֮&4ʫUMjVyiXz0%$7rkM8}Dqة$h!qCYl ӼKrrD/hIH\(:}.T nD]HNVhت<ոWcfFkQK)'nj0P=0~݊x}<]}ݘ@M",DžZ|%4om}e ܫy\4sWᷘ'"~ %[2r̶s } FlxS.y;4^2)%q*1]:N#ǁ|:*(p~ *__纥xҹn8A$鳥C<; i/bO>Q?JL:|Pziv8?+῍>Tß8 N~;!Np|; $Y΁c96*ptDw[w[&?7xc;@z]_+:xU_)K^ٕ"VxY@: /+K @zq9 <:Gs?3^'3?*8?U) N|>R`fa4SᲒqe e "aqz8(*΂1R~(IP'0vU]vi4MK*̑*0E LJ1R .I|RS<rB)wȅ3QrNP`> endobj 104 0 obj <> stream x]n0 ;ℭ 7 )KQe;S)\[ MTJąT9%7Χ[K rys=kρ\y$NÉ9C>9g2W?axDŽ#B^ihtp|ߟ}>Y}'npXE7if endstream endobj 105 0 obj <> endobj 106 0 obj <> stream x{ |Tս9;{fɞI2YHȄ@A $@ $! `&I&dɄ$RDT jWRĵH}C> Xj*Z?ɂK{rg=! ڂv®/$"N!UA=ۻf"p;B|M0;o'Ƨ#]Vsb+Zogr¡* B>H xڇh3GxAhuzCdXmv3>!1)9%5-]tedfsr&L.M):dz録̚=g| U-^RL|F N.tHނ֠xDaDu06B-0&MG[bxrw4F> @y:Cѽyt]n}ԏau Өݏ8{x$^Dp/o"SUGUvu&PB lП8?|/BUm}܋|36Š uF>toƏwUvo*+:MJj9z0(x ׅ֠7h#$h6tWUFQo.@oj`Fh>̹˚ğtM.Q4èp܀xʕ&>YXyXH9Lܚü; \I<|BZ\} MФO lnzXpÿbkP|k[́Ax5JHukG3 g,.eqy4C/U?4c:qboQJD96Y-f1Πjd&%̩)3̬YóP"LڦL]$ӖI1tr/^|/\Z|Zּ4ܯb~[غ;N/[ֳ[gp/bYa_!~hI7'jjR; AJޓhV#)%aflfji%|fa]o5=,;cf++#d.ͺPl)YˊTEATjQ#jE8'{do>ܑt ||Ôh5b=]ֻ)a9o> ;ʻ:(ssKm^KkWwꗶOٽ殆b3z$OJs?{3]ЕΖmny|3x^-C=Koi?6ҋ'pg9 y D:-uzj45G82`dp4D5=;9(ȣ8,Hm=bp:J\:I&R<t:m{5͚]{=^ս꽚VՖɘ#.=v]1Q΋/K޲ST W22Y>ns@@xnCED-FYbΉJAQ%v{1egpʼn~=jtȍvx=ZJL7TzjC|Lie0̔xB(iZOQWSm3_(}iiEE4W/qD[-}hާݧ;h?/zTSgcϲKMwM38=UK[pNA7${uVGnZ\MYXU2rno)Owv34ZNKKOskuNcm߆է'ќdTg䚇S@`Vxp0O5l| 8ׅjoDiy<}!/.X`=g^J^j^Z^zqnt. ;*`J% O,".{+}.Kk.ٽ>rϽGWX큺\1d3VvvtoɨڛipoC8K ;kSNd(4:<{΃j >oLEWոW:^MVtQRJ״ } iF}IdxtoM3h!9SM&F " #HfN?bH?Peވ{ oV-?wi)pF.,)?p9<'_@-Qky^!&_]-kݪ@p*^9WZ\hUMw2FdO*\,*WqUzG:$=Aɞ*ܫ^%z=0rT{"(/jh:_@X-!O%`4y ZfX/ҿқϑj2~槡S49\dJ1o:Etx20,gbcCrz1fڕ4KnǾܛ#o}3*WaEWK)Di%g*׃d8@\s@|Dg3Cx'igjuA A ^mKJQO<\5\)wzNd@'֝^6]VKÏaς;]sga[N;'[Sqa+9!t(k%}'3x«S1 Liu>:C )[1A{>h4Qy T$CJ~q|F㓿<,jy^i Z={jsZ&rPw%c~@ډ{-1 x<ǑFE\atѺwyެ&W+b5%){S oy()0'ܛS~4^͵L.d ƺrݚH>-OM6tI  vXi< ބMx~5"|p: Z~W4ɫUA#}bf#UKݸ;I-]ȱo@}w:dj^"<xU^;: o@55^MIz>eMwMqi2VBZ6^Yp!U?;{d`o! "d%@pWS- 5/ iB}r@dJZLF2g!i8֌ ӨcfP*4&4E141s֯5Q;ii&q>.b6kiߪ|Ooxw;;4/p|_Gt;E 5 l>]Ru, ?i 8,h7^Vaί u&AZS LgOeEy]5dn F iX:R z(̉7dS 7 hR?ز-q ,GYg2Ͳ*™ѓqVk|ex{`d{ϯ;5k~1mmIؐz&lggagJhM&&:V-U>y! =z h [Jy5DX.p:jA -'* Cԓo/#}c}P%kׁ w Ayrr'p)) Ք)T!MӦdڦ3-l 9æn 3SͰ&bgb6xCC|dKP[J%*^P·bJ&"Eih+1:rRiƻ*HےG}OpmEy ?WT^2Ϳ?rM J.*UyfǬ+(=cz֍mRV87W\﫺aP: o{RR8:uW+ Eo:DOwO'T''4''t''I|;IN2ړ,0Jl˘,lL |9ri%L[5k׬yg_g?# y /ClF-7@-6v[5Ѫ,2ed8foMOH{h(j7$Bd\*XZ| ^\-yBzw5^_ѡGGp݇~|>:G50#'Ɋ2+>s>kq7^ AP+*7iJPR/v=A8ox'_c%Tij 砰wsP{7-q۠ץmM IP\X՝ͱQYO7;SI7}CNHm2s]+뇚Eo>7л tvUsˏ=={lJѼwK)+RcRzWqab0a'<ʺX KoJ;T_ǜ$sv)Mz 4 0ayZr𯁬:~\ֿ]"&l]涀֩$k e g|Nʵ 873r>wHPi}  "6Ta3 kV gK 6E9 v4vD9Sj߅$}"-ɿ#-nh>{{5gFB  kD6StlBX2ؼқd?^0ׂAy\#lߪ59J8):0s.[s"@|*]W.ք7oχ!1?2 ?Ͽ=24 CWzFFE=ugHj+J)ZfHu=NsUE9MZ+;b'f0eEnpu?KiÖz >{{;i<2^d~pH~0rx(uDc;xp# (T쥵VH%4,9[YF+q0b{ Lg\.E5':fK4=<8#dhH₷x$wKo^'d|^pٗϵ"HVCvsmRsm*Rl}˥_J[WTV𕟕$ʒ.( KW6&_#%@QMW'nѩKhvFjK2,q,b"5JeUʎKYVcF6eH^]޾t[>l໸@zHL3ʇऻi)KLXAv?2Ux 1G1mFkwZ$(5,i͡%e(]Zٲ(w,1*m+l.z o^X|h۷KIM@ӊ6M7n oڔssf:goMM@KOP6g5ޢDCrk̎T ߤIkS Zqv$&bIp)RR)"φz_.bFj*}Kϧn3u}olY8C78g9uhP:o>R'vwV&f+1g@-FMD]d>?T<SWh,5 ſ)T2~aa*ĖI 1hR25^~Tl3sT3w˻_Xݍ~nνKo/3˪O&X5{U9'>S"t:'R?^*@P.kqr{\‡\ GcT #gH.~ 6O$oƷHV&8z4B,41+D&qpݡ|琴 ς$D!oa5~u##.)dI;M xS2)tS%NIL8L8ʣtЬ癢9['h*Ym-WQ}uR||d eӍ{?k9|nqn~+ʹ6;ߡ1zs=g)@yq(I0'l!W F0uڲ;;gZD,S,v$\r#q</UP=& VpPU2)#z+صT#w ovy a!WWGYE #$~KçӸl׭10V(kj < :O'+' ^i_x-́N98=_S ޤ1it.q'{R318xH).3\oASE?H8ٯyBc|T,,^ֻ~S4jY' V̧!=ɤ>]E>G8) _$}`{uyMhFH0d!A=1?=^#c@i ʓڥq%4X>p/PME+r IVmt:aY^Ν4%#9)|W 4mpOQ/r :s9U3 -׌۱ر;sfI[#~ٛ?ųg֔\V7,6ΜY[;noE{`lASoRr7F%p;o> |A.|ī/:p<'frNC(j,!*=.< -v~5TGvy9V~\9\Mw?Ƌ[=Mכf k؏_د:}*4c?FH% ?ETȃ85z5<]B `2ڇ_zRt_BhڋA}0sCnDF4h*ȵmE =Avh|@pA(\$Ax?/q3F.b$I?T( DžU TAՍWԅU;ԗ55՚ǴVsa$_o_4Tǥ6f3jcSit<|eh]d}zfͳ5޳}n}8Z H$K%@YGQ_?* 3WP?6A_nоEi CW*U4y^iQ*:wMmBiJ#QR6A(m/(m%U(@e4,QqlmD`Tm-⼎hO4uUݭbygXOg@dC_[@Ďn1*C]؜_w4_'~m@#-N-'q:qe\@źƪ˫źu T,]*Vh~m `Q#tKP kzM),X.nXT^]-Ϋjlh,_JR,]JyFW ϫqRWW--+ʗ/lۄNSc]@l_EǪl&8QН_[Pl9t El g1k\ qk* ‚Z@VP?j|hߗf 񥹠]pbܲ{dTLke'* WcMg,yd7f\4$(nFo졮#DI_Gt]!%:a3X5: 9Ѡb1%}(8 PQB]? C(&ݐnu)3Fg|hTlg@8$e5O_ǺOp0Q%y @P*ErQ+ʃbTTh ̓9QHޣ0;| @o*GpPj`|`LZ+V klJ7|aN y">6v5BX w'G$,ʦ bc'>ml\WT-_rb-he9S1 ә:U>baL} h*3anV86_'2}ZFvLdnȞ #*bc㟑E(S(*oZKy20f1Fq*^O1W#+z+\`x-)Za'z(l=ӧ%0`ѵQ z{)Vw2=ᙶ"Ff;tEƴvU1Rxr]Q hf G290fOw9|rFm a˴T2 dI͇:؛Xx52,NF!.a2fi{ JK;70dScpcAX:G}lylrztf8grWG*W8Uf7+a~hU oe:Q=T`JE&R![ Yq<~"eZe\l*gnfK̗Ӱ+Y;D(62%XZa*!z':'FXV:>,kg^v]5oWryp_bUӏeCrm4><]{F9~F3>6:j_}ezWÒKn=_oPWWa]X;d&^e.᪪8rUUd?VjaO*p#(Vr@>JcGDW硔0+O螺5:= G? Y%r#ȗr[9vyZ $XHQS$o"GIx dQ{-H dg7|,`MVɴQL\45/N#v!=WDRaJj1I$ _6|REH$DIHDӵ|/!NK^Jl8M]&bb1 bb26 MO&`҈Ao iDo":ר D42jPm jJW ZA#{D87 $ > 8 +Gn;Rm endstream endobj 107 0 obj 13377 endobj 108 0 obj <> endobj 109 0 obj <> stream x]n@=O2]D0H%ǎ%/:} co9ܶRpg曋b{~)c{K~n>1?K?d].z%k3eE{|ܖx= qʊmӦOSV|8%=}~k뼋4f\c!]z/4_ckCJ;v65mUY~~ӹ̩ԤҲne.jߐG_kɵE~a~G~{ %Fyz8M0 p _c~AbF2a3;`32 YؗlӪ_[KaGkYd˜ꗱzb؋ߋ~?`]~~}pԏu-Iߣώ~/5e-?~~+6=c=Njwx_~xߏhawO=A֥?Ȝ-C/4Μ?GE9r0߳k'߱+"h endstream endobj 110 0 obj <> endobj 111 0 obj <> stream xUoSe?Oێ{-8Rryv[7@ hv붖v{qumnaF_$&Ɛ$ut|!F\'"A"O/}=ss9>/´!jy7!ח)9So.v4?: _}*3{tVYK {RxΓ.Eyk*[:~\q|L.ya ~Yxmߌв9Kn8v`G="ʗQF^ qrux ^ B;: "|Wކ xބ]IxMEa><%424Gc1 Ψ -U\wBink1":H\ Icv9BY ,C6]EI|FYP=hT=gTޡO׏1\BN#;==>aa\re+WT5rS#n52=a|a(o K92)eQ<ESR*5xDVtɴ ~UD5idFjZTeIfp@KTn SǙ.. ьYcY,E\J$Q2&-˒f:T]Єn40A FҎY,cͲ NJe11K ^I_xL1qEKlԋĕyЗ'`hm7 3b]3g &&1ܙ\V!3r8{6PjTϻ;'Ql&6Ant,~0HڎدC\RL(?Y؎-@X-ZBKXH mYu,lGu ;na~?Τuhz6h۷ >Lz&耖Lpñ*,.:RiŢjQOi$eI:+Ѽn$fL\he2:Am/WN\(Ёw7L09(,%!-ō6y0!KqDM A4mMpǏ7)6 9h0Qc> endobj 114 0 obj <> stream x]AO 96&f&=?´؁L)VM<@x7kQ13.qe0H|pPewMJ oKƹ16ү-78=8Y;{@ޯ~Mg j[8=O6=u.;"_mKd USU-4[? }Xd-ISSNc2K2{?'ŴSe}~my endstream endobj 115 0 obj <> endobj 116 0 obj <> stream x| \TU9y Q]((J# )C Z|ik`)ff溆ޖtw_[Y/2sU|mgs=|{2ň W\wg>-B-|^:W+03YsPcԬ9 +݃o|!~5B7+v=;`BT> Nj$N㤪 ^w~sߐ^Ch.q{A\Аpָz^+*F_߂\F^VO0 "=/lP&j;BBa""cbĤ)}RK럞yÀك:lo5:/؂q?qxvMx;U;L+-G pU|ùEJJ^Cm=Cɧ$G9Av `A["%{Q#+3Gh#pތezX/2R5^fqQ߈|<Nai\?83NyKVM  v*nסV6~,Zs5FF vZDwex'/fޯQ>(D=_Mr0Wc ia!/FaF{Q҂N^q%Ŀ4s_d4JE95 E$Q Qj%Tq}yJ7P_B%, 2lNl ۓ<𑨎_Tj4?f٭4ch7־:R0P[}̅ s_g Llj*PA0!H;m-=[9hOkwxυnM;A;ǎ[,\A;/7~Q8 8Scu/z3q8zJ(eGF,BFQn44*EFshk/rF 34,k쁽SPD'[uv;ڹ}佳ǎ䍣nڵϵ!CR~+hC&WTd = myr80 P б=s‘vP85ϱ3ѹ[TvV:Ɵ?{83C7~|UQȪ؍ BV݊fɌŬhTrF &xf1HlF=J=rɭd\CZBǗ_2{PJ"Pjj z-ل%'`y h 0%l3'$e-lɼؼP aLF J1i$ĩ*} J1ɔbkkUQ62La284<2ԚiA.\Ż\r!Oc.X]t3B"T"S S))"{%䪔jK̾H^`Y`]3,7.74>lh666Z6Z`ωcEH+9;-ȘH65/t9άF;u⾭} d&6.>wJv,8F (lۚo۶y[]tſ7tݿ{q7o}ϴOcbo-ay,7)F_9,#oPÌ #@%а &۞e"mxϟzIجuč[~˕7麷G Ht 3첊 CD!=!(cec /@( 9g#<7=1[b-7ΞՆ~#|?9 F |/oYaW9`Ѡ0yMpWpFk-jqQQ?8p"g'>Z_yѣ'lѩ]}xćLJ79DƇ/C*Q>H|#.tprR G@n+Һ|2Ѯxڰ>¯=_a:up%<*,PA Fyg1l[T WJ<7cp]N΢8ayغm{NfK 6A4WWVeߊVŵֆNCbQBB9*h&xs6j#DRK1v:;>ux`f(KO KMx:l?k05Q&|ӽ[ ︶،?>aO[mn6|C{ a~k䖁G8#[, nTpQq˶ҹhٕ mxd>}5t-?)VmD>~b_Xɭ4HX;K <.wa3G!9fvT@|xpmĿ ǭZ^o{KڎU9s*w8nl<?^R[LW( e .H(j'ckkWoSY'B )bsclx]\ًdP>1.JBQECd_i`j<>'E)`-J1ڔnHSҌippQE*d}>ƾ!ξa}bĥI)+fDE41  $D1ԑ6.N} 5|j/0;7DP ȌB6j[V~m_WT^멇}} -}^ib o_lMj^yW,Yoz@=҆7V 0/yWضz-H3ZH u7Wx[۰g>~]>~G ܱ*Ao;*x45ڭ9fPD0ċ՜3:LHZL+kiki :οyGڻI6(TJBNlX!+8>뀣ʹ::Nּh#,>S-=ci.#cjcZc~s>FFH(!Mʐ3@Eȋ2"A*K;N<7_ߡ]ЎԎmw w-/8pw4<+`飴?ٰofJyPWDVgECߎAExԫ΢i`(haymM@ !Z芕Ü\#E$b Zz e 7hh n4#UsbNAtH1S4уŅr|،7[6]G1lZh;gN]߿؏RE^.RXY~ND"#$/ @8 BZ 45aGmtt,7[i n1M$zTʫr60>SG@+)󅱢K.Ex:ɕWj~P% /".q9ZWJa؂Zn#yH ~&_ߓ/7QNт'ިڏ.e%dץ@/ŀ~'[\E16,ekQt/92?Ž+@G@8d5uî̤ڤZb{I ,":U25便ϼpau~= z{_?M4xr'X5n >Ш@rd5\mm1L" {WPS,(iwWl؁\qA= Fw#ρԫ+nRznOxAϡg8pl>Bo\!#>Z䶣KޘvoC_16$yOIN~-k~Ҽ}~oQR}w?7AdTaWlKyta eZi>]ד3A)d@?X*i3TvS0.Kɥ\%7KqJ:E ?9 ADO'LU̴,~qlv פI_+<9Nj`v*DIpɟu8yQ?йKĂ w+"W 63"ĜQjt{-ʼA OtOnmǀcQ_4MGh>Ia <O2M2J܀"˱&'Y4+>lԩc Y;V\*yg TmQGaȭ*}ׯ\L"3< '9_w9+TbVۗȟg%YWA2e<y$l^b (:"(}dmY>q]FT16'b$`rP. mM$E-{Ax*2!Jԫ`fH1kjXXWCYtӉ/[7u,\= w8kUefJpAnR繦e˖ᬧ yD%- 1@Ke}# so(BE=l7LsWq.ҽiqQ)>opݍl}K)"4#qΰ=8@# ،qRɌ++=^IX[ow}{O_,^^ᦍ>xZ<u^?;WzLo?O8 HhDkH+ GdZL+IEoRfk: BHVj'*(ޒ*VTeTswsbnTy 㱑(H0 tGm|?iƏPV1)3u F5sLO@<>A@X.2(Wr/jM[c:ƮNy")o3)jvFŒhk|T& nu1цLУI[ L I n۶=mڶkzO['Jjص˖[tZMMYѴTݻU^_sONy.7ˉa@c@"e5W~&O 2Ǣp&=s3{,92\p`^$J'AdigFStvc.*I_&̔w'Y븇vtnIZ.w@|9j>W7d$D^gDN%l'tq|cc/R*P.2L9sq.%,,{p8[$q mg CKRlQh!ǟƛ#;KP~$tW`&I7 …HH2j, kt=n?q0yPf;7.gI]R e' E{' 7pQU 5=xmݯƠ\|d_alB[m+\+Zb^-m FMuLtg4$ y%d=csXz2DtMKZuKw[I!"2 [öZM+FN6%#bCI| |FgSFWqtNqf|I HW )|mwZvG}Una[Ro/Sgh_|Tߍ/_"q.7]  3f)`^B^]2!qq}ְ`AtՈ/:<xީPr{Yo+E^g$A$9IPqίw 6WSFvr$ 'eHN2UpG Ai8@F 5뙗VËubݻK0~je~iH@.ٌ (?,'I 9%.% ܮ. $Fo OgbF|?h֬mw4Bv"W"o_xQBq(}$7q7 L *.e:7C)G{(,VZf!FB"8/BrD,A- E.2bByaYT>^PEURDClT-e7dY%i8 P>ǹ<%䊹^\0Z`ihSg ebT&W* |4/|P\(͗kFSeDd>~˭.kBM2- ㄶR^^фS9nxt{.v)'T k(ae{@hD~zuNdR]=miY솶rzФى-\Q7c>~ UR+d!" sPS)]Ez`'L/@%5 22IdOh;G~ЃA yRYekVJ3!Z$,C`pWqE&<r[lz{zF%EI"wX;%k>=%X:#pD+tf^D qbԨp3Dj+Ms` d +.IH6 9 D /9}ᴦr#m9du|-\NbhHe﷪#&FfXF %:LNeI֣|PЈ1=u ビx~G~׮]9w7o_;UsM޺;kCGlTL (e2~ @AӾ@Òݱb2"#nI"Ǐ}ܩuީ==_~G+eˍȊF,/&ytM $3M(ΓÆ.vPߗt|7TWM>|r( ѼeyL9>"6DȠBmv\l&'&-'OrO:uS4G0`"zΕӾ YY'F_AА'E25%c1-H"8BH>Rz\**$<e,n?B,Ey8+ 1tT*Vr|pyB~ .BT0xCr:_mQRjgnZdMۚ4>~Mvv`J|Tog2[o0 d(apV<|&Z;7vPmFsW='G%%$SO|Уul(-9ujyָ͇mr vO67/]Cs;yO֯ɒƿh~|wYfgp~z$}^gnuwPx6<a3a\<$ pP+Mfq2)sg9'^ FI/"WR)L{PcU BiY%T\#1m$J/kOȧ'_iw'mfwFH,'Y!<4.!ﯛ&NCQ"~d@ׯ$ i7y|HS[{sOOy(^?I-$C:>:(Nf+͏-g1#m`SbtO RhA>#tэd: E/$h0 \OW;{އCT-ng"NB>y^|:&Nn/:/t\'G)l#@11ޅ'B0o8쿉LP$pB/wpApk"Cd7z `lvS4BaBd{1Bz`b;=/m8#>tG,ՠ ɥsAK2^sH9G+MBpU8)^r3(*Ђlm[؎?DC1 sc q,^[c:}M s>9?-jxlCa×v$dva]zOy: 33KPͭysԂt5gn"]j =olo,5]u=ݥ jyfǧznSVy9uy~T0tQn@[Qbe^ڧ:wg[y.R䩛[cU:UӀv ǀijWu,TkA`;8V ,p倴3<>{t: v.{j|ƒTجBu|j7S* s=5zOeR#[NV'2Lok9S^OP*s@(AޚjJovyFE .%փ|Y*n Я*9LkXЋ:usMJ7Jבyu{!X ,S]Q(YG ]x5q)PW=1KUXD5]>+!-s kxtYVBɩ_t࣌r tSUԄ.;Lj e B%]@']yԃŨZ0/9zAv[(Uz=5=xB[+Ԇ ?ݨ* 9o;Z5[CJ`b, ƫPUǔ(pXgN%Ejl?ib:yR~Ԝ<`ZT<`th5!g2'S JNRŒ✉%IjԼiEy'+Ղ Eyp`) &QsaI%jaشd[ߪ o2lB^p[PXP2=M/({rjZS\R0jJaNZ4h%KPZ09/M).L%_< Х4` o_*#zjYty9dPz[P7n5274ScCK`Y,ޭ;`p^>@!鮷b<od~Y:^=>Y+s` am]5,_W]Du7ٺaj7Jsj!JUYsh,cT@6O:c_y@PbWxUEaNm.A%R ;Ayɗ|q;aQOr%?#WRt9r%E7+)?`tJw̕ywȕJϕ\)|{KIPO.)=eu2)5^{L2)I)reʤ~Ifʤ#)RS:a$v)ݔH dGɎHNّrH>Uҕ(M| Q9QE⣰ħg|KtJU;3,H+:ghZաj4 Uz> ,̈́*ʅ9:An4TaKE]{ؑ=f|VL[@ X7 lXW`F9u xhv3{ =A^TnmdQ"n?E=8Mk)OcXפ9LORVU36R]Ih"Q8M<]+s*qpFL.9 q*鎓G1|ҽʎx?k4#v M1{-<Aa|MJKZڡtAc*d'`~A] ^׉ b4R P:xד * n*t ?G[ S \+S-Y9L֓l$?S4L.z7`Gyw{`hO~ 'wqC|þʃV.3rghpޙk3 as^1^-1 ݮUac=dه(8`/]|v;{'uf? V un-PhkpJ2e^2 ?j8Z5eZC0똼kT50'֡@]6 wkm@y0+ k=: Sa*w~R?H2kq?HV|yNݽoAVEԫJ+; 7JJ+)רJ5JkJ7 5}%}N?d_z}]s=O.)gwݍMwIA2)LǮf]&?ˤ\eu]&vYIL?ˤ0®:sw\SޑrUH{@ޑin(YQ(ߡܥ!;>\]}ѡj4( =J\e0 [˚YZ zfcͲ{[5ڸŮ˗4r1-|=|BjF7BO&_ܗ#|s-~|vF>F>%g5љG- L<3|AEAy_#{?w5rF~w9urprr yQmF~_i9B:+F^_n^&#yU#he5FaA;9"Y8 myn C_$ g..dF~BjY3]A]O% *S;Sd< H?y4]#dFx"<1> endobj 119 0 obj <> stream x]͎@<atdYZ!?7a ŀ0{ۇ$Rjffq96 ))܇ 9\>)$mf#ond>۱ U}_>m>%ש S_ӧ2>}p z\_[l]wyYC*6. mudtu8з=> endobj 121 0 obj <> stream x| t[Օܫϱ-K?gP4! 6زD,'q$ҵDU$َ Ph@SK'`2;z嵳Wސtʛ1dz}+P[i+7os~Ϭy=}E&5Rtadݢ q᱌⥓I3|cC!&_(r/_܄e8 idy73Mf0)*,y̗1w\JqN}0?ЗoINn\C}L)I=P k|9XMf\=ׄk; $ !vFENp\ oL}3,oG!44~"GeEg5݋C(|ijA#zRB]׈gtD!iTŽŸ~yk-|'NgzŻQ^}"ďn9Sz +=>|-} @<0oṫt <4NC@w li:ODrIIL!vkTI3Y6!M]ԳCX"OK'2)8ߝo5=;ɿX`w a۶EC1aH| "یK%"j_B3Ϝ_[u8kC(|o12Xҿ [@72u eZP'/хvk?@ҥ. >n̍\}l㪫j֯۸ Fu+6T6nas{vܸogw>8t0/}\pzۚCxtm;?{sF'K. "byPXn#%T*+*,r[K)v :P~WWV"KMN[bS'm3/Zp~]hvTMo^ 0{tD0u.ḁSpܩKn_p6nM+jp=3eTW{w45??m+]7:CwGMU'?HCQS=UB&큅w$ %VmUոVn%:]AÛ 'v5 onvPaqϟTr]*R9Wq̢ZU S]`UOT>QU~h5+W zsՓn_% p9|Ԁa#3&;'[_D?NR1{C=yt7tzժwx[3܏427uwD,X,fZ~5*"b=DxN+"߃byN@rν:h܂+--=WBm"_o{QQbbj1KwvvKT'i|~8:5"EZ |H[VƧ&Lynd؏FS|w鼶LҞ|8 /ϼZvP_h=[ sř-h=s|l;rVgBX=ڌ \od?=81ӏ '=Fz/qwY A&a: H/'/'=~їTbFcnμMp/6E73VKY)o+'V\ * Usnmw;ܕ=ցS'+Ab=e]Yڹ_6zk-r;L*~Aq颶M8ds_%/ Elh Vo+`IwZj+p9WX~G{VԭpZQm}E-lp֯:i m$;NПRSFl#tK?] o_XPQACesJ'ӻW&W\!=GV^ Hw\ ~ohno[?SV5SGOz7EȻ=5 N`"?_Êr!&f 4,YD+AY[ϟQZȩh\\_n'^M#}Y<>;?]`ao:;ٷz-#KUj(/+ABwS8OFx .]?BģhiMU1.A-ƸR-1v -iUHFZ^-[v48!mfҙ"]/n<Pi)Ԙi$nGCX|6#lSFVҒRhBJƢa)h" +'X7H/mSR騚5ߠo50F2dKSSFh* a1de Ӊ*(ҠSW7JW LHh<2JDJqɓR V4Fu!$O$%Țٶb3K3(GD2)9^I%iiDI)@k8%'@tb1%eTINLHI0P3(@4̈S8ƓN2#$Ҡ:Հ,"@Dh\Id g(#WʌV3NRJ2FF C`ьBy E\`pl4B9fF 0(J@;x*K+Tj$=*4ԔVV g$UtcGffM%FT)%+T!5F Hʑn!$AuLa^9AB̀*J2c12Z6 J"9EJ)eNDRPTn\hP:ˀʑ\W P9|"J::`l a@'gR( ` cs#0dc )Z愊RhA*% bT$-Ⰾn:uLe`/ D: 6:S9ƔIN&!B7t3QF4"( wGD`8*a^Ϊi5FIb4{@drx< A&TB]9U)HXLuz@wH {^+|m6 : $zCR]tK[}m.ɻ'%n;p;._쨁ȺNz6PB݀ J Z zGu B@Or,H(ivy[] A4Cn{;=~ . K@_w' tK g߫=.tPqD(.N^v{K z[C t3v[ݽ;`$\d{ ~l(z^,"X.P6[O,żVO \} Zb6]zen"=FȀiJQi2YW;OJ1 h1(ȕr sl^TH&< N@K@䓃JI'ᖊ)FMѻqM@7Dg gZBFf#j@E(*k.̽>u j :Ha)3(P ZIJQ+ZD􀽦Z\Zk%*k%RT\ED櫕+HATE$WDrIrwDt%%1J&K&2dd"sL')HȳkK鼪%d#Z#RXIWU9#Z#E+|ȼ rG‡§v&w4£񲝫hS2HHcj(&P E0A$U(VsZ 0 m J7$8r%F9\i6S1$sTC@i h3 |pQl8 D`eMa'd&XA8 Ϋ@]f{32,i02tUPۘiu ztRbt e Qe@?3:PV#PL{'tZDaVUG, ;3NFa/0/Ho(ֱZ)GFi|] B͎<2GaQP/3]5,qPz8Ö(i)\ÌJ°˰n-c?_*~OSPk2ák83fpuY Z]eů{u^R,GF3 ِ( gF1#VxSyսR넮$YDBrad n4e(hg q#,d ZDYRE^s;t*Ǚ=u[ ӮyplbDbxqG [Rg5sytDL+!J4\I5 㘑ٲ 3qഅEgN* y梼fgghHfc%PxNb2ˌsrs2T-'g>\-2&7lHX˝:0:1bxRi*sJu)yeoP݈Q3blFrE^m ݫ:l辛1S?鏕)%1${ltәxssy9Y'Jov%l̼=#)L,q&U>=m[Wezg/,^G8FИ3='HNGdQ܉B&kkO dz 0KABm-Y݆uZbˠ<ֽigepޗ|33X8]Iqei[7 \p{N&oª1_֝\[X YgW%ʿnsagߎZ>[=wDUoz U%*\e2vwz蝨Ey~WV.JU ZzmCYoIvT8cT&TQ6̶4 U9?4ޥLôl4P,aQl-hfW`5Az$,_e{\zwsH RYy}z 2g?HAAŕ||# yeԹ:,s+IJ JÿϾ)a?mW"s}6}%r~gW"zVWDPqwig]"ѮT/v0]|]&2]ge"e>.]&S2mu V׶?WI[;>t{G:2CSإrMlW!G&3 ; ѡko^·aUS#_V\]0B~ {ιWS4)?A>0x@ĉWaS?q'1 9TKV8YU`KKk85xOEQm#%B<> endobj 124 0 obj <> stream x]Mn e8I%R֒QEa CJ]aC#kN+:#ztTZ:X LJR p3$ ~]<̝MU-V9K3^D7Mj̠=e13!C׶ ?jXia$, p\O@*jZmM@ .H e찫Owė%rF>GcEGޣ朼$FM4%|,s!!&456p} __ endstream endobj 125 0 obj <> endobj 126 0 obj <> stream x} |9sffggIvsN DB(ȅ@Hb$dCI6f7`DzUEhDEU VUh jD^?%&3Ɇjmeؙ33<繟svhm"#Zr4yZ^ټ&pD€ԗ~!e~SMC }ol+=twSLY[~`}ST5?5j%p9h&_;G_/Gý/L.Zh-Xǽ^`Ok8aAGp܊q2~3LF}NI!pAf 2Znp|@#?Tnp>@Ds"&ڂf>pD%uW}`m^A^W-h\nqpC{GZC?z,y:@{ sk{x #t=WxV\D'n렏2[ѭp/SW[ƐKx Y7E@ADF( ޾v@/ILD㖄\F. =HAOD'Fiu;*taig*Vm7+O9S6fmw B/?6l$_τ&_c9S,3ZALX6bݦfD8kwGV1-"eʈ.3q制;Y5ZoK[b -ۂ+{+G֩ cFԯ>P*H % pG ayr׈VN'ܑ-"5׈rPˁohjڃ|K;^VQ__uO՗}xuWdNq$z!^Qw4mI ^.p^eҲWt0{uPz] ~:=g,z'g9%.&p!m˸YYr=ryK拰٤IT)җ|Kb"PP&m+ջ--,~@7{ d @:Y1czxvbvsO#bĐw}) UM]ZiX~S`9hmn7J]( r$ m.'>R"ቜydm"'%bzxޡ)Έ5}V`R{Y!WuR/-:y8qLFH z%]WE|P(M$J249_2b| &,kUJi i~2~ۯ{Qz]6z Ž;"dA%\*ϥKz5U=%ʹ޵tGPړoힺ2 f2V- @]JQ̄ a6D }4Mqg'FGN-SD`#"EK,j6'gi\HfÆFj'18 1LPK4vǘhG#Yw1gB6b@3 >βu殪eMٶ#ک/#BdONoYu>k#=>|q?mjSܓ6 J3 l$K=a S6z`7SŏӐL쎙&DRO,V+#e*`rFʠl7_~ɜ?cJFAG^BvyR$w2 HuFǘud7p:ε϶zHlprs,e q]3X d]@z=rh0-€8c)cIr!ݘnJUrqq8XXTyaqiqi[[mmmrE,fdm:/U3Q' lcZ8{(pO>ּ 89++?4,(j523GdM7]`ȑcs23LR_ؚD!0lm @T)F#(F";:;XAD!{M`ݖ| WٸW|Ӊed,N&[ ps7'@(^hRy?Whȿ H/X!|ȦpOX7iDIIo2\$q-aBn0N~q2G+'O|U߬w9j`A!h{Pp캈D]ϴsw!2ȈLf](K *;8[*`G"\٬:$lu46޶c dߨ{:j5{NߵW[9xR78wNnW%G^V]iMNͱ"z=$Z1' D$D.(tû@.i;.PG`t ernqwpc/xMDU6'8~T~sH)\D*jF|QI\V5d RX+n!OPaPEc."~^SJg)b"T(j*yAmG. PrHLGbK8"n _A3k_>{ T}e:f92B \#h2(arCT"i~e0gl<'FKc̅\)'*8Tl}aq⫅*JW%U6 -bE -0 *n0j|tfaX~#Dj;AGw3|l?lɓ=𙣾?Gmu线YOn!p Š[ݩ/:&bak} +d~)N'6='򢤗(>J"K*li\f4[n9 tsS Zf+\ \WU㺸oN@n= m .jPtjrߔ`-4=Km6~> p?6e];v%$$8s)ISS9IW8P.O^K%c0L:UM^exoZ}͆ͦGIzH|fp~`x~oŬM_A=K/ߎ ^wV+ؼfcbFei%Iəq씋bl5X=d>`:,oB&PԸ{sik^x.EwzU+L}C}W⌙zݬQv8F;tXϮ<t?Ũ-Z|6wKىz ھM hX 8l\qnG KB~XwQUV&q!BaT͕sUWXĵp k[_qJvf߇Ǖ%Tu8FJ_q`í!V7`qg0lЊ{:,hʹ4 sP;7RNp3X3aG(cfCP{(oԯ7mUFnp: :YTIw-PZ''GXd=[j<2̓=v㝿庹]~#o!/.N5zAM]WV^qQ*S d8ҠA.3ϖՉ 5?i9TA0mS j{UadQH=C{]p/xz.qjp#).rT94KڙCQF$N2ELvƛ'XQ=nhO?NlL8g.2x;?6X7 =٦L_{}Pを:voA67kO%7ٔ-z&~ڼ%HnVȢ8=zO%B,EE*3UZLLY2dJw3{^rr=7`=$zwJJh bםXe.p@c-,谡?( > |"8 Џ HWF\_N;>:z~;zz%{AA!rӿO'?N/3,Q"r$'H* 㤑r)OdY]Z&߃Vrk5Zi{^ P+IgGg qHY_Qpݢ^z=w17@݅{b^Y($K"@Ea43Eg\e9u;ZD/=ԭ!ًӾqS ZjS_y8/nnV +K@Dtv.u@'ƐQ(]9ǒ2WAAtn,_kLk[G#-{SvvyӦͯrMͯYNp9ekxkF{ehQϬdTg7kRwUFiסNԥ &So'?i=6ʅee7!#%b-F-Swq{u>Wru'U<i='Ar.iI6L$Pb;E%,[a_S*u \[.'Y1X@VA$U0H Sy_JHg%- J+bzTlFt;|UW3Ryeޅ0؞M}9A9C&4ɭd1dBL.D mFʼno2[ Ua3aRRܟl*>W/Ǜx#= =mS؊hbv12%$(^_`>\P\HN$;\QLJ dg)}$wÒ{'ﱻ$nWl#Uv _f'$7@ġIt?M5ނ#6-%vsb<%!^*KCk־kO+(`_p7܅>UUL3V$$$%}DNǏhNOl@0_F4ҐKpI,UAe$@G\"ǒLTYD(k\WzEu﹕k]m0q0boPO7`))^2nκʶ2jn{ 0N")G;d'&Ya=,F!zl4 G~ؓBɳ= febTܶam4?'>4N3 nn[xa[.'! :ĭ U֭)%vqߥ`QH|- peZӱYjXNx m)ۺ:q8V܆}9l{WO}J=ol)YB )@O[[:FD:dcy0^a$YCi ~uXS2RRQ~d 54ğX"bm&_{Vrn"ԙu䮲i=GmbO#{6azS12)kqhwg:D.X0~ (IM yY?˿hgAr73x'K p$s]^f ;V&L%@}HdPf-h_O>G[o:As~09uh2(EXN+݉nW=BdSǒh0A7GxrTGu4µplspDr_.y1N$*tuKM2//4X iFXbnTMզ5Jku)ViᎸ#)AEڷV>JY×eu0`~(<l`CO2WmYЛ6)'6E܏|4ض"C 񑝈kP S6FlsH R<c.Q}U-`ۀ MkmFV#ض!iܫ|- ʐT%+3sRݮLl^OSR\66*崗_) 9CGѡM |󕉞 .T)5^i* JK[ucCRk44L4'knWz[ f%+}Dֵ L@@elFF-<_ؖx|@FYBAzjooQjHW CS5UZ}MJnwaLam§A<֫uyط;V9kQZoJWw6Y.65 J so4i ;@c4%S-l4:gU{лX Ԕ9 B5ձՃc3&>KSm 5Wkgk\<վ^&E^'h ~)JKhQl@xkhU|[u(]c&O;D mki AzjkhzZFOL'736k zj?{&JR <'⣏خ4Li ?U$K(&*/*\*a\Q?-|jJAruI._IO[\L,^Q;),)/(˭(*-Q&(5@IŹEҔiT$&N:d:0$<8M^?6@E*XO=h;dz3 M&_69M¿I3&~ KTWrY4%h:HAy)KYZ<`$/}vw@/::(`^~n1Nـr]Wx[ԷFFܙƼVK…3քe ":Zv[r^>a%RoB/d@?M%VGɢ?tX|ښ=0QzA40/J-- 0dQkCi 2$P$%VVtJ2IC3`L}5!P3⵾ .]e~0tA>|O$IQ֌>"߁d6$k#b%+)+pJ򅰒ݱ÷\ď \R~\2>C&GLr2)2gC&@&IW \[9mJ)e;wBGr?!tt$#{#H!:k@>/ہ̀OM @oݹXpeCFd[[2i쬍44 P jGG(4ՠTfL8F@z(h" ?|ZyPJEC+5¡^Z~v煫,s-ìzg\ `L3|x`̿6cJ=jQ&T}nS`fwgәΨ#[;d\a.$ x vul@NT3k,ʀ6!O~>^6i%hxaLAB:;y/EЗDZToڡO=ZfmV6,-G I#q>5ys}]}CNG'sY+P/kb*YĨA㩞fiZ=-hwZli17-Xf@^a44MATQ?Ԩ(/{Yj%)rtl-_50OfQPĨ؛~!<@s ?y?O'I ZqS$0_VC҂\1*N1gY'L{.QH~^qtfnbl-e?Nirf 0Z!ձ5Dl! հk ANDzr>l4pn&h`4 Js@8a,75MZ{*mĮ}"V"rzԷ:i-Tuڠ'52?m}qJuZfp "6^j^aژo]f PwCs?)ĥk}f -!?YoΣ1/9-pheTopk<獔zvy2Orrw-[ u>a Uy+AIB${GkpD-̣ŴzܛURUc$\z55yJQ yJ]8+g rxS wy4%SX4^mJ`4pgJ[an*/Ztl>jӁRhSi1\Idv!(TFUء(/o\CMr?96h1z4h$ȧrFR4'G>273ɬq[d(,GZsW"3ّʓY^gA+v.5>+{g/CaW f\BF-3m`2=&~TTŽWfIL_n<6S.Jny;C!/iżEO4,bN ZaڝdfT.]).cIY 7x>⧂\q\b1e#,~9a}9`F?K{9P}ܡ ߂y̟NՆCZʇu9޼G}h4wp$eBַ~}OjI[jpv ;TkX>zЇ(2|a@/*1E&۾5%wWљ=lO+p:<ڼ %S^ekȄK_sV59ym|!\-Zi VtB55e>Ƣwq^t-#m)|:ػMAr׿o?H>~i?? o#oE+)+_)l_o}% WS7+WWeWѿӏo.^xwI5$߶$KivoѮ]&عhewvjݟrILO$ LʿmIf:SsOw$##?w$_po߿w$ {GF߻wʬ^QǎO.͏#sk#|۾ÏC84lz~sr%|2o 53oE wurt_p "]8x@w)g)mN `& x8$c9lQ T쎶 dv`3Z-쎶 6a# 3ڋxl{C0i؀e47nxFg#%v!#;{҅H,2vY/$}f 9s QUMЭoHJPz |EP?TrZ%JG%TY9O;eStʤ,|E>߻Gw:Ta[97'Tr\%U_TJW1n^-y7]$%"oȟp "|+Ju*EX7 ai "o7\FrQAG"G@"EO%:Wx2UW\«sɫnJ^%wX@^T *Xaoyxgȳ{l³qd3a<(S*H"ӣHBy^\KJc.RZbJcILK"Sb;:&L"S)2] J((E&< d&s]. 4s]="U20B.1Ǜd%cUEƨdt$'rQBvˏM(2r?"("#| , WI&L2$= K+ "iv6 %ՒT 6apW80t``#)$td IvJq$)$& .`bIS3M$.v¤SIJm9]$DHJlpoSXVI,{y&xc",b bX&"yJ$T" D.Bj 8I6L?k_CiW endstream endobj 127 0 obj 13793 endobj 128 0 obj <> endobj 129 0 obj <> stream x]n0E .E 0 8v xdvԒ@ }y-Ep)a[cXyn=vAe mT?tK~EjsPF5UBlK(VUV~]]Yr:w?ۘRuJ}7lfNn5ؓn߁-#߅ܓ+aZMoN7>y5L'9w҇΃qCZCLz Y p|70fbo%?㼆7OK<\&gyY[8/9 z|'-o_Zc1Uv c4J~z endstream endobj 130 0 obj <> endobj 131 0 obj <> stream xy|TE8^]{$mtH$",a$A–nlnч Q& 8((*()Fn71~nTթuO:KUik]րLh5H}9W^q+\#{GI?]h弢!m 7}R+"4np>Y/BC]wͣ?'5ͩGh^\U[W/nh̨'B67-m;onmh^ȫC/XPDI6MfU9 .KLJWSR҃2O?GQ"~z!DF?euEOI VR,?Wwp{з؎d*z3ѵu<'H<MEЫXD539ڊr4]&KLǡc'߈xL-d7!'@okѷQz4_hLdA3tƗEb`UXt>#x,t=:#( qhEѣ)2?CP:Zc?N+H)2}q#rO.}!K8%G|cѷ_!a)h jZ{J߃(z>D!l‰OSexnw;x~ A FH$W5 9L0epy\7[ȵqkD>B`ߠ؉]D<xk^7,n.܅ï#M.'JORH"*!w{}Uy"Ti:2j>߹Ox+O># KG.]bx^_wSJH[d`/Kq ^b3ހkпs-dd'P̅YJGwPL\; C7h#˸k 2X!= 2m`<EA ̵$\dety 8 ] ~RzVbV䵘Ca,)8dR^")"2e0Cpf& qL$q/LKiVTH| lVolȄWOU4;i90c5.$\jV_m^ns'V(?4]S/R>yFZ.NbCzU\Pj| p\ՌjV1)eu`ÎQ4 Hmg2&&l?7Lm +ubq!6]ԧQW k'?7RxhδxtR>uƆ ƀڰaL:fC݆)a7X64][cng4rG ^7yMQ[j@GՍّ uջU4rê ^[Ch^z~NFzt 9]$VeB0N9%O vo5g(23y%а#OH9WS2I9[2hPnAΫtyG?!|s'OYVj,ExOD&t3 Vq+L5Jt%c8RRZʍE]?&N ’@AM9B溢:FX3 @TY"P$ gN"W>XF]F돹 Źt %6Rbck8yZ{n/ZwƤ#ߒ0xiYs*mM]dZȺZЊI++MjXg'n?*3l9.M|c&8vF6(k˻,ȟHQ4*OiyūW׋>$?b~N+ޓ7~.~vt t?*yN9Tb]{r!ʯIiY%x pHtD:#Rۅ(]+C\KuQjMe**VzY? 'ŭ-gQiHyKrr g,MiG?k)[VX#T&k0YV4I?YEvNIOmk ǖQ )G-b=P,='rr,gs;,(‐t .* 0J r3{rwzٕ༿}/݋7~l=3ࠛ.mHb"4Րk5j9y]v8F=؁wgldG0#{n_3zo{QD7/A$F1΁l^,`hdQ,Z|ɮT$**Ӥ 8 ݌9lOԶBK'3nżO/lOIb+,uǡq;n6Ԍ>qfYjܞůc䚩~ysv mF|N󂇣&j5$~g~8n[kұrEMx>M_o ГE,FVz#@ %dB" A i0J!M yqFXmHC[V13K<@}.y>I?>?~s]dV#!x#. $b4;)N\op< I( D(JxN lU",bP4wQ͇^Hٮ 131zf0VU@;LȽƣb9Բ;+ۊ WIWk/)ŢT"~Qwdꝲj  { &&[@kFkvS(IBj-lP |8*҉L,oAB_I?8 1\3d@hwd!w]4VKnK3"+)$n@O{P.-$8]P\> kϋjOD%A%+g5R^|(Œ*)tB_Ux>PMϘܣ .F=FxKs̅N. ]Q{͊Е5֕ ckn`MV`G0YP=Ջ^/2Lɋ V**Ic M)j"鰉XM9RUMLĤSOU{^wٽcb_} RW2u iT\d2 RLRl튾 Kϙ!١Ħ7.N_`iJҼo'p]F -oqyc.}Cuk<|t{#̡}զ4`OPEaB۔9"s88$6 kAt|z|l7S_]&n¦f 3XT+rZb5]/1mF%V[`)i6Uujwla dg*@&ߡX{n슯J%V]bf!fܢ.aTl m>| NIgE:~ ]'ǸʒƱJuY݄ޯlEZwY;Ir6R]DB2:َ*RMa2]E5*o31s1KFjA|S;j$ƥ?aVhUGa]`sH7_ ~cRǀC- 0"o{~-8˥0AHJ0DyawlF"y<@5i9iKґ$JdURģx}7؆.L3ϳ̵ ,m5Ae;LR;v+x8jY po'zFiiaE1ǩAd'1jGŶb ;tվ~N]`gT-g爇W=nۓhE8o2}¤(r_Ms=$eLvǟo|E3AL~rVuߔC S&OP>tLƺ$)rV>5,\\xs챉cXს!!G<&ыyd Z RaH%:[3VcAר%d 8sFj5}FJ*[{g %pGz*)6v>-0rcsѹn ^<ږ،af}:WJ~vXuvN ";[Ջ$(9F hOmם[ <(W^hǟW^~u2!sIÃ7]?C47GnMOq.ϑ Bq?]X-o6, &aGzJQD`k£A-4L)t{\i`1K.LZiA+`wHnE\I!?ێʹPخOz%%$; V,ߌ%1'rd/zF^Ӿwca7(mpp7Kx9 b!GAz̽GOpB]E7PJ|\d".&tNIǕ/g۱3=/_دg=,="?yϊjĻFy 'T{WzV Պ[ƍi\ eUIe%{Lʩ|@HFrQ/u!QH9#ԅ,6Ae?5 LE+@Вg@KFkan^a"D=Kf(.Lcj+1?~묋w!H`fVXW+Ê=,hXd蒓yȓÜY Ff#^l""&[ZtQ_FŔ(-"qRkEK&Lڴ!N~{ˑ#VieOd[s ؍RAHyTҺᗋS n3+jvn],ҀBXӊo2Kb Jq1`dS5{p´cӴZtejB==uj+BkBY%l m>pȵ/9XVٙ8{4ݞo0hfsFwMa) Ac *A5Ԃ|lh < 5!R4Sf1ÝY#cv+lk&wop.7K1i;1A5zk͙ĶgL۞Izṷ+êi1 ]08L ǷU|zIž NYؕda\미 L|͘Q]ع ?_(RMWm\=49X) 잏Fq!Y@"#;"PN$4pM;1.|f\ټ,Ԃ C h6az v<^if07[K;i'ɿH_<IĘ $pLywNŬ݉g31΋8"Ņ|+Ow`GNCozв+P,nwHBq|us̠3Le3:eO3TAN'Ӆ"(CID6F !'O9'U٩WrAr#,IbB:nA9^Dj^hqp𘰓ݝCpTz `wi 8>#Ռ+ ػHH e) ,Q\9Y p3eaBcQ$sq#OJ<#NCpBBq>.'Wk:t/H6[ѣܓVi-1*>R#F ?H ȟ`$' 0$s (-kX7~0J ć1L80e0A (35#6xGr9ETbkY_87i3`t_,cb`iDHd/9 E`RQd: Z\Hph ~ԗS L?$oȐ(M/J4;^g+̓ҼKk7b6+bR*0W/lPy ITp"'#moDN | _P_]#XƲ[JMu|97xyWaoLG1#Mm;U3666V^12|`~_ysO;G՝lA:a_ݙra5< `4?lMIO<S{9`5G .Lr*%Ls Jt{D0HP`}_S|  wl|"}@:e`JQK01Fn o6\uk|yƈ["O{ʺnz=yZpW%8ѕ2fA-+Z `c1הXCH)KhxXw)ƨhX)9$-.&~ $<&N^p.P̥|Nw/v]c׼[f\v׻jz67%7Walt͹Zh<ƋG[PLp焭xnUı\i(zs⛲#\Ĝn}A˲/^F>]FNp/"|KGO`fembbyє rf?5v\,; ɡA`_/$>x®.\Y{z{ߛ-;#{?c5G>)|.O>c(i 1+;R3kb[/lߥ/73ٚJM+5_`uu@_0 #Oi6EvHDo\uA]y=/[ =~zTGӋU൳h{$#HPʰc㽕I󸫼g s0[*A*2QǼUjPFsNmll dp] ;QJ ]\sI8əʎ-`8`ԂrN?  v(( |]Tx-_b)+S4o^A<+A$YwՇ|5K?ٺNxxOj 1X/dٳ̏,`--̪"_LO%<Sbgi4{ZbZrP* eƱֱcM3NNO\Kn1WWg=>jE0!t@f&XlN1LlVtBIbRϙgf!lIə!;`HOۜ~((*6l"kƤh29%ϣ:27͙u!\jmdwH߶/BNb;~{ ~y~[z7>>WOB!𰂍;K|DHv*Ū=e[տvQi[U7ڋhZuGҺ ^j|]3<є8 pE뚋 VL~#ҏ,2{bꪈLX#S 5oIڐ9*(c|w^} x.w詜Sχ6WJxwg|=xO~aAIEa.|ID$Of9ș,_Yݩ!}y$fF؈X! !5vVضۀ"&Dl*Y8 Z8M~j?ҏLU|ٺLWS5jAej|obdvkܘYc|5!CBZk̳[eO7VyW9e' dH<` Ue qes ȩ/ߖ|nJrz}5B7lbsǖGV.KGO:|LS6r<%K#ω//9@%=^{H"w\3pD|W>>.9J9-\X-C =0w|6j* .<.0  ج<ˁ`3ZP7<^٦ 7*'%cAxG$A,^a)bQAvr\l_`I85a-fq$V# r˱~& 01)b;!]\e{y@y +9AcÖ4--?_S@$%Ȧf<c-$oo+AŦpoN}s<r Bѿih< ³d~ -|0 wY$%Sfj((tqxx{QFYEU:!ApwQoH13Ĺ=Fr)7u8Rq!⥇GE=K:?:^7#Y@OlN8`>% 'ui2{ٍ"[7=7Qqn9:Q~=IPJS 7j"'::Nbߥ%çhK.6|%9q=&)'. IfFNЛ=it93!$qaghbuBeE\It`d2V؛q $`l1Z0ZU v;F_(ZȢ*.6ssWq?%5veI&c_ݹG-lKSťP႑3Izuvp)/Z:uNKG|a?tu9t/q72dWVc/02_!^frtC|>8744KJ& o&6͏As"2;rx/oCOW |>J)2 J |R,#`ŨGlfR피Ɯ,(7V uB3rad"{^('vgnEHU6$Xh@bQ1'@R &-F2`xSefod N9*S$+*9lUпދ21~W44{WyslŽ' pVX?y뫳6o;0UnlʢI =WIG9Ĕkhkaz92ω?ҞN؎\c[3wj.rq?+|g>%OόKQ6}w;K%nw#w!¯k;8"rW:Ft- &'_ƕ;ɴZ XCFS>qrJ嵎v0xN$㰼BV8 $(ׂ"Ec?r:rJ"A՚)Ҭ0Oujv'@ty Pq:> =+@x |.v\lwDPR_bwK7LrnS F`v_S6/ f9}o-Ư, `]b>.i-v^ʌr@dY0PO~uiJWs$&mr%|J]ew9z/dY`Mqk|_gH$.EMeGEx-ztj;&elYlz'"gDv~kzK՟_DnϜF]eP{>!!f;$y1׬gxT-O3J8:NftK,.OS,j.$P*sh<G&r('5rZ#/Dx6 s˘mXa\nknIdxTgt 9p#x@ a#'Km Fx F#fǃ' ذ̀7tެ;P3&7K8of`Aw ӛy?82Q|H'Jd~BDV;v&ib${Y|9q/&djԲ,Scb>^"]__{(d'` ʐ,n(~쮋ٌB4:.c1R ]b*يyv_ƌ0_CNYG)FDS"\9 |ق|ݏ͸6ay(&Dszދ`Ƭw!$3᷵BDbN/PQJ^#ӰE|~@xC!/>nb NaQ\ϭ@ ѰZJZeR<հ4Rrbc ((dRIDehqQ7dzF( {"5g`֙ 8I& LE%Ax[~j#>#ۀ>/^;y,I& dG~Y3UigjIfЃ:-Cy2㼳=̄cnk[zu`Szz =)g %*DqED- Zhwa]QYzpȹ[p9Sx{fB3!UY֒o%C^][798<2 'f2>A L㖢Rt h7+h$I[|; * xY.'A@/Bt2f@~ Cz=VLFL([7n H h,PVGvёr?)lNHOei6&yo7Z[7)M7| {'z@γuվH:BX ˀydj/Oy4[TA1 jC03qGJcRqfl<)K(㰌6_a3Fl8 )k0lmqG&OqX@v8,AqXBqXa3L~~qCs:CO,s(]B:,@SJR:,2I30Jja#1~a_z38 c0_O8 Oa|> jn@CGc2w7-<Ւ9kaS>ˍq[0+P(o%qCTvwVax/|vByuCPQN`㱾a<֯uƯ0~Ea/{ st8Sa?t8ͩc9YthzlqCؼqamg eb+E.N^otX/{^f 60+ߤ_^HEyA h* mh%jKFA`Cy 5#" ʮmhkC<0Gm*mx.`lV҈CPPVxRl<*ȴlxB2G 5K!̃v}NsˬޖE7tЦl.~-26'xS{: \3 <]Xm>Mh^Iz|BYVQ)/q*0hЯZ.nF_X΁-)2W_1J beH̎^}nܷ\^_{ O帆#&wiӟw/[_}[nАy:~/}vqb25뱪vy/7ax(q5/w`uubӒ ꨦƦ%EԪ+-U6.o=~ȦEsm\h9TP ]кQ 6-m6z,Vj qZmX\ߺPm޲,Zqɕjżys,ivuRMT+Z4֫S- CTɫiZ._.[ڠ͇QkZҦ5s6/%sF(5 /UZ75Ugf *YT>Z֦洩0a }i9ͅ9P/ iɢjFal}>}kRmkcU~t/;Jg铴\Z4kEMEӫaQ:楐·t90tg}{թ"8 Xc@_- t\\<JEօƵQS0_ocOkRfo1N]ӚW gLqh/G4q\4&sùa(i%\9WT%7#=5n| k~kοV_ &-pn/.o&}6z}=/*iD_d) -)?c+?(Bѳ(ώ#Vtk]SIȃdgΜ|=gDzzcF,i_*cmXj4YG$Љh(*8dzi'{C9jTުt< eլ4W΂X3(<VA8oeG^ΈU9wBa ø& l-=C&_xBQɫq8h0b MAf:e%Ͼ;|ءȋ%:QgɈ𒏠Q.i*!A883D nBzG'ӐlNuX\aU8#CXmF<:.^aH EY, B$V/#@#@#-GS9(>͂>Q!h!R^1.̊BB WU8@4+zm) VF'w$I[RT~#0X' W.n,V/\OӺxK;2I~,ɋ%bIn,ɉ%d@,Ɉ%X%XKKKLȒ`c  &L06`l0`c  &L06`l0`c S(ŔK^%5#SK<\Cz- dCȄ`8 TSFa;!pS F;v3!@{-YZ|S!~"L%ŒDm?B›V@Xa:K!p E[]vvCS ,&i;#;Ύ+ (ȏ;,= F=}q ;2f p$ ɐP!ӑ I}GF2pAzYGzKtd_G]FzE.wv'vˬ%]3W"Xe_lL@ߑwp_&PC&0C6C~4]5u%.|.oȼ_.L.ᯂ⥐_̐4<|gDޣ=`-I(YA02Fef,wPlUlLl,!=]lOɢSKdLA$A$"!m ; v KŜ+~` vrR>edxHKVBaQJjܔ.l<#̧a{9*:&0Z \ܒ~ԣiMͨ= ]/A奞Rp[ѿ㟯ф<}Py[;E)mgv$7OoK 1 \S^?EYxlnfIMnxʪX99X<HHexHH:y"'n<:aQ-CUuug7R+55bXxVQp qR3J 2er(1 (OȲ)#qye 53:gI܃ޤ_"c&lH6/(cƵ5:tA),0,>qVUY#F*yVeaCs@5^@ kti[hi߂_}qt'ezh[>KFÿ6TΜRDZ SQeHG,BmBM#mV&Ƃf \@ok5[Ft{nnm͠>V& ]mv@k``h`A(Ԡ1h$V,^(y endstream endobj 132 0 obj 17899 endobj 133 0 obj <> endobj 134 0 obj <> stream x]n0E /%E)C 4Rq"}}=n+u: gfo)~C{IzY7۲:7&N4c:eoNCUE񛻻Nfn8C؎moj>6_|a3$kyj±;wO+KxȟCױi6Q$v:bB~6֥j$yV;gJSp!g~\x)$g ^KF%x+$:B-Yg? :>S̫ſ؀,)$)ĿD>w '8瘋ğn$%f_c-?ڛnrvFT7JO endstream endobj 135 0 obj <> endobj 136 0 obj <> endobj 137 0 obj <> /ProcSet[/PDF/Text/ImageC/ImageI/ImageB] >> endobj 1 0 obj <>/Contents 2 0 R>> endobj 5 0 obj <>/Contents 6 0 R>> endobj 10 0 obj <>/Contents 11 0 R>> endobj 17 0 obj <>/Contents 18 0 R>> endobj 20 0 obj <>/Contents 21 0 R>> endobj 23 0 obj <>/Contents 24 0 R>> endobj 26 0 obj <>/Contents 27 0 R>> endobj 29 0 obj <>/Contents 30 0 R>> endobj 32 0 obj <>/Contents 33 0 R>> endobj 35 0 obj <>/Contents 36 0 R>> endobj 38 0 obj <>/Contents 39 0 R>> endobj 41 0 obj <>/Contents 42 0 R>> endobj 44 0 obj <>/Contents 45 0 R>> endobj 47 0 obj <>/Contents 48 0 R>> endobj 50 0 obj <>/Contents 51 0 R>> endobj 53 0 obj <>/Contents 54 0 R>> endobj 56 0 obj <>/Contents 57 0 R>> endobj 59 0 obj <>/Contents 60 0 R>> endobj 62 0 obj <>/Contents 63 0 R>> endobj 65 0 obj <>/Contents 66 0 R>> endobj 68 0 obj <>/Contents 69 0 R>> endobj 138 0 obj <> endobj 139 0 obj < /Dest[5 0 R/XYZ 36 690 0]/Parent 138 0 R/Next 142 0 R>> endobj 140 0 obj < /Dest[5 0 R/XYZ 37.5 656 0]/Parent 139 0 R/Next 141 0 R>> endobj 141 0 obj < /Dest[5 0 R/XYZ 37.5 482.4 0]/Parent 139 0 R/Prev 140 0 R>> endobj 142 0 obj < /Dest[10 0 R/XYZ 36 690 0]/Parent 138 0 R/Prev 139 0 R/Next 145 0 R>> endobj 143 0 obj < /Dest[10 0 R/XYZ 37.5 656 0]/Parent 142 0 R/Next 144 0 R>> endobj 144 0 obj < /Dest[10 0 R/XYZ 37.5 422.5 0]/Parent 142 0 R/Prev 143 0 R>> endobj 145 0 obj < /Dest[17 0 R/XYZ 36 690 0]/Parent 138 0 R/Prev 142 0 R/Next 161 0 R>> endobj 146 0 obj < /Dest[17 0 R/XYZ 37.5 509.4 0]/Parent 145 0 R/Next 147 0 R>> endobj 147 0 obj < /Dest[17 0 R/XYZ 37.5 348.9 0]/Parent 145 0 R/Prev 146 0 R/Next 155 0 R>> endobj 148 0 obj < /Dest[17 0 R/XYZ 36 317.8 0]/Parent 147 0 R/Next 149 0 R>> endobj 149 0 obj < /Dest[17 0 R/XYZ 36 243.7 0]/Parent 147 0 R/Prev 148 0 R/Next 150 0 R>> endobj 150 0 obj < /Dest[20 0 R/XYZ 36 320.6 0]/Parent 147 0 R/Prev 149 0 R/Next 151 0 R>> endobj 151 0 obj < /Dest[20 0 R/XYZ 36 232.2 0]/Parent 147 0 R/Prev 150 0 R/Next 152 0 R>> endobj 152 0 obj < /Dest[23 0 R/XYZ 36 193.7 0]/Parent 147 0 R/Prev 151 0 R/Next 153 0 R>> endobj 153 0 obj < /Dest[26 0 R/XYZ 36 470.8 0]/Parent 147 0 R/Prev 152 0 R/Next 154 0 R>> endobj 154 0 obj < /Dest[26 0 R/XYZ 36 320.2 0]/Parent 147 0 R/Prev 153 0 R>> endobj 155 0 obj < /Dest[32 0 R/XYZ 37.5 691.9 0]/Parent 145 0 R/Prev 147 0 R>> endobj 156 0 obj < /Dest[32 0 R/XYZ 36 506.3 0]/Parent 155 0 R/Next 157 0 R>> endobj 157 0 obj < /Dest[35 0 R/XYZ 36 694.8 0]/Parent 155 0 R/Prev 156 0 R/Next 158 0 R>> endobj 158 0 obj < /Dest[35 0 R/XYZ 36 449.5 0]/Parent 155 0 R/Prev 157 0 R/Next 159 0 R>> endobj 159 0 obj < /Dest[38 0 R/XYZ 36 694.8 0]/Parent 155 0 R/Prev 158 0 R/Next 160 0 R>> endobj 160 0 obj < /Dest[50 0 R/XYZ 36 694.8 0]/Parent 155 0 R/Prev 159 0 R>> endobj 161 0 obj < /Dest[53 0 R/XYZ 36 690 0]/Parent 138 0 R/Prev 145 0 R/Next 164 0 R>> endobj 162 0 obj < /Dest[53 0 R/XYZ 37.5 509.4 0]/Parent 161 0 R/Next 163 0 R>> endobj 163 0 obj < /Dest[56 0 R/XYZ 37.5 691.9 0]/Parent 161 0 R/Prev 162 0 R>> endobj 164 0 obj < /Dest[59 0 R/XYZ 36 690 0]/Parent 138 0 R/Prev 161 0 R/Next 167 0 R>> endobj 165 0 obj < /Dest[59 0 R/XYZ 37.5 621.1 0]/Parent 164 0 R/Next 166 0 R>> endobj 166 0 obj < /Dest[62 0 R/XYZ 37.5 691.9 0]/Parent 164 0 R/Prev 165 0 R>> endobj 167 0 obj < /Dest[65 0 R/XYZ 36 690 0]/Parent 138 0 R/Prev 164 0 R>> endobj 168 0 obj < /Dest[65 0 R/XYZ 36 607.1 0]/Parent 167 0 R/Next 169 0 R>> endobj 169 0 obj < /Dest[65 0 R/XYZ 36 308.7 0]/Parent 167 0 R/Prev 168 0 R/Next 170 0 R>> endobj 170 0 obj < /Dest[68 0 R/XYZ 36 691.9 0]/Parent 167 0 R/Prev 169 0 R/Next 171 0 R>> endobj 171 0 obj < /Dest[68 0 R/XYZ 36 542.1 0]/Parent 167 0 R/Prev 170 0 R/Next 172 0 R>> endobj 172 0 obj < /Dest[68 0 R/XYZ 36 441.5 0]/Parent 167 0 R/Prev 171 0 R/Next 173 0 R>> endobj 173 0 obj < /Dest[68 0 R/XYZ 36 340.9 0]/Parent 167 0 R/Prev 172 0 R>> endobj 100 0 obj <> endobj 71 0 obj <> endobj 72 0 obj <> endobj 73 0 obj <> endobj 74 0 obj <> endobj 75 0 obj <> endobj 76 0 obj <> endobj 77 0 obj <> endobj 78 0 obj <> endobj 79 0 obj <> endobj 80 0 obj <> endobj 81 0 obj <> endobj 82 0 obj <> endobj 83 0 obj <> endobj 84 0 obj <> endobj 85 0 obj <> endobj 86 0 obj <> endobj 87 0 obj <> endobj 88 0 obj <> >> endobj 89 0 obj <> >> endobj 90 0 obj <> >> endobj 91 0 obj <> >> endobj 92 0 obj <> >> endobj 93 0 obj <> >> endobj 94 0 obj <> >> endobj 95 0 obj <> >> endobj 96 0 obj <> >> endobj 97 0 obj <> >> endobj 98 0 obj <> endobj 99 0 obj <> endobj 174 0 obj <> /Outlines 138 0 R /Lang(en-US) >> endobj 175 0 obj < /Producer /CreationDate(D:20171117123955-06'00')>> endobj xref 0 176 0000000000 65535 f 0000203143 00000 n 0000000019 00000 n 0000001845 00000 n 0000001866 00000 n 0000203419 00000 n 0000023463 00000 n 0000025941 00000 n 0000025962 00000 n 0000054785 00000 n 0000203565 00000 n 0000054807 00000 n 0000056427 00000 n 0000067038 00000 n 0000056449 00000 n 0000067015 00000 n 0000076886 00000 n 0000203713 00000 n 0000076908 00000 n 0000080077 00000 n 0000203879 00000 n 0000080099 00000 n 0000082626 00000 n 0000204052 00000 n 0000082648 00000 n 0000085079 00000 n 0000204200 00000 n 0000085101 00000 n 0000088305 00000 n 0000204366 00000 n 0000088327 00000 n 0000089399 00000 n 0000204514 00000 n 0000089420 00000 n 0000091709 00000 n 0000204687 00000 n 0000091731 00000 n 0000094030 00000 n 0000204835 00000 n 0000094052 00000 n 0000096597 00000 n 0000204983 00000 n 0000096619 00000 n 0000097679 00000 n 0000205131 00000 n 0000097700 00000 n 0000099327 00000 n 0000205279 00000 n 0000099349 00000 n 0000100564 00000 n 0000205445 00000 n 0000100586 00000 n 0000102685 00000 n 0000205593 00000 n 0000102707 00000 n 0000105512 00000 n 0000205741 00000 n 0000105534 00000 n 0000107339 00000 n 0000205889 00000 n 0000107361 00000 n 0000109557 00000 n 0000206062 00000 n 0000109579 00000 n 0000111649 00000 n 0000206235 00000 n 0000111671 00000 n 0000114789 00000 n 0000206401 00000 n 0000114811 00000 n 0000117290 00000 n 0000215400 00000 n 0000215514 00000 n 0000215629 00000 n 0000215748 00000 n 0000215867 00000 n 0000215982 00000 n 0000216101 00000 n 0000216220 00000 n 0000216335 00000 n 0000216454 00000 n 0000216573 00000 n 0000216690 00000 n 0000216805 00000 n 0000216922 00000 n 0000217039 00000 n 0000217154 00000 n 0000217270 00000 n 0000217386 00000 n 0000217539 00000 n 0000217710 00000 n 0000217883 00000 n 0000218054 00000 n 0000218227 00000 n 0000218394 00000 n 0000218567 00000 n 0000218738 00000 n 0000218911 00000 n 0000219091 00000 n 0000219207 00000 n 0000215158 00000 n 0000117312 00000 n 0000125431 00000 n 0000125454 00000 n 0000125653 00000 n 0000126051 00000 n 0000126308 00000 n 0000139774 00000 n 0000139798 00000 n 0000140002 00000 n 0000140627 00000 n 0000141109 00000 n 0000142666 00000 n 0000142689 00000 n 0000142883 00000 n 0000143175 00000 n 0000143339 00000 n 0000159116 00000 n 0000159140 00000 n 0000159337 00000 n 0000159959 00000 n 0000160421 00000 n 0000168034 00000 n 0000168057 00000 n 0000168265 00000 n 0000168614 00000 n 0000168831 00000 n 0000182713 00000 n 0000182737 00000 n 0000182939 00000 n 0000183483 00000 n 0000183878 00000 n 0000201866 00000 n 0000201890 00000 n 0000202097 00000 n 0000202574 00000 n 0000202907 00000 n 0000203008 00000 n 0000206549 00000 n 0000206609 00000 n 0000206794 00000 n 0000206933 00000 n 0000207106 00000 n 0000207305 00000 n 0000207469 00000 n 0000207643 00000 n 0000207843 00000 n 0000208009 00000 n 0000208232 00000 n 0000208396 00000 n 0000208629 00000 n 0000208818 00000 n 0000209039 00000 n 0000209276 00000 n 0000209481 00000 n 0000209709 00000 n 0000209935 00000 n 0000210163 00000 n 0000210448 00000 n 0000210689 00000 n 0000210958 00000 n 0000211126 00000 n 0000211397 00000 n 0000211611 00000 n 0000211841 00000 n 0000212028 00000 n 0000212234 00000 n 0000212428 00000 n 0000212626 00000 n 0000213174 00000 n 0000213783 00000 n 0000214132 00000 n 0000214489 00000 n 0000214886 00000 n 0000219323 00000 n 0000219482 00000 n trailer < <76D441A7D9F4D844838679C2E537FA8C> ] /DocChecksum /67B9E8151803BDFF3897ECFB2B910654 >> startxref 219662 %%EOF PKZ0].E;E; LICENSE.mdnu[PKL1]?? ;SECURITY.mdnu[PKL1]#oYoY ICHANGELOG.mdnu[PKL1]ϫZp%% README.mdnu[PKL1]snŹLEGALnu[PKL1]P]-- README.SSL.mdnu[PKL1]$hhNRPE.pdfnu[PKcb