From 7e8040ef2ff3488f63de71432080745513e2288c Mon Sep 17 00:00:00 2001 From: Hank Preston Date: Mon, 1 Jun 2020 09:51:28 -0400 Subject: [PATCH] sandbox multiplatform sample --- .../sandbox-multiplatform-network/README.md | 135 + .../multi-platform-network.yaml | 2170 +++++++++++++++++ .../sandbox-multiplatform-network.jpg | Bin 0 -> 76271 bytes 3 files changed, 2305 insertions(+) create mode 100644 lab-topologies/sandbox-multiplatform-network/README.md create mode 100644 lab-topologies/sandbox-multiplatform-network/multi-platform-network.yaml create mode 100644 lab-topologies/sandbox-multiplatform-network/sandbox-multiplatform-network.jpg diff --git a/lab-topologies/sandbox-multiplatform-network/README.md b/lab-topologies/sandbox-multiplatform-network/README.md new file mode 100644 index 0000000..2fb36c1 --- /dev/null +++ b/lab-topologies/sandbox-multiplatform-network/README.md @@ -0,0 +1,135 @@ +# Multi Platform Network +This is an example topology that was built to provide a common topology for a variety of DevNet Sandbox labs and network automation use cases. It includes Cisco IOS XE, IOS XR, NX-OS, and ASA devices, as well as several Linux based servers and desktops. The simulation starts with a functional network configuration. + +![](sandbox-multiplatform-network.jpg) + +## Requirements for Use + +* **Node and Image Definitions:** This topology leverages images available with the standard CML server software. No additional images are requried. +* **CML Server Setup:** This topology leverages a bridged external connector and statically sets IP addresses on Management interfaces for all devices in the subnet `10.10.20.0/24`. + * If your local network does NOT use this same subnet (which is highly likely), you can update the topology file to change out IP addresses within node configurations before adding to your CML server + +## Other Details +For reference, here is the list of devices and their static IPs and management access information. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
ComponentTypeIP AddressMethodCredentials
internet-host01Linux10.10.20.182SSH
cisco / cisco
internet-rtr01IOS XE10.10.20.181TELNET
cisco / cisco
edge-firewall01ASA10.10.20.171TELNET
cisco / cisco
edge-sw01IOS10.10.20.172TELNET
cisco / cisco
core-rtr01IOS XR10.10.20.173TELNET
cisco / cisco
core-rtr02IOS XR10.10.20.174TELNET
cisco / cisco
dist-rtr01IOS XE10.10.20.175TELNET
cisco / cisco
dist-rtr02IOS XE10.10.20.176TELNET
cisco / cisco
dist-sw01NX-OS10.10.20.177TELNET
cisco / cisco
dist-sw02NX-OS10.10.20.178TELNET
cisco / cisco
inside-host01Linux10.10.20.179SSH
cisco / cisco
inside-host02Linux10.10.20.180VNC
cisco / cisco
\ No newline at end of file diff --git a/lab-topologies/sandbox-multiplatform-network/multi-platform-network.yaml b/lab-topologies/sandbox-multiplatform-network/multi-platform-network.yaml new file mode 100644 index 0000000..29c9b47 --- /dev/null +++ b/lab-topologies/sandbox-multiplatform-network/multi-platform-network.yaml @@ -0,0 +1,2170 @@ +lab: + description: A sample network built with IOS XE, NX-OS, IOS XR, and ASA devices. Includes + Linux hosts. + notes: '' + timestamp: 1590053429.3350143 + title: Multi Platform Network + version: 0.0.3 +nodes: + - id: n0 + label: internet-rtr01 + node_definition: csr1000v + x: -750 + y: -200 + configuration: |- + service timestamps debug datetime msec + service timestamps log datetime msec + ! Call-home is enabled by Smart-Licensing. + service call-home + platform qfp utilization monitor load 80 + no platform punt-keepalive disable-kernel-core + platform console serial + ! + hostname internet-rtr01 + ! + boot-start-marker + boot-end-marker + ! + ! + vrf definition Mgmt-intf + ! + address-family ipv4 + exit-address-family + ! + address-family ipv6 + exit-address-family + ! + no logging console + enable password cisco + ! + no aaa new-model + call-home + ! If contact email address in call-home is configured as sch-smart-licensing@cisco.com + ! the email address configured in Cisco Smart License Portal will be used as contact email address to send SCH notifications. + contact-email-addr sch-smart-licensing@cisco.com + profile "CiscoTAC-1" + active + destination transport-method http + no destination transport-method email + ! + ! + no ip domain lookup + ip domain name virl.info + ! + login on-success log + ! + subscriber templating + ! + ! + multilink bundle-name authenticated + ! + crypto pki trustpoint SLA-TrustPoint + enrollment pkcs12 + revocation-check crl + ! + ! + crypto pki certificate chain SLA-TrustPoint + certificate ca 01 + 30820321 30820209 A0030201 02020101 300D0609 2A864886 F70D0101 0B050030 + 32310E30 0C060355 040A1305 43697363 6F312030 1E060355 04031317 43697363 + 6F204C69 63656E73 696E6720 526F6F74 20434130 1E170D31 33303533 30313934 + 3834375A 170D3338 30353330 31393438 34375A30 32310E30 0C060355 040A1305 + 43697363 6F312030 1E060355 04031317 43697363 6F204C69 63656E73 696E6720 + 526F6F74 20434130 82012230 0D06092A 864886F7 0D010101 05000382 010F0030 + 82010A02 82010100 A6BCBD96 131E05F7 145EA72C 2CD686E6 17222EA1 F1EFF64D + CBB4C798 212AA147 C655D8D7 9471380D 8711441E 1AAF071A 9CAE6388 8A38E520 + 1C394D78 462EF239 C659F715 B98C0A59 5BBB5CBD 0CFEBEA3 700A8BF7 D8F256EE + 4AA4E80D DB6FD1C9 60B1FD18 FFC69C96 6FA68957 A2617DE7 104FDC5F EA2956AC + 7390A3EB 2B5436AD C847A2C5 DAB553EB 69A9A535 58E9F3E3 C0BD23CF 58BD7188 + 68E69491 20F320E7 948E71D7 AE3BCC84 F10684C7 4BC8E00F 539BA42B 42C68BB7 + C7479096 B4CB2D62 EA2F505D C7B062A4 6811D95B E8250FC4 5D5D5FB8 8F27D191 + C55F0D76 61F9A4CD 3D992327 A8BB03BD 4E6D7069 7CBADF8B DF5F4368 95135E44 + DFC7C6CF 04DD7FD1 02030100 01A34230 40300E06 03551D0F 0101FF04 04030201 + 06300F06 03551D13 0101FF04 05300301 01FF301D 0603551D 0E041604 1449DC85 + 4B3D31E5 1B3E6A17 606AF333 3D3B4C73 E8300D06 092A8648 86F70D01 010B0500 + 03820101 00507F24 D3932A66 86025D9F E838AE5C 6D4DF6B0 49631C78 240DA905 + 604EDCDE FF4FED2B 77FC460E CD636FDB DD44681E 3A5673AB 9093D3B1 6C9E3D8B + D98987BF E40CBD9E 1AECA0C2 2189BB5C 8FA85686 CD98B646 5575B146 8DFC66A8 + 467A3DF4 4D565700 6ADF0F0D CF835015 3C04FF7C 21E878AC 11BA9CD2 55A9232C + 7CA7B7E6 C1AF74F6 152E99B7 B1FCF9BB E973DE7F 5BDDEB86 C71E3B49 1765308B + 5FB0DA06 B92AFE7F 494E8A9E 07B85737 F3A58BE1 1A48A229 C37C1E69 39F08678 + 80DDCD16 D6BACECA EEBC7CF9 8428787B 35202CDC 60E4616A B623CDBD 230E3AFB + 418616A9 4093E049 4D10AB75 27E86F73 932E35B5 8862FDAE 0275156F 719BB2F0 + D697DF7F 28 + quit + ! + license udi pid CSR1000V sn 9N2F3VJUAMK + diagnostic bootup level minimal + ! + spanning-tree extend system-id + memory free low-watermark processor 80526 + ! + username cisco privilege 15 secret 9 $9$X8t5V6eWdPoRd.$wOxXAiJ8i7jeYcH70M82cMnxDgwX.31ymh9Y18oj3eg + ! + redundancy + ! + ! + interface Loopback0 + description to + no ip address + shutdown + ! + interface GigabitEthernet1 + description to port1.sandbox-backend + vrf forwarding Mgmt-intf + ip address 10.10.20.181 255.255.255.0 + negotiation auto + no mop enabled + no mop sysid + no shutdown + ! + interface GigabitEthernet2 + description to GigabitEthernet0/0.edge-firewall01 + ip address 172.31.252.1 255.255.255.0 + negotiation auto + no mop enabled + no mop sysid + no shutdown + ! + interface GigabitEthernet3 + description to enp0s2.internet-host01 + ip address 172.31.0.1 255.255.255.0 + negotiation auto + no mop enabled + no mop sysid + no shutdown + ! + interface GigabitEthernet4 + description to + no ip address + shutdown + negotiation auto + no mop enabled + no mop sysid + ! + ip forward-protocol nd + no ip http server + ip http secure-server + ip route 172.16.0.0 255.255.0.0 172.31.252.2 + ip route vrf Mgmt-intf 0.0.0.0 0.0.0.0 10.10.20.254 + ! + ip ssh server algorithm authentication password + ! + control-plane + ! + ! + line con 0 + exec-timeout 0 0 + password cisco + stopbits 1 + line vty 0 4 + exec-timeout 720 0 + password cisco + login local + transport input telnet ssh + ! + ! + end + image_definition: csr1000v-161101b + ram: 4096 + cpus: 2 + tags: [] + interfaces: + - id: i0 + label: Loopback0 + type: loopback + - id: i1 + slot: 0 + label: GigabitEthernet1 + type: physical + - id: i2 + slot: 1 + label: GigabitEthernet2 + type: physical + - id: i3 + slot: 2 + label: GigabitEthernet3 + type: physical + - id: i4 + slot: 3 + label: GigabitEthernet4 + type: physical + - id: n1 + label: internet-host01 + node_definition: ubuntu + x: -850 + y: -200 + configuration: |- + #cloud-config + bootcmd: + - ln -s -t /etc/rc.d /etc/rc.local + hostname: internet-host01 + manage_etc_hosts: true + runcmd: + - systemctl start rc-local + - sed -i '/^\s*PasswordAuthentication\s\+no/d' /etc/ssh/sshd_config + - echo "PasswordAuthentication yes" >> /etc/ssh/sshd_config + - echo "UseDNS no" >> /etc/ssh/sshd_config + - service ssh restart + - service sshd restart + users: + - default + - gecos: User configured by VIRL Configuration Engine 0.23.12 + lock-passwd: false + name: cisco + plain-text-passwd: cisco + shell: /bin/bash + ssh-authorized-keys: + - VIRL-USER-SSH-PUBLIC-KEY + sudo: ALL=(ALL) ALL + write_files: + - path: /etc/rc.local + owner: root:root + permissions: '0755' + content: |- + #!/bin/sh + ifconfig enp0s9 up 10.10.20.182 netmask 255.255.255.0 + route add -net 0.0.0.0/0 gw 10.10.20.254 dev enp0s9 + ifconfig enp0s2 up 172.31.0.11 netmask 255.255.255.0 + route add -net 172.16.0.0/16 gw 172.31.0.1 dev enp0s2 + route add -net 172.31.0.0/16 gw 172.31.0.1 dev enp0s2 + exit 0 + image_definition: ubuntu-18-04 + tags: [] + interfaces: + - id: i0 + slot: 0 + label: enp0s2 + type: physical + - id: i1 + slot: 1 + label: enp0s3 + type: physical + - id: i2 + slot: 2 + label: enp0s4 + type: physical + - id: i3 + slot: 3 + label: enp0s5 + type: physical + - id: i4 + slot: 4 + label: enp0s6 + type: physical + - id: i5 + slot: 5 + label: enp0s7 + type: physical + - id: i6 + slot: 6 + label: enp0s8 + type: physical + - id: i7 + slot: 7 + label: enp0s9 + type: physical + - id: n2 + label: edge-firewall01 + node_definition: asav + x: -650 + y: -200 + configuration: |- + terminal width 511 + hostname edge-firewall01 + username cisco password cisco privilege 15 + enable password cisco + passwd cisco + ! + license smart + feature tier standard + throughput level 1G + names + no mac-address auto + + ! + interface GigabitEthernet0/0 + description to GigabitEthernet2.internet-rtr01 + duplex full + nameif outside + security-level 0 + ip address 172.31.252.2 255.255.255.0 + ! + interface GigabitEthernet0/1 + description to GigabitEthernet0/1.edge-sw01 + duplex full + nameif inside + security-level 100 + ip address 172.16.253.4 255.255.255.248 + ! + interface Management0/0 + description to port2.sandbox-backend + duplex full + management-only + nameif mgmt + security-level 100 + ip address 10.10.20.171 255.255.255.0 + ! + ftp mode passive + dns domain-lookup mgmt + dns server-group DefaultDNS + name-server 10.17.248.11 + name-server 10.17.248.12 + same-security-traffic permit inter-interface + object network INSIDE-DEV + subnet 172.16.102.0 255.255.255.0 + object network INSIDE-IOT + subnet 172.16.105.0 255.255.255.0 + object network INSIDE-PROD + subnet 172.16.101.0 255.255.255.0 + object network INSIDE-SECURITY + subnet 172.16.104.0 255.255.255.0 + object network INSIDE-TEST + subnet 172.16.103.0 255.255.255.0 + object network OUTSIDE-PUBLIC-IP-NETWORK + subnet 172.31.252.0 255.255.255.0 + object-group network INSIDE-NETWORKS + network-object object INSIDE-DEV + network-object object INSIDE-IOT + network-object object INSIDE-PROD + network-object object INSIDE-SECURITY + network-object object INSIDE-TEST + access-list global_access remark Allow Ping + access-list global_access extended permit icmp any4 any4 log default + access-list inside_access_in extended permit ip object-group INSIDE-NETWORKS any log default + pager lines 23 + logging enable + logging asdm informational + mtu mgmt 1500 + mtu outside 1500 + mtu inside 1500 + no failover + icmp unreachable rate-limit 1 burst-size 1 + no asdm history enable + arp timeout 14400 + no arp permit-nonconnected + arp rate-limit 8192 + access-group inside_access_in in interface inside + access-group global_access global + router ospf 1 + network 172.16.253.0 255.255.255.248 area 0 + redistribute static + ! + route mgmt 0.0.0.0 0.0.0.0 10.10.20.254 1 + route outside 172.31.0.0 255.255.0.0 172.31.252.1 1 + timeout xlate 3:00:00 + timeout pat-xlate 0:00:30 + timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 sctp 0:02:00 icmp 0:00:02 + timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00 + timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00 + timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute + timeout tcp-proxy-reassembly 0:01:00 + timeout floating-conn 0:00:00 + timeout conn-holddown 0:00:15 + timeout igp stale-route 0:01:10 + user-identity default-domain LOCAL + aaa authentication ssh console LOCAL + aaa authentication login-history + http server enable + http 0.0.0.0 0.0.0.0 mgmt + no snmp-server location + no snmp-server contact + crypto ipsec security-association pmtu-aging infinite + crypto ca trustpoint _SmartCallHome_ServerCA + no validation-usage + crl configure + crypto ca trustpool policy + auto-import + crypto ca certificate chain _SmartCallHome_ServerCA + certificate ca 0509 + 308205b7 3082039f a0030201 02020205 09300d06 092a8648 86f70d01 01050500 + 3045310b 30090603 55040613 02424d31 19301706 0355040a 13105175 6f566164 + 6973204c 696d6974 6564311b 30190603 55040313 1251756f 56616469 7320526f + 6f742043 41203230 1e170d30 36313132 34313832 3730305a 170d3331 31313234 + 31383233 33335a30 45310b30 09060355 04061302 424d3119 30170603 55040a13 + 1051756f 56616469 73204c69 6d697465 64311b30 19060355 04031312 51756f56 + 61646973 20526f6f 74204341 20323082 0222300d 06092a86 4886f70d 01010105 + 00038202 0f003082 020a0282 0201009a 18ca4b94 0d002daf 03298af0 0f81c8ae + 4c19851d 089fab29 4485f32f 81ad321e 9046bfa3 86261a1e fe7e1c18 3a5c9c60 + 172a3a74 8333307d 615411cb edabe0e6 d2a27ef5 6b6f18b7 0a0b2dfd e93eef0a + c6b310e9 dcc24617 f85dfda4 daff9e49 5a9ce633 e62496f7 3fba5b2b 1c7a35c2 + d667feab 66508b6d 28602bef d760c3c7 93bc8d36 91f37ff8 db1113c4 9c7776c1 + aeb7026a 817aa945 83e205e6 b956c194 378f4871 6322ec17 6507958a 4bdf8fc6 + 5a0ae5b0 e35f5e6b 11ab0cf9 85eb44e9 f80473f2 e9fe5c98 8cf573af 6bb47ecd + d45c022b 4c39e1b2 95952d42 87d7d5b3 9043b76c 13f1dedd f6c4f889 3fd175f5 + 92c391d5 8a88d090 ecdc6dde 89c26571 968b0d03 fd9cbf5b 16ac92db eafe797c + adebaff7 16cbdbcd 252be51f fb9a9fe2 51cc3a53 0c48e60e bdc9b476 0652e611 + 13857263 0304e004 362b2019 02e874a7 1fb6c956 66f07525 dc67c10e 616088b3 + 3ed1a8fc a3da1db0 d1b12354 df44766d ed41d8c1 b222b653 1cdf351d dca1772a + 31e42df5 e5e5dbc8 e0ffe580 d70b63a0 ff33a10f ba2c1515 ea97b3d2 a2b5bef2 + 8c961e1a 8f1d6ca4 6137b986 7333d797 969e237d 82a44c81 e2a1d1ba 675f9507 + a32711ee 16107bbc 454a4cb2 04d2abef d5fd0c51 ce506a08 31f991da 0c8f645c + 03c33a8b 203f6e8d 673d3ad6 fe7d5b88 c95efbcc 61dc8b33 77d34432 35096204 + 921610d8 9e2747fb 3b21e3f8 eb1d5b02 03010001 a381b030 81ad300f 0603551d + 130101ff 04053003 0101ff30 0b060355 1d0f0404 03020106 301d0603 551d0e04 + 1604141a 8462bc48 4c332504 d4eed0f6 03c41946 d1946b30 6e060355 1d230467 + 30658014 1a8462bc 484c3325 04d4eed0 f603c419 46d1946b a149a447 3045310b + 30090603 55040613 02424d31 19301706 0355040a 13105175 6f566164 6973204c + 696d6974 6564311b 30190603 55040313 1251756f 56616469 7320526f 6f742043 + 41203282 02050930 0d06092a 864886f7 0d010105 05000382 0201003e 0a164d9f + 065ba8ae 715d2f05 2f67e613 4583c436 f6f3c026 0c0db547 645df8b4 72c946a5 + 03182755 89787d76 ea963480 1720dce7 83f88dfc 07b8da5f 4d2e67b2 84fdd944 + fc775081 e67cb4c9 0d0b7253 f8760707 4147960c fbe08226 93558cfe 221f6065 + 7c5fe726 b3f73290 9850d437 7155f692 2178f795 79faf82d 26876656 3077a637 + 78335210 58ae3f61 8ef26ab1 ef187e4a 5963ca8d a256d5a7 2fbc561f cf39c1e2 + fb0aa815 2c7d4d7a 63c66c97 443cd26f c34a170a f890d257 a21951a5 2d9741da + 074fa950 da908d94 46e13ef0 94fd1000 38f53be8 40e1b46e 561a20cc 6f588ded + 2e458fd6 e9933fe7 b12cdf3a d6228cdc 84bb226f d0f8e4c6 39e90488 3cc3baeb + 557a6d80 9924f56c 01fbf897 b0945beb fdd26ff1 77680d35 6423acb8 55a103d1 + 4d4219dc f8755956 a3f9a849 79f8af0e b911a07c b76aed34 d0b62662 381a870c + f8e8fd2e d3907f07 912a1dd6 7e5c8583 99b03808 3fe95ef9 3507e4c9 626e577f + a75095f7 bac89be6 8ea201c5 d666bf79 61f33c1c e1b9825c 5da0c3e9 d848bd19 + a2111419 6eb2861b 683e4837 1a88b75d 965e9cc7 ef276208 e291195c d2f121dd + ba174282 97718153 31a99ff6 7d62bf72 e1a3931d cc8a265a 0938d0ce d70d8016 + b478a53a 874c8d8a a5d54697 f22c10b9 bc5422c0 01506943 9ef4b2ef 6df8ecda + f1e3b1ef df918f54 2a0b25c1 2619c452 100565d5 8210eac2 31cd2e + quit + telnet 0.0.0.0 0.0.0.0 mgmt + telnet timeout 15 + ssh stricthostkeycheck + ssh 0.0.0.0 0.0.0.0 mgmt + ssh timeout 5 + console timeout 0 + console serial + management-access mgmt + threat-detection basic-threat + threat-detection statistics access-list + no threat-detection statistics tcp-intercept + dynamic-access-policy-record DfltAccessPolicy + username cisco password ***** pbkdf2 privilege 15 + ! + class-map inspection_default + match default-inspection-traffic + ! + ! + policy-map type inspect dns preset_dns_map + parameters + message-length maximum client auto + message-length maximum 512 + no tcp-inspection + policy-map global_policy + class inspection_default + inspect ip-options + inspect netbios + inspect rtsp + inspect sunrpc + inspect tftp + inspect xdmcp + inspect dns preset_dns_map + inspect ftp + inspect h323 h225 + inspect h323 ras + inspect rsh + inspect esmtp + inspect sqlnet + inspect sip + inspect skinny + policy-map type inspect dns migrated_dns_map_2 + parameters + message-length maximum client auto + message-length maximum 512 + no tcp-inspection + policy-map type inspect dns migrated_dns_map_1 + parameters + message-length maximum client auto + message-length maximum 512 + no tcp-inspection + ! + service-policy global_policy global + prompt hostname context + no call-home reporting anonymous + call-home + profile CiscoTAC-1 + no active + destination address http https://tools.cisco.com/its/service/oddce/services/DDCEService + destination address email callhome@cisco.com + profile License + destination address http https://tools.cisco.com/its/service/oddce/services/DDCEService + destination transport-method http + Cryptochecksum:b81cd20c8219fc5aa3c01e148bc739ce + : end + image_definition: asav-9-12-2 + tags: [] + interfaces: + - id: i0 + slot: 0 + label: Management0/0 + type: physical + - id: i1 + slot: 1 + label: GigabitEthernet0/0 + type: physical + - id: i2 + slot: 2 + label: GigabitEthernet0/1 + type: physical + - id: n3 + label: core-rtr01 + node_definition: iosxrv + x: -700 + y: 0 + configuration: |- + hostname core-rtr01 + logging console disable + service timestamps log datetime msec + service timestamps debug datetime msec + telnet vrf default ipv4 server max-servers 10 + telnet vrf Mgmt-intf ipv4 server max-servers 10 + domain name virl.info + domain lookup disable + vrf Mgmt-intf + address-family ipv4 unicast + ! + address-family ipv6 unicast + ! + ! + line template vty + timestamp + exec-timeout 720 0 + ! + line console + exec-timeout 0 0 + absolute-timeout 0 + session-timeout 0 + ! + line default + exec-timeout 0 0 + absolute-timeout 0 + session-timeout 0 + ! + vty-pool default 0 50 + control-plane + management-plane + inband + interface all + allow all + ! + ! + ! + ! + interface Loopback0 + description to + shutdown + ! + interface MgmtEth0/0/CPU0/0 + description to port4.sandbox-backend + vrf Mgmt-intf + ipv4 address 10.10.20.173 255.255.255.0 + no shutdown + ! + interface GigabitEthernet0/0/0/0 + description L3 Link to core-rtr02 + ipv4 address 172.16.252.37 255.255.255.252 + no shutdown + ! + interface GigabitEthernet0/0/0/1 + description L3 Link to edge-sw01 + ipv4 address 172.16.253.2 255.255.255.248 + no shutdown + ! + interface GigabitEthernet0/0/0/2 + description L3 Link to dist-rtr01 + ipv4 address 172.16.252.22 255.255.255.252 + no shutdown + ! + interface GigabitEthernet0/0/0/3 + description L3 Link to dist-rtr02 + ipv4 address 172.16.252.30 255.255.255.252 + no shutdown + ! + router static + address-family ipv4 unicast + 0.0.0.0/0 172.16.253.4 + ! + vrf Mgmt-intf + address-family ipv4 unicast + 0.0.0.0/0 10.10.20.254 + ! + ! + ! + router ospf 1 + area 0 + interface GigabitEthernet0/0/0/0 + ! + interface GigabitEthernet0/0/0/1 + ! + interface GigabitEthernet0/0/0/2 + ! + interface GigabitEthernet0/0/0/3 + ! + ! + ! + ssh server v2 + end + image_definition: iosxrv-6-3-1 + tags: [] + interfaces: + - id: i0 + label: Loopback0 + type: loopback + - id: i1 + slot: 0 + label: MgmtEth0/0/CPU0/0 + type: physical + - id: i2 + slot: 1 + label: GigabitEthernet0/0/0/0 + type: physical + - id: i3 + slot: 2 + label: GigabitEthernet0/0/0/1 + type: physical + - id: i4 + slot: 3 + label: GigabitEthernet0/0/0/2 + type: physical + - id: i5 + slot: 4 + label: GigabitEthernet0/0/0/3 + type: physical + - id: n4 + label: core-rtr02 + node_definition: iosxrv + x: -600 + y: 0 + configuration: |- + hostname core-rtr02 + logging console disable + service timestamps log datetime msec + service timestamps debug datetime msec + telnet vrf default ipv4 server max-servers 10 + telnet vrf Mgmt-intf ipv4 server max-servers 10 + domain name virl.info + domain lookup disable + vrf Mgmt-intf + address-family ipv4 unicast + ! + address-family ipv6 unicast + ! + ! + line template vty + timestamp + exec-timeout 720 0 + ! + line console + exec-timeout 0 0 + absolute-timeout 0 + session-timeout 0 + ! + line default + exec-timeout 0 0 + absolute-timeout 0 + session-timeout 0 + ! + vty-pool default 0 50 + control-plane + management-plane + inband + interface all + allow all + ! + ! + ! + ! + interface Loopback0 + description to + shutdown + ! + interface MgmtEth0/0/CPU0/0 + description to port5.sandbox-backend + vrf Mgmt-intf + ipv4 address 10.10.20.174 255.255.255.0 + no shutdown + ! + interface GigabitEthernet0/0/0/0 + description L3 Link to core-rtr01 + ipv4 address 172.16.252.38 255.255.255.252 + no shutdown + ! + interface GigabitEthernet0/0/0/1 + description L3 Link to edge-sw01 + ipv4 address 172.16.253.3 255.255.255.248 + no shutdown + ! + interface GigabitEthernet0/0/0/2 + description L3 Link to dist-rtr01 + ipv4 address 172.16.252.26 255.255.255.252 + no shutdown + ! + interface GigabitEthernet0/0/0/3 + description L3 Link to dist-rtr02 + ipv4 address 172.16.252.34 255.255.255.252 + no shutdown + ! + router static + address-family ipv4 unicast + 0.0.0.0/0 172.16.253.4 + ! + vrf Mgmt-intf + address-family ipv4 unicast + 0.0.0.0/0 10.10.20.254 + ! + ! + ! + router ospf 1 + area 0 + interface GigabitEthernet0/0/0/0 + ! + interface GigabitEthernet0/0/0/1 + ! + interface GigabitEthernet0/0/0/2 + ! + interface GigabitEthernet0/0/0/3 + ! + ! + ! + ssh server v2 + end + image_definition: iosxrv-6-3-1 + tags: [] + interfaces: + - id: i0 + label: Loopback0 + type: loopback + - id: i1 + slot: 0 + label: MgmtEth0/0/CPU0/0 + type: physical + - id: i2 + slot: 1 + label: GigabitEthernet0/0/0/0 + type: physical + - id: i3 + slot: 2 + label: GigabitEthernet0/0/0/1 + type: physical + - id: i4 + slot: 3 + label: GigabitEthernet0/0/0/2 + type: physical + - id: i5 + slot: 4 + label: GigabitEthernet0/0/0/3 + type: physical + - id: n5 + label: dist-rtr01 + node_definition: csr1000v + x: -700 + y: 100 + configuration: |- + service timestamps debug datetime msec + service timestamps log datetime msec + ! Call-home is enabled by Smart-Licensing. + service call-home + platform qfp utilization monitor load 80 + no platform punt-keepalive disable-kernel-core + platform console serial + ! + hostname dist-rtr01 + ! + boot-start-marker + boot-end-marker + ! + ! + vrf definition Mgmt-intf + ! + address-family ipv4 + exit-address-family + ! + address-family ipv6 + exit-address-family + ! + no logging console + enable password cisco + ! + no aaa new-model + call-home + ! If contact email address in call-home is configured as sch-smart-licensing@cisco.com + ! the email address configured in Cisco Smart License Portal will be used as contact email address to send SCH notifications. + contact-email-addr sch-smart-licensing@cisco.com + profile "CiscoTAC-1" + active + destination transport-method http + no destination transport-method email + ! + no ip domain lookup + ip domain name virl.info + ! + login on-success log + ! + subscriber templating + ! + ! + multilink bundle-name authenticated + ! + crypto pki trustpoint SLA-TrustPoint + enrollment pkcs12 + revocation-check crl + ! + ! + crypto pki certificate chain SLA-TrustPoint + certificate ca 01 + 30820321 30820209 A0030201 02020101 300D0609 2A864886 F70D0101 0B050030 + 32310E30 0C060355 040A1305 43697363 6F312030 1E060355 04031317 43697363 + 6F204C69 63656E73 696E6720 526F6F74 20434130 1E170D31 33303533 30313934 + 3834375A 170D3338 30353330 31393438 34375A30 32310E30 0C060355 040A1305 + 43697363 6F312030 1E060355 04031317 43697363 6F204C69 63656E73 696E6720 + 526F6F74 20434130 82012230 0D06092A 864886F7 0D010101 05000382 010F0030 + 82010A02 82010100 A6BCBD96 131E05F7 145EA72C 2CD686E6 17222EA1 F1EFF64D + CBB4C798 212AA147 C655D8D7 9471380D 8711441E 1AAF071A 9CAE6388 8A38E520 + 1C394D78 462EF239 C659F715 B98C0A59 5BBB5CBD 0CFEBEA3 700A8BF7 D8F256EE + 4AA4E80D DB6FD1C9 60B1FD18 FFC69C96 6FA68957 A2617DE7 104FDC5F EA2956AC + 7390A3EB 2B5436AD C847A2C5 DAB553EB 69A9A535 58E9F3E3 C0BD23CF 58BD7188 + 68E69491 20F320E7 948E71D7 AE3BCC84 F10684C7 4BC8E00F 539BA42B 42C68BB7 + C7479096 B4CB2D62 EA2F505D C7B062A4 6811D95B E8250FC4 5D5D5FB8 8F27D191 + C55F0D76 61F9A4CD 3D992327 A8BB03BD 4E6D7069 7CBADF8B DF5F4368 95135E44 + DFC7C6CF 04DD7FD1 02030100 01A34230 40300E06 03551D0F 0101FF04 04030201 + 06300F06 03551D13 0101FF04 05300301 01FF301D 0603551D 0E041604 1449DC85 + 4B3D31E5 1B3E6A17 606AF333 3D3B4C73 E8300D06 092A8648 86F70D01 010B0500 + 03820101 00507F24 D3932A66 86025D9F E838AE5C 6D4DF6B0 49631C78 240DA905 + 604EDCDE FF4FED2B 77FC460E CD636FDB DD44681E 3A5673AB 9093D3B1 6C9E3D8B + D98987BF E40CBD9E 1AECA0C2 2189BB5C 8FA85686 CD98B646 5575B146 8DFC66A8 + 467A3DF4 4D565700 6ADF0F0D CF835015 3C04FF7C 21E878AC 11BA9CD2 55A9232C + 7CA7B7E6 C1AF74F6 152E99B7 B1FCF9BB E973DE7F 5BDDEB86 C71E3B49 1765308B + 5FB0DA06 B92AFE7F 494E8A9E 07B85737 F3A58BE1 1A48A229 C37C1E69 39F08678 + 80DDCD16 D6BACECA EEBC7CF9 8428787B 35202CDC 60E4616A B623CDBD 230E3AFB + 418616A9 4093E049 4D10AB75 27E86F73 932E35B5 8862FDAE 0275156F 719BB2F0 + D697DF7F 28 + quit + ! + license udi pid CSR1000V sn 9QRVOWWZSOE + diagnostic bootup level minimal + ! + spanning-tree extend system-id + memory free low-watermark processor 80526 + ! + restconf + ! + username cisco privilege 15 secret 9 $9$iVecEqVTUJzHUk$EO2BfGoo4I8.wW.QanPw2rSxwy9NJt6kc3xFNEFLYSA + ! + redundancy + ! + ! + interface Loopback0 + description to + no ip address + shutdown + ! + interface GigabitEthernet1 + description to port6.sandbox-backend + vrf forwarding Mgmt-intf + ip address 10.10.20.175 255.255.255.0 + negotiation auto + no mop enabled + no mop sysid + no shutdown + ! + interface GigabitEthernet2 + description L3 Link to core-rtr01 + ip address 172.16.252.21 255.255.255.252 + negotiation auto + no mop enabled + no mop sysid + no shutdown + ! + interface GigabitEthernet3 + description L3 Link to core-rtr02 + ip address 172.16.252.25 255.255.255.252 + negotiation auto + no mop enabled + no mop sysid + no shutdown + ! + interface GigabitEthernet4 + description L3 Link to dist-sw01 + ip address 172.16.252.2 255.255.255.252 + negotiation auto + no mop enabled + no mop sysid + no shutdown + ! + interface GigabitEthernet5 + description L3 Link to dist-sw02 + ip address 172.16.252.10 255.255.255.252 + negotiation auto + no mop enabled + no mop sysid + no shutdown + ! + interface GigabitEthernet6 + description L3 Link to dist-rtr02 + ip address 172.16.252.17 255.255.255.252 + negotiation auto + no mop enabled + no mop sysid + no shutdown + ! + router ospf 1 + no log-adjacency-changes + network 172.16.252.0 0.0.3.255 area 0 + ! + ip forward-protocol nd + no ip http server + ip http secure-server + ip route vrf Mgmt-intf 0.0.0.0 0.0.0.0 10.10.20.254 + ! + ip ssh server algorithm authentication password + ! + control-plane + ! + ! + line con 0 + exec-timeout 0 0 + password cisco + stopbits 1 + line vty 0 4 + exec-timeout 720 0 + password cisco + login local + transport input telnet ssh + ! + ! + end + image_definition: csr1000v-161101b + tags: [] + interfaces: + - id: i0 + label: Loopback0 + type: loopback + - id: i1 + slot: 0 + label: GigabitEthernet1 + type: physical + - id: i2 + slot: 1 + label: GigabitEthernet2 + type: physical + - id: i3 + slot: 2 + label: GigabitEthernet3 + type: physical + - id: i4 + slot: 3 + label: GigabitEthernet4 + type: physical + - id: i5 + slot: 4 + label: GigabitEthernet5 + type: physical + - id: i6 + slot: 5 + label: GigabitEthernet6 + type: physical + - id: n6 + label: dist-rtr02 + node_definition: csr1000v + x: -600 + y: 100 + configuration: |- + service timestamps debug datetime msec + service timestamps log datetime msec + ! Call-home is enabled by Smart-Licensing. + service call-home + platform qfp utilization monitor load 80 + no platform punt-keepalive disable-kernel-core + platform console serial + ! + hostname dist-rtr02 + ! + boot-start-marker + boot-end-marker + ! + ! + vrf definition Mgmt-intf + ! + address-family ipv4 + exit-address-family + ! + address-family ipv6 + exit-address-family + ! + no logging console + enable password cisco + ! + no aaa new-model + call-home + ! If contact email address in call-home is configured as sch-smart-licensing@cisco.com + ! the email address configured in Cisco Smart License Portal will be used as contact email address to send SCH notifications. + contact-email-addr sch-smart-licensing@cisco.com + profile "CiscoTAC-1" + active + destination transport-method http + no destination transport-method email + ! + no ip domain lookup + ip domain name virl.info + ! + login on-success log + ! + subscriber templating + ! + ! + multilink bundle-name authenticated + ! + crypto pki trustpoint SLA-TrustPoint + enrollment pkcs12 + revocation-check crl + ! + ! + crypto pki certificate chain SLA-TrustPoint + certificate ca 01 + 30820321 30820209 A0030201 02020101 300D0609 2A864886 F70D0101 0B050030 + 32310E30 0C060355 040A1305 43697363 6F312030 1E060355 04031317 43697363 + 6F204C69 63656E73 696E6720 526F6F74 20434130 1E170D31 33303533 30313934 + 3834375A 170D3338 30353330 31393438 34375A30 32310E30 0C060355 040A1305 + 43697363 6F312030 1E060355 04031317 43697363 6F204C69 63656E73 696E6720 + 526F6F74 20434130 82012230 0D06092A 864886F7 0D010101 05000382 010F0030 + 82010A02 82010100 A6BCBD96 131E05F7 145EA72C 2CD686E6 17222EA1 F1EFF64D + CBB4C798 212AA147 C655D8D7 9471380D 8711441E 1AAF071A 9CAE6388 8A38E520 + 1C394D78 462EF239 C659F715 B98C0A59 5BBB5CBD 0CFEBEA3 700A8BF7 D8F256EE + 4AA4E80D DB6FD1C9 60B1FD18 FFC69C96 6FA68957 A2617DE7 104FDC5F EA2956AC + 7390A3EB 2B5436AD C847A2C5 DAB553EB 69A9A535 58E9F3E3 C0BD23CF 58BD7188 + 68E69491 20F320E7 948E71D7 AE3BCC84 F10684C7 4BC8E00F 539BA42B 42C68BB7 + C7479096 B4CB2D62 EA2F505D C7B062A4 6811D95B E8250FC4 5D5D5FB8 8F27D191 + C55F0D76 61F9A4CD 3D992327 A8BB03BD 4E6D7069 7CBADF8B DF5F4368 95135E44 + DFC7C6CF 04DD7FD1 02030100 01A34230 40300E06 03551D0F 0101FF04 04030201 + 06300F06 03551D13 0101FF04 05300301 01FF301D 0603551D 0E041604 1449DC85 + 4B3D31E5 1B3E6A17 606AF333 3D3B4C73 E8300D06 092A8648 86F70D01 010B0500 + 03820101 00507F24 D3932A66 86025D9F E838AE5C 6D4DF6B0 49631C78 240DA905 + 604EDCDE FF4FED2B 77FC460E CD636FDB DD44681E 3A5673AB 9093D3B1 6C9E3D8B + D98987BF E40CBD9E 1AECA0C2 2189BB5C 8FA85686 CD98B646 5575B146 8DFC66A8 + 467A3DF4 4D565700 6ADF0F0D CF835015 3C04FF7C 21E878AC 11BA9CD2 55A9232C + 7CA7B7E6 C1AF74F6 152E99B7 B1FCF9BB E973DE7F 5BDDEB86 C71E3B49 1765308B + 5FB0DA06 B92AFE7F 494E8A9E 07B85737 F3A58BE1 1A48A229 C37C1E69 39F08678 + 80DDCD16 D6BACECA EEBC7CF9 8428787B 35202CDC 60E4616A B623CDBD 230E3AFB + 418616A9 4093E049 4D10AB75 27E86F73 932E35B5 8862FDAE 0275156F 719BB2F0 + D697DF7F 28 + quit + ! + license udi pid CSR1000V sn 9BYY4VJUS2J + diagnostic bootup level minimal + ! + spanning-tree extend system-id + memory free low-watermark processor 80526 + ! + username cisco privilege 15 secret 9 $9$cONmK/B00qLzO.$iaGnQNzSbJ3ypgnmS02qYpg3FORertbgOgB2CyOHl9g + ! + redundancy + ! + ! + interface Loopback0 + description to + no ip address + shutdown + ! + interface GigabitEthernet1 + description to port7.sandbox-backend + vrf forwarding Mgmt-intf + ip address 10.10.20.176 255.255.255.0 + negotiation auto + no mop enabled + no mop sysid + no shutdown + ! + interface GigabitEthernet2 + description L3 Link to core-rtr01 + ip address 172.16.252.29 255.255.255.252 + negotiation auto + no mop enabled + no mop sysid + no shutdown + ! + interface GigabitEthernet3 + description L3 Link to core-rtr02 + ip address 172.16.252.33 255.255.255.252 + negotiation auto + no mop enabled + no mop sysid + no shutdown + ! + interface GigabitEthernet4 + description L3 Link to dist-sw01 + ip address 172.16.252.6 255.255.255.252 + negotiation auto + no mop enabled + no mop sysid + no shutdown + ! + interface GigabitEthernet5 + description L3 Link to dist-sw02 + ip address 172.16.252.14 255.255.255.252 + negotiation auto + no mop enabled + no mop sysid + no shutdown + ! + interface GigabitEthernet6 + description L3 Link to dist-rtr01 + ip address 172.16.252.18 255.255.255.252 + negotiation auto + no mop enabled + no mop sysid + no shutdown + ! + router ospf 1 + no log-adjacency-changes + network 172.16.252.0 0.0.3.255 area 0 + ! + ip forward-protocol nd + no ip http server + ip http secure-server + ip route vrf Mgmt-intf 0.0.0.0 0.0.0.0 10.10.20.254 + ! + ip ssh server algorithm authentication password + ! + control-plane + ! + ! + line con 0 + exec-timeout 0 0 + password cisco + stopbits 1 + line vty 0 4 + exec-timeout 720 0 + password cisco + login local + transport input telnet ssh + ! + ! + end + image_definition: csr1000v-161101b + tags: [] + interfaces: + - id: i0 + label: Loopback0 + type: loopback + - id: i1 + slot: 0 + label: GigabitEthernet1 + type: physical + - id: i2 + slot: 1 + label: GigabitEthernet2 + type: physical + - id: i3 + slot: 2 + label: GigabitEthernet3 + type: physical + - id: i4 + slot: 3 + label: GigabitEthernet4 + type: physical + - id: i5 + slot: 4 + label: GigabitEthernet5 + type: physical + - id: i6 + slot: 5 + label: GigabitEthernet6 + type: physical + - id: n7 + label: dist-sw01 + node_definition: nxosv9000 + x: -700 + y: 200 + configuration: |- + hostname dist-sw01 + vdc dist-sw01 id 1 + limit-resource vlan minimum 16 maximum 4094 + limit-resource vrf minimum 2 maximum 4096 + limit-resource port-channel minimum 0 maximum 511 + limit-resource u4route-mem minimum 96 maximum 96 + limit-resource u6route-mem minimum 24 maximum 24 + limit-resource m4route-mem minimum 58 maximum 58 + limit-resource m6route-mem minimum 8 maximum 8 + + feature telnet + cfs eth distribute + feature ospf + feature interface-vlan + feature hsrp + feature lacp + feature vpc + + no password strength-check + username admin password 5 $1$KuOSBsvW$Cy0TSD..gEBGBPjzpDgf51 role network-admin + username adminbackup password 5 ! role network-operator + username adminbackup passphrase lifetime 99999 warntime 14 gracetime 3 + username cisco password 5 $1$Nk7ZkwH0$fyiRmMMfIheqE3BqvcL0C1 role network-operator + username cisco role network-admin + username cisco passphrase lifetime 99999 warntime 14 gracetime 3 + username lab password 5 $1$buoy/oqy$.EXQz8rCn72ii8qtdldj00 role network-admin + username lab passphrase lifetime 99999 warntime 14 gracetime 3 + ip domain-lookup + snmp-server user lab network-admin auth md5 0x5ceb414591539ee35159fca86fdfa101 priv 0x5ceb414591539ee35159fca86fdfa101 localizedkey + snmp-server user admin network-admin auth md5 0x328945d53e05e8e7207f8c20b142f0b7 priv 0x328945d53e05e8e7207f8c20b142f0b7 localizedkey + snmp-server user cisco network-operator auth md5 0x55b3c64a53fb95518e75358ee75e82e9 priv 0x55b3c64a53fb95518e75358ee75e82e9 localizedkey + snmp-server user cisco network-admin + rmon event 1 log trap public description FATAL(1) owner PMON@FATAL + rmon event 2 log trap public description CRITICAL(2) owner PMON@CRITICAL + rmon event 3 log trap public description ERROR(3) owner PMON@ERROR + rmon event 4 log trap public description WARNING(4) owner PMON@WARNING + rmon event 5 log trap public description INFORMATION(5) owner PMON@INFO + + vlan 1,101-105 + vlan 101 + name prod + vlan 102 + name dev + vlan 103 + name test + vlan 104 + name security + vlan 105 + name iot + + vrf context management + ip route 0.0.0.0/0 10.10.20.254 + hardware forwarding unicast trace + vpc domain 101 + peer-switch + peer-keepalive destination 10.10.20.178 source 10.10.20.177 + peer-gateway + + + interface Vlan1 + no ip redirects + no ipv6 redirects + + interface Vlan101 + description prod svi + no shutdown + no ip redirects + ip address 172.16.101.2/24 + no ipv6 redirects + ip router ospf 1 area 0.0.0.0 + hsrp 10 + ip 172.16.101.1 + + interface Vlan102 + description dev svi + no shutdown + no ip redirects + ip address 172.16.102.2/24 + no ipv6 redirects + ip router ospf 1 area 0.0.0.0 + hsrp 10 + ip 172.16.102.1 + + interface Vlan103 + description test svi + no shutdown + no ip redirects + ip address 172.16.103.2/24 + no ipv6 redirects + ip router ospf 1 area 0.0.0.0 + hsrp 10 + ip 172.16.103.1 + + interface Vlan104 + description security svi + no shutdown + no ip redirects + ip address 172.16.104.2/24 + no ipv6 redirects + ip router ospf 1 area 0.0.0.0 + hsrp 10 + ip 172.16.104.1 + + interface Vlan105 + description iot svi + no shutdown + no ip redirects + ip address 172.16.105.2/24 + no ipv6 redirects + ip router ospf 1 area 0.0.0.0 + hsrp 10 + ip 172.16.105.1 + + interface port-channel1 + switchport mode trunk + spanning-tree port type network + vpc peer-link + + interface Ethernet1/1 + description VPC Peer Link + switchport mode trunk + channel-group 1 mode active + + interface Ethernet1/2 + description VPC Peer Link + switchport mode trunk + channel-group 1 mode active + + interface Ethernet1/3 + description L3 link to dist-rtr01 + no switchport + ip address 172.16.252.1/30 + no ip ospf passive-interface + ip router ospf 1 area 0.0.0.0 + no shutdown + + interface Ethernet1/4 + description L3 link to dist-rtr02 + no switchport + ip address 172.16.252.5/30 + no ip ospf passive-interface + ip router ospf 1 area 0.0.0.0 + no shutdown + + interface Ethernet1/5 + description to + shutdown + + interface Ethernet1/6 + description to + shutdown + + interface Ethernet1/7 + description to + shutdown + + interface Ethernet1/8 + description to + shutdown + + interface Ethernet1/9 + description to + shutdown + + interface Ethernet1/10 + description to + shutdown + + interface Ethernet1/11 + description Link to inside-host01 + switchport access vlan 101 + spanning-tree port type edge + + interface mgmt0 + description to port8.sandbox-backend + duplex full + vrf member management + ip address 10.10.20.177/24 + + interface loopback0 + description to + shutdown + line console + exec-timeout 0 + terminal width 511 + line vty + router ospf 1 + passive-interface default + + no logging console + boot nxos bootflash:///nxos.9.2.3.bin + image_definition: nxosv9000-9-2-3 + ram: 8192 + cpus: 4 + tags: [] + interfaces: + - id: i0 + label: Loopback0 + type: loopback + - id: i1 + slot: 0 + label: mgmt0 + type: physical + - id: i2 + slot: 1 + label: Ethernet1/1 + type: physical + - id: i3 + slot: 2 + label: Ethernet1/2 + type: physical + - id: i4 + slot: 3 + label: Ethernet1/3 + type: physical + - id: i5 + slot: 4 + label: Ethernet1/4 + type: physical + - id: i6 + slot: 5 + label: Ethernet1/5 + type: physical + - id: i7 + slot: 6 + label: Ethernet1/6 + type: physical + - id: i8 + slot: 7 + label: Ethernet1/7 + type: physical + - id: i9 + slot: 8 + label: Ethernet1/8 + type: physical + - id: i10 + slot: 9 + label: Ethernet1/9 + type: physical + - id: i11 + slot: 10 + label: Ethernet1/10 + type: physical + - id: i12 + slot: 11 + label: Ethernet1/11 + type: physical + - id: n8 + label: dist-sw02 + node_definition: nxosv9000 + x: -600 + y: 200 + configuration: |- + hostname dist-sw02 + vdc dist-sw02 id 1 + limit-resource vlan minimum 16 maximum 4094 + limit-resource vrf minimum 2 maximum 4096 + limit-resource port-channel minimum 0 maximum 511 + limit-resource u4route-mem minimum 96 maximum 96 + limit-resource u6route-mem minimum 24 maximum 24 + limit-resource m4route-mem minimum 58 maximum 58 + limit-resource m6route-mem minimum 8 maximum 8 + + feature telnet + cfs eth distribute + feature ospf + feature interface-vlan + feature hsrp + feature lacp + feature vpc + + no password strength-check + username admin password 5 $1$KuOSBsvW$Cy0TSD..gEBGBPjzpDgf51 role network-admin + username adminbackup password 5 ! role network-operator + username adminbackup passphrase lifetime 99999 warntime 14 gracetime 3 + username cisco password 5 $1$Nk7ZkwH0$fyiRmMMfIheqE3BqvcL0C1 role network-operator + username cisco role network-admin + username cisco passphrase lifetime 99999 warntime 14 gracetime 3 + username lab password 5 $1$buoy/oqy$.EXQz8rCn72ii8qtdldj00 role network-admin + username lab passphrase lifetime 99999 warntime 14 gracetime 3 + ip domain-lookup + snmp-server user lab network-admin auth md5 0x5ceb414591539ee35159fca86fdfa101 priv 0x5ceb414591539ee35159fca86fdfa101 localizedkey + snmp-server user admin network-admin auth md5 0x328945d53e05e8e7207f8c20b142f0b7 priv 0x328945d53e05e8e7207f8c20b142f0b7 localizedkey + snmp-server user cisco network-operator auth md5 0x55b3c64a53fb95518e75358ee75e82e9 priv 0x55b3c64a53fb95518e75358ee75e82e9 localizedkey + snmp-server user cisco network-admin + rmon event 1 log trap public description FATAL(1) owner PMON@FATAL + rmon event 2 log trap public description CRITICAL(2) owner PMON@CRITICAL + rmon event 3 log trap public description ERROR(3) owner PMON@ERROR + rmon event 4 log trap public description WARNING(4) owner PMON@WARNING + rmon event 5 log trap public description INFORMATION(5) owner PMON@INFO + + vlan 1,101-105 + vlan 101 + name prod + vlan 102 + name dev + vlan 103 + name test + vlan 104 + name security + vlan 105 + name iot + + vrf context management + ip route 0.0.0.0/0 10.10.20.254 + hardware forwarding unicast trace + vpc domain 101 + peer-switch + peer-keepalive destination 10.10.20.177 source 10.10.20.178 + peer-gateway + + + interface Vlan1 + no ip redirects + no ipv6 redirects + + interface Vlan101 + description prod svi + no shutdown + no ip redirects + ip address 172.16.101.3/24 + no ipv6 redirects + ip router ospf 1 area 0.0.0.0 + hsrp 10 + ip 172.16.101.1 + + interface Vlan102 + description dev svi + no shutdown + no ip redirects + ip address 172.16.102.3/24 + no ipv6 redirects + ip router ospf 1 area 0.0.0.0 + hsrp 10 + ip 172.16.102.1 + + interface Vlan103 + description test svi + no shutdown + no ip redirects + ip address 172.16.103.3/24 + no ipv6 redirects + ip router ospf 1 area 0.0.0.0 + hsrp 10 + ip 172.16.103.1 + + interface Vlan104 + description security svi + no shutdown + no ip redirects + ip address 172.16.104.3/24 + no ipv6 redirects + ip router ospf 1 area 0.0.0.0 + hsrp 10 + ip 172.16.104.1 + + interface Vlan105 + description iot svi + no shutdown + no ip redirects + ip address 172.16.105.3/24 + no ipv6 redirects + ip router ospf 1 area 0.0.0.0 + hsrp 10 + ip 172.16.105.1 + + interface port-channel1 + switchport mode trunk + spanning-tree port type network + vpc peer-link + + interface Ethernet1/1 + description VPC Peer Link + switchport mode trunk + channel-group 1 mode active + + interface Ethernet1/2 + description VPC Peer Link + switchport mode trunk + channel-group 1 mode active + + interface Ethernet1/3 + description L3 link to dist-rtr01 + no switchport + ip address 172.16.252.9/30 + no ip ospf passive-interface + ip router ospf 1 area 0.0.0.0 + no shutdown + + interface Ethernet1/4 + description L3 link to dist-rtr02 + no switchport + ip address 172.16.252.13/30 + no ip ospf passive-interface + ip router ospf 1 area 0.0.0.0 + no shutdown + + interface Ethernet1/5 + description to + shutdown + + interface Ethernet1/6 + description to + shutdown + + interface Ethernet1/7 + description to + shutdown + + interface Ethernet1/8 + description to + shutdown + + interface Ethernet1/9 + description to + shutdown + + interface Ethernet1/10 + description to + shutdown + + interface Ethernet1/11 + description Link to inside-host02 + switchport access vlan 102 + spanning-tree port type edge + + interface mgmt0 + description to port9.sandbox-backend + duplex full + vrf member management + ip address 10.10.20.178/24 + + interface loopback0 + description to + shutdown + line console + exec-timeout 0 + terminal width 511 + line vty + router ospf 1 + passive-interface default + + no logging console + boot nxos bootflash:///nxos.9.2.3.bin + image_definition: nxosv9000-9-2-3 + ram: 8192 + cpus: 4 + tags: [] + interfaces: + - id: i0 + label: Loopback0 + type: loopback + - id: i1 + slot: 0 + label: mgmt0 + type: physical + - id: i2 + slot: 1 + label: Ethernet1/1 + type: physical + - id: i3 + slot: 2 + label: Ethernet1/2 + type: physical + - id: i4 + slot: 3 + label: Ethernet1/3 + type: physical + - id: i5 + slot: 4 + label: Ethernet1/4 + type: physical + - id: i6 + slot: 5 + label: Ethernet1/5 + type: physical + - id: i7 + slot: 6 + label: Ethernet1/6 + type: physical + - id: i8 + slot: 7 + label: Ethernet1/7 + type: physical + - id: i9 + slot: 8 + label: Ethernet1/8 + type: physical + - id: i10 + slot: 9 + label: Ethernet1/9 + type: physical + - id: i11 + slot: 10 + label: Ethernet1/10 + type: physical + - id: i12 + slot: 11 + label: Ethernet1/11 + type: physical + - id: n9 + label: inside-host01 + node_definition: ubuntu + x: -700 + y: 300 + configuration: |- + #cloud-config + bootcmd: + - ln -s -t /etc/rc.d /etc/rc.local + hostname: inside-host01 + manage_etc_hosts: true + runcmd: + - systemctl start rc-local + - sed -i '/^\s*PasswordAuthentication\s\+no/d' /etc/ssh/sshd_config + - echo "PasswordAuthentication yes" >> /etc/ssh/sshd_config + - echo "UseDNS no" >> /etc/ssh/sshd_config + - service ssh restart + - service sshd restart + users: + - default + - gecos: User configured by VIRL Configuration Engine 0.23.12 + lock-passwd: false + name: cisco + plain-text-passwd: cisco + shell: /bin/bash + ssh-authorized-keys: + - VIRL-USER-SSH-PUBLIC-KEY + sudo: ALL=(ALL) ALL + write_files: + - path: /etc/rc.local + owner: root:root + permissions: '0755' + content: |- + #!/bin/sh + ifconfig enp0s9 up 10.10.20.179 netmask 255.255.255.0 + route add -net 0.0.0.0/0 gw 10.10.20.254 dev enp0s9 + ifconfig enp0s2 up 172.16.101.11 netmask 255.255.255.0 + route add -net 172.16.0.0/16 gw 172.16.101.1 dev enp0s2 + route add -net 172.31.0.0/16 gw 172.16.101.1 dev enp0s2 + exit 0 + image_definition: ubuntu-18-04 + tags: [] + interfaces: + - id: i0 + slot: 0 + label: enp0s2 + type: physical + - id: i1 + slot: 1 + label: enp0s3 + type: physical + - id: i2 + slot: 2 + label: enp0s4 + type: physical + - id: i3 + slot: 3 + label: enp0s5 + type: physical + - id: i4 + slot: 4 + label: enp0s6 + type: physical + - id: i5 + slot: 5 + label: enp0s7 + type: physical + - id: i6 + slot: 6 + label: enp0s8 + type: physical + - id: i7 + slot: 7 + label: enp0s9 + type: physical + - id: n11 + label: edge-sw01 + node_definition: iosvl2 + x: -650 + y: -100 + configuration: |- + service timestamps debug datetime msec + service timestamps log datetime msec + no service password-encryption + service compress-config + ! + hostname edge-sw01 + ! + boot-start-marker + boot-end-marker + ! + ! + vrf definition Mgmt-intf + ! + address-family ipv4 + exit-address-family + ! + address-family ipv6 + exit-address-family + ! + no logging console + enable password cisco + ! + no aaa new-model + ! + vtp domain virl.lab + vtp mode transparent + ! + no ip domain-lookup + ip cef + no ipv6 cef + ! + spanning-tree mode pvst + spanning-tree extend system-id + ! + ! + vlan 2 + name ank_vlan2 + ! + vlan 999 + name edge-transit + no cdp run + ! + ! + interface Loopback0 + description to + no ip address + shutdown + ! + interface GigabitEthernet0/0 + description to port3.sandbox-backend + no switchport + vrf forwarding Mgmt-intf + ip address 10.10.20.172 255.255.255.0 + duplex full + no negotiation auto + ! + interface GigabitEthernet0/1 + description to GigabitEthernet0/1.edge-firewall01 + switchport access vlan 999 + switchport mode access + duplex full + no negotiation auto + spanning-tree portfast edge + ! + interface GigabitEthernet0/2 + description to GigabitEthernet0/0/0/1.core-rtr01 + switchport access vlan 999 + switchport mode access + duplex full + no negotiation auto + spanning-tree portfast edge + ! + interface GigabitEthernet0/3 + description to GigabitEthernet0/0/0/1.core-rtr02 + switchport access vlan 999 + switchport mode access + duplex full + no negotiation auto + spanning-tree portfast edge + ! + ip forward-protocol nd + ! + no ip http server + no ip http secure-server + ! + ip route vrf Mgmt-intf 0.0.0.0 0.0.0.0 10.10.20.254 + ip ssh server algorithm encryption aes128-ctr aes192-ctr aes256-ctr + ip ssh client algorithm encryption aes128-ctr aes192-ctr aes256-ctr + ! + ! + control-plane + ! + banner exec ^CC + ************************************************************************** + * IOSv is strictly limited to use for evaluation, demonstration and IOS * + * education. IOSv is provided as-is and is not supported by Cisco's * + * Technical Advisory Center. Any use or disclosure, in whole or in part, * + * of the IOSv Software or Documentation to any third party for any * + * purposes is expressly prohibited except as otherwise authorized by * + * Cisco in writing. * + **************************************************************************^C + banner incoming ^CC + ************************************************************************** + * IOSv is strictly limited to use for evaluation, demonstration and IOS * + * education. IOSv is provided as-is and is not supported by Cisco's * + * Technical Advisory Center. Any use or disclosure, in whole or in part, * + * of the IOSv Software or Documentation to any third party for any * + * purposes is expressly prohibited except as otherwise authorized by * + * Cisco in writing. * + **************************************************************************^C + banner login ^CC + ************************************************************************** + * IOSv is strictly limited to use for evaluation, demonstration and IOS * + * education. IOSv is provided as-is and is not supported by Cisco's * + * Technical Advisory Center. Any use or disclosure, in whole or in part, * + * of the IOSv Software or Documentation to any third party for any * + * purposes is expressly prohibited except as otherwise authorized by * + * Cisco in writing. * + **************************************************************************^C + ! + line con 0 + exec-timeout 0 0 + password cisco + line aux 0 + line vty 0 4 + exec-timeout 720 0 + password cisco + login + transport input telnet ssh + ! + ! + end + image_definition: iosvl2-2019 + tags: [] + interfaces: + - id: i0 + label: Loopback0 + type: loopback + - id: i1 + slot: 0 + label: GigabitEthernet0/0 + type: physical + - id: i2 + slot: 1 + label: GigabitEthernet0/1 + type: physical + - id: i3 + slot: 2 + label: GigabitEthernet0/2 + type: physical + - id: i4 + slot: 3 + label: GigabitEthernet0/3 + type: physical + - id: n12 + label: sandbox-backend + node_definition: unmanaged_switch + x: -1000 + y: 50 + configuration: '' + tags: [] + interfaces: + - id: i0 + slot: 0 + label: port0 + type: physical + - id: i1 + slot: 1 + label: port1 + type: physical + - id: i2 + slot: 2 + label: port2 + type: physical + - id: i3 + slot: 3 + label: port3 + type: physical + - id: i4 + slot: 4 + label: port4 + type: physical + - id: i5 + slot: 5 + label: port5 + type: physical + - id: i6 + slot: 6 + label: port6 + type: physical + - id: i7 + slot: 7 + label: port7 + type: physical + - id: i8 + slot: 8 + label: port8 + type: physical + - id: i9 + slot: 9 + label: port9 + type: physical + - id: i10 + slot: 10 + label: port10 + type: physical + - id: i11 + slot: 11 + label: port11 + type: physical + - id: i12 + slot: 12 + label: port12 + type: physical + - id: n13 + label: bridge-to-sandbox + node_definition: external_connector + x: -1000 + y: -50 + configuration: bridge0 + tags: [] + interfaces: + - id: i0 + slot: 0 + label: port + type: physical + - id: n10 + label: inside-host02 + node_definition: desktop + x: -600 + y: 300 + configuration: |- + hostname inside-host02 + # like this: + echo "127.0.0.1 inside-host02" >>/etc/hosts + echo "::1 inside-host02" >> /etc/hosts + ifconfig eth1 up 10.10.20.180 netmask 255.255.255.0 + route add -net 0.0.0.0/0 gw 10.10.20.254 dev eth1 + ifconfig eth0 up 172.16.102.11 netmask 255.255.255.0 + route add -net 172.16.0.0/16 gw 172.16.102.1 dev eth0 + route add -net 172.31.0.0/16 gw 172.16.102.1 dev eth0 + service lightdm restart + image_definition: desktop + tags: [] + interfaces: + - id: i0 + slot: 0 + label: eth0 + type: physical + - id: i1 + slot: 1 + label: eth1 + type: physical +links: + - id: l1 + i1: i1 + n1: n2 + i2: i2 + n2: n0 + - id: l2 + i1: i2 + n1: n2 + i2: i2 + n2: n11 + - id: l3 + i1: i2 + n1: n3 + i2: i2 + n2: n4 + - id: l5 + i1: i2 + n1: n7 + i2: i2 + n2: n8 + - id: l6 + i1: i3 + n1: n7 + i2: i3 + n2: n8 + - id: l7 + i1: i3 + n1: n11 + i2: i3 + n2: n3 + - id: l8 + i1: i4 + n1: n11 + i2: i3 + n2: n4 + - id: l9 + i1: i4 + n1: n3 + i2: i2 + n2: n5 + - id: l10 + i1: i5 + n1: n3 + i2: i2 + n2: n6 + - id: l11 + i1: i4 + n1: n4 + i2: i3 + n2: n5 + - id: l12 + i1: i5 + n1: n4 + i2: i3 + n2: n6 + - id: l13 + i1: i4 + n1: n5 + i2: i4 + n2: n7 + - id: l14 + i1: i5 + n1: n5 + i2: i4 + n2: n8 + - id: l15 + i1: i4 + n1: n6 + i2: i5 + n2: n7 + - id: l16 + i1: i5 + n1: n6 + i2: i5 + n2: n8 + - id: l17 + i1: i12 + n1: n7 + i2: i0 + n2: n9 + - id: l19 + i1: i0 + n1: n13 + i2: i0 + n2: n12 + - id: l0 + i1: i3 + n1: n0 + i2: i0 + n2: n1 + - id: l20 + i1: i1 + n1: n0 + i2: i1 + n2: n12 + - id: l21 + i1: i0 + n1: n2 + i2: i2 + n2: n12 + - id: l22 + i1: i1 + n1: n11 + i2: i3 + n2: n12 + - id: l23 + i1: i1 + n1: n3 + i2: i4 + n2: n12 + - id: l24 + i1: i1 + n1: n4 + i2: i5 + n2: n12 + - id: l4 + i1: i1 + n1: n5 + i2: i6 + n2: n12 + - id: l25 + i1: i1 + n1: n6 + i2: i7 + n2: n12 + - id: l26 + i1: i6 + n1: n5 + i2: i6 + n2: n6 + - id: l27 + i1: i1 + n1: n7 + i2: i8 + n2: n12 + - id: l28 + i1: i1 + n1: n8 + i2: i9 + n2: n12 + - id: l29 + i1: i7 + n1: n1 + i2: i10 + n2: n12 + - id: l30 + i1: i7 + n1: n9 + i2: i11 + n2: n12 + - id: l18 + i1: i0 + n1: n10 + i2: i12 + n2: n8 + - id: l31 + i1: i1 + n1: n10 + i2: i12 + n2: n12 diff --git a/lab-topologies/sandbox-multiplatform-network/sandbox-multiplatform-network.jpg b/lab-topologies/sandbox-multiplatform-network/sandbox-multiplatform-network.jpg new file mode 100644 index 0000000000000000000000000000000000000000..bd04a19bfb0f0b2983fdead3ff9427b84b25f824 GIT binary patch literal 76271 zcmbSz2Uru`wszNzy$jB)usiF60q9cnKD z$jK-u$SEnPsQ$VQSt#i^fRdGp?TW%}YIf5nG{U|dif@v?(u&-v?BFyT#fn~cdij=) zo{O7@mrqPwLh`DVlCp}b+6{GW9bG+r1H-!yADLTNT3OpTKXrNL>gMj@=N}Ll1P*=` z79J596&(|slKMU^{lmvk89BLm`2~eV#U)kMHMMp14UJ8mUEMvsef{4D#>OWmr>1|+ z%%adMt842Un_JtsgTtfW$0ztdr+>*sdY*q5i}d+-$^L^}tR%U}DJdx^Y5tOnj6CQs z!C5J(t|(Bm-8Q9p;>#|q_=c9_PV(2v4my$RW>`+Am!tGtqDm++++U*oO|t))U~m6V zlKrb-|0dTQK$`@tzX~~NqaY_Iy($V)p(KewDpb@|e=F4gC^Ua7w0{-4e=QfJi~Q{h zYBv?vZ%mNrG$VgzKUcVbP-Hy%crXbe4ymURD8eKMTn1J#TbnEIwpE;vSivzIUnBwIQOK1SpdFB25- z!PvOYpI`}8VuJfucZ>P_+RsL8-k{()3OUSVR?IWaO7WH`R3GMQK0)_94=M^B4xF{C zs|PVVk3G%!ooA7_b7nJ#kzyr(n{D;yzTx*(r()Z00>DoBS?6WPKBKrSRa8=R`TlQy zF{XgRyHz&ZT-&~3%4q{VzC0VeZtWwlPHeDC@fU#V!cKVNaXMxtjylPF{9rb)+F8WL zBLfnpmNIrATh)7ewc@VIwe7Ch1NpEePN*SP}NAdq2eMlkL@)syIh!^=BHnXv;S6jY) zdOr-Ui+kuOmmDnixr$$d*87S^s!*E$ULoKc&-apW@9vT5ZRvwPqJRLFffxl8ya1qX z%U=Lk9f8m#&^KTgY^Lzo02kG}6y+d~%iXcL92oh_ekXO1*<1c`y;J{Jy3V`Zkgm_J zB4Hk^-rvI-&uK;-(?QtH{nw61YWR~206iTH9}7Z_E&-66zPNoN2ipYz$I<9KuMB!v zgc#h%i!371Kvrm1lh{&B07LnGw5*AF#IxqK^$$;jUQ(Iu8MX`1c%0uZe*b(|iNjRa zfQrNP)_+xj7eD{+Lz3v(b{&uG(4x2iygdN>^}tzcjRd&$YN}E(+!^n2b2dH5Tj@%N zVxQ8u{i;e<54y>|bDo)B0GLA0Nb-z6z=DX(M@z(;j1e#?;3=-=AWX1#0a;feW zZqrj{p*aJm9NCMG^0(3-E%CoCuN}2|`l4Mh2k8bwg@K%4r=mpm3qXf4;sU^5k@307 zu~LCa`?%#iZn4w95}&^u@VU41`gwf;7O!D)x^F|^!=Ch*%pS1JY;@0Z)t}u0a}vCK z%iL48EP>efo34Z35~Y*DnH{sL8n<5P-B;^nh6VrU8|4ytt{+QW0CG%FAOgoM>BTgC z9G3I~zIz4gMI^970`aEh9&mvc`bCy;r7U52?zsy+6%x+0KV}8KzVue_gS-i zEGs_fA)k}3`1`UP%JjpPqN4n*Rq~G^l650DPn;Rcn zwni{*U{3=&ML&Mb7_jjf-rE>^Q!e(<7X^uCNKm{tXF`Q}_!*p@3brlfooMf;I)5eSJL0msVrXd(r;pQpjg!!_{mP`ubN=_|!*c zCpNy7;R|gsuVm}~ys`h7H3zi|5IRDbo+C9i&V2AmC}|sL4__U;a2pJ(>yrwf5Kp=+ zoA9ITam>h##gYa3yWx+wyx3TeRD1TBAR73MM8D9~Lm%$Y>HNRXWGy-mTciJ|GGptiH zB3|cdzAhq`wb5Ahz?Yg;lp8zz zV6FP9MkbsVD&h{~CUW3C(RIYm#u>xx9`(25A;~;czy+;Ry;x)KgoSDB-`w53QI5$Ox6v~ zYvabpZ&O0A{(8v_?V($~WUw>ui!t#bjUSOD_LYAdKSO_=yz1P20r(@vjUNYglE#7c zyTVwN*Dt$vO)tl@Cbsy6;UCcCPp|A_HgF6kc=NMh;*bMq(*NAZyncKI7aU?QJZ8Jo zcj&+ABxv3u)Qpki{ibD3l?0gH8vRQlEdE0wAk{!_#;VnYP+@!> zbnVJaf|%cl;V^h-oHJjxd*n9GlEBHm9QD?$gJ6jQ3T|~hYK=3gRdwKNeQg||1!-_T zyc3+FGG3=Nj|r>2&je|`08mk#7kRl{>6rJ-Extx!rX?d7y3y$m3V!{z~ z3m1E<<`!)5jt??;ou8zES9PQY^zYD7w=Nw|UjR~-@%0w~CkN8cF4)=`0WD{O4xE4t zuw5#eLk|ZG;;|+>k+!qv0`SE6%0Lx+>Gp;v{^onMt#$$9`C<{TP0o>Tnwqxvb!z!hvZ%_v$pm+Swnb z_NN97&jSFlB(EFQ3R|we037KY?Gq$^FA?un6py_$tmrO)>2p{fCXxIIlEI*YlPs}B zAq)koxBwiO1F?%ptn~%pRQOd8k^OZ40wDG%)JD7U{IcaCNefZ}E&xd;u@`{f(}pAu zWH#UL^n}3ikjOxT^5WX*hKl1sxm%~9@y5zML%k8@eH^A=1~r=Psmv)-4BHWd@-xoI znde_%E<<E63raHF(m?-d%rPT$5_L@VIG@mZXT)=qC# zGM>>!GhA0_2Ly;7bFMGV!7jDv`JyoDHw7n=Ya3>RKlDp%di9AqX|#KhaPBTy;Zxma zTz)rE=##-?d4n_ctJo2^S zW%>&4Jzqp$k5{mPwhL<0_Urob2GC@oGvNXN)8FXJ*T4Ltw^HY;=`H#%j{)j{t4Cz( zOV~1hk{ZbDu{=5be$!%oIZtATl3daR9oa0)-*w6oB}+1-XOc2cfCs~i$}!;M2UMP; zw}1lBc_;wq69=X5Suu&?TJpl_cb!`d_B82!+woQTxVB!$L%EKgEC?r?Xb_OzOo~9V zwTR%7P{T1ellCCtef{ZObZc#D{BGLq*>?8YpKJE7O34e8?J-a)Hmp?Y$+XW6wx^G4yiPWVw0xNUfFv{=@`- z6Fb-q<6a*ZpA`LBGgFb!`dQB?^9^}*-qlL$wr6U?DiubT0md*XSe1M?%N%HV3G)Z- zNP0pXN=$l0qn#nSrM^I}{&5peFZ5IEUEprN_4Mvc5)%|1yAw?E?s#*7D&(S z$2x&|pcn$su5SHaz;xVV*2$ChASn zUY~IFTS>yiVV##lPr+K-+di!L-hF8oR093=&{8`sMVcA(_Xv}RqPTsI!#G)`B{edn?s>K$){~C)Ny@8{;4wxBDA3ZIL zAN6=C&Oh<$lO(Vr;=?+X*Fc{e>AmF-9D-fru6?SNu%utiEX=i>YdcrgB(kqu=JL~> z>Zsq_9JlZ|3tGz0q?gQTdw=>RCsq>hS4H&g&y92~s^J_lD`(1h7z!Dk6#lz8n&5cs zWo4ra@rrf-*?a-W9oBj2lVAh-NNBESzJ>V3M+iS}B8uYKQ7o9lGbM-){!_{AoXuA+ z!Ce^Ddf7V3mIW2bRNsw#gYDe;*r{}M@+idS{58_uC-I$|3X-GkrctpzD$8lkVLT0T zy|81=ac1vQe=qN&rlP5ff8ZBcFYTf6Vly1|rX9G4XDd<8{3x{+y^W1m#0>3ens`U}pc$yo-`#3f-E z#HNxF)^_gGKM@iB{Xf#DO>3?T`M*<4*Asd9PVXhNrv?hXYkOu30b;3Bv0bQr424)^ z%-1=w@~lQ|UDj2D@h^%-(i(z)oIIyMs5RiXsB=zP2I2((NE9#L24WwAe%0BlSXtGvJgv7d!G)_ zAZY2MDwWd0Dj7 znJwf|gDyoB-}i_j_>ev%R~eKZ+-sDj?qzZ>)24b%x3yh0(Bhzv;d}7Q;?-`|{x3GX zl!?rCoQ%0!8gmQ4t_;oD#9SE_F0M;8DT5+154sqQ(n+`1(d89g2Hcd!Q4r~Eanfkj zFro^0{601vS?nHoObS5tB?VaJ)HG#KCK6{uu29XEJ^$)0%-DJ3*5d1|yr48ejFuCRCRez3H2nzgdzaq8q=J-4XahDvBDn`Yq`t50Lsfgt3c z2rWqhN9!XAhNvZ8@T;z#MOI|}q<@y#qI9$L+zqpkkhtLYnh&*QTv7~H@9+v3TA0zQ zDc3soA;MdXg1oR@$F_J?6o_N14^@D`&hK!qIN;V1s0Ee%9@E=T>un&jwXd7AB`RYG z{YveRBX179R*`YtLPRuKb|=j$?jJkh6>u!*#QX~IL&sFK)Z!x8*?#i9$En39+1#zE z>g|-dt@@y6lXacbPRiG1o}2fleZLGKewIY6Em@4USQbDe@N;MOEWG#%6K;YUes@+P z>h^Rk>l61p(#%q~VD|gtDe`5TA<9wvA60bDPLE2+Id36Y@H05qkB#d}vFb{7L>e|b9{Gn*;mH$KA3&7JZPm}=YeoNg1Mw!-1qcQfOe^vi|6>b_K z;8bGr3XB>Y)~${V_ZM&&I5EebbqN-`_-MYgv%cAV2W+t}=7jy^^hB5jP<5$GXuT3D zPB6vlckDA1#y}&KR2itc^RjM6Bt&t5G?)3Upz7 zr)S2#rkW33Q0K;gg3eeyGk_Q)v?KG}{1U#a9c$&G#Zc2ao?o3nFfNFBHuQTEb-mYD z^xj8$OEF_LFqcQg+&+(K;_Vsf;Kg3U=`;yu64N z{XP)M6~-`OANC-zCACQEZ51uywj~$Fx^LfK_~d-Jl0La&X|375Xj{XS@+s!^k2gpi z;tdZ6mGjIBs0t~>dlS9H1vWvY??+B&R1_9%XG9Q7zqr35mcpFNxA~sdBm9DB(-|Hd zC?&NC^XZuXxw}lzna~14C~&N&;z z@#mNJ3$`#f8>Q@*x4dHDQVIlh5YZi~Xfx?}QpPSY|S`-gl&ikBF8mYnVF zTWeI=Y;9-;{#5fUQ(iMuc?bGzk|5G0D19CWa&ru~i5Sk2BQR&P;wTVNEkQ+KMCY%@ z){vm=*}c#Y-;|PrtLA4MjAUST)P<#CA#N)QeMdG%5_V1~+@5z)&BA*_h8kB$YiW}+6cXrWeqhkM@_^dCC zl=r{9dn1rJn}G$}VQYU@fA|Vs?06aZd}PM;_&HWQ87IHun&@B7qJyLE%D2;O3!0nK zwXmp3Boj?7nAVeLtBP=Ox+OF{ZcacGbnuR)cxNKh(pXk zzPBg)`Bp{ycdo})W;&FxQu?knlHYB3^wD8y{NwbLWthf+*od(D&h|sZk2ip>Wh% zgX;#Z@P=GzMc_LcOd$`dtH<_oussQfg93T%qHLem(7K;Q?{P_$4DUiLS1O9p@?kK3 zr00HuBW-Qg-9B_MmL>dmE4@6%s5jV*xVX7v8F(zKU^vz*aL^N-CG+jxoofb4IW)gN z=)$CsEG;f8j#O?St}l3!(YOOQ22p7mmd$Uq3E~!!D;kk)u}cAob#k=~w9exdFP~ak z?K!&#iO2}`HH5q+P&9zpKu_UeHYbS?*U$oj`543q0iHF%8`K)OP9fNJ$K|daYQIde zZ5MxF#vho#8YKK$;Dnir;`kx@0$3Li$ zDB+S|{kf#FW7dG+h)>38uVlk>AWG+1VmKpslm(1~C#cSJfALi4`SE%Dq6Ql*t>{Wc&%eMkON=cttAHI_b|21 zA8sznWMEPp?DHx-&yq>;_5RtzXm*d!YQDGcg$t{G^@iGqD9QB(%ZQ5I8u#*XTbO+_ zP@~80y0%J3i$LJmXhD;5HRfP9_``1V89(F&DJCqr#Wg*9^Ehq!T+s{?9(+3I zZEMn$!BN+C3I02B%KFZ0t7US}gW17lO`rhMoh8ABrpreF{J~ikW_DsiF9{nxpI2{3KWKX%PS%id2v&Vt^z^8Z$9TZ3c5d9OX1Dh2 zM6-fs*@IW?YVYUyHI+;s<2pnCyZdb$7-ZN5z*Byv56#l&<$3Iim5u^;1rKwst=e`w;&9rXG z^2#v?uU8cm{uW&D;1CIR$<#rU%H$3y&gKsFAbwWoA?TuVtW{N+8rGV|P$Ezsj6;oaSG@FR@P9H>lQa| zCLnJBy)mWDJj2wl=!thRZJGq_Nh13K-Vs&UZLe*Iw=RJ|CY5+0x6wXq+piv(xlNr? z#m_pxeGxsJJ(%)@AMI}xC9h}Y=Q-Y3MT{YSjgum$HLFM((rlDrSwFGmN`*Zl?(sO} z8vmnd%_oJM{l}GU`OgA88~nHSrWlpG#l$|}Mh?7uQF34J_2~&39tnCP|JFvO9JfSL zgKt}u3&D=Y4N*GZ43ucS^O{>5K0Og;u=R8oYe+X7=wQpa&XfqY5O3A)LehYoM`DpQ zK(u3+7N1+-vE{L);w^cCvS4Olq%7`R%Iw}0fAlANW{RBDF2=WXgthZ#A{F7`v=)HC zgGFGBinr?d@)5l(wC?FCU@3cB-8w$6-@j{E)}@z>q#dZ)6z%9Jbne#Jip~!mNJRTP z@;huXovFKPY2dsf!(naBhFZe!@x^W-kn9-pPHPgA^Hn| zd1dzOv}xU#mzk~M0&U_`g&Zwshzf<=tzJFPKjrvbv|}uvL>yEW?B|G&$j6JHpx(c- zNL?-_=&mflbX&)iHvO9)7A{$D9$To!l!sPW$i6t_U2AypGwpVyPa)C`#7dkv-RQIT zBhszq;=3%yG_`SijtqFj-N{`!c_%*Oc)oxxe7yCLP@=6t+jL$xn?U8e`f#3JtINJT z;K}e}lSh;AT!ro@D2vaeQ?ghr#`?v%PJfx_I&N2?N#dGQP1{vYV^|s=-v(OlI1B zI1X(Yqxn!EJqhK*YK+qO^R&M45LEX#AYr$B*(!e8Ed4R7*Gei(>?N6qX9t{=58fSJ zSqf8!W9Ytsdpk6NIfhDn*}1PAI-ZNyONm7uNY_T%y1%blznTnOx0C3($qhz#&kpIOqqT$xue8!VgO`6IbuPUe0~(XgW8 zHIp*S^&kQphx0M#C@Dz)HK`YPn!25K>TLMhRF~uRzvpbk0xrh?=b;K|ki}nN3gdqX zQ^<=Z{3IicJf;!F-YBgyysS_&eog0=k%Ah4IS+pKAXIqPCwlgWmi)x^^C-8uqrpHP z_J*xsp`)GEtC+Ll{1;>)I-@>>hh@4eFs?g4%Xrnj;}5O={F`g4R;9a@S={ z3PyDSezS;h$W?@i*i>VIjl-a9S^E9MuFLUL@(v}+%Qz<<8VmL9qT&P3lAm-o$aW6pcd8+*DdxQaa<&2D$H5D4`DLZ4AP9gak4 zez3$^M7fsWJ7h_wZheAFauQQMNT->Z*`7ajvmNv<|Kn$s5j5ZN664W=4O-R_t@;76 z)Vrm02d%79H>TGyTK>grAinHN44wN+vZbHQ`}(6bS)LC|4%?{7d8%OgZrTdS|pq=uVgS!{iS1*Je^)AoanRe>pWNm@=z#tWL*N zU~A~?J!;L_%T&c7O~=FYi{|c;hhzh9#&BFNKJH$oE{-Zsbt;JB`8PYgs_vB=T_SJu zp1LO6_>)*Z&vy7!lF$Njq3n(|k*5P|ca42~`35;+UzO&*ExQ?AE+t9vIkRJtwK2-H zzG19vHOY$1XYxyY+?Pu_l*<)jYT?qL#vu^etBkJ=8(rgzI@*ff;Qm7*+oJOZovVoIW>2 zZdE;1paI{YO#D3#WW+yT_~n?TH8(Pryi%1qV0`>tI6NSt@?)1&#FZDc06{9RQQh{H z0G}ujO8|!aurp<k7ZWRXoBs$n|EKneB*7(z<3!_kigFeEr#DLvO<&?NDqVs-k$g z8}D0;54qQX-SvoWva5U7no{Lp;X{*b-@^g0)FQHB%bKYAB1Fe!`HfoG zWsaZm47KE-KCQEGEyRntK7)icR7!|uY)XD%cJ6YZ!@7oDIRk|q#mS0;#Q8((0&(q{ znJ+AOaD0gGJWi~yBt-$&&5wMd7Rj+2(eeaq6o%d8+hoAQ%(=M`x15H?8^h1iI5a;W z905z_HeZZ!^%EwF6t{|@ZT!w;kSdpw(*PWy{ID5b&C`1=L zdUQ@3$8c*rV6_USvJk*; z^^4aTomo{_@Y3kV-z{T}RFe*Kpu-&=Th`$FoWH^;!OgaKzasprz4e1x7z@9tmxe>w zaYWnr-f}}_i>32Ai#qkw4;y+Gvd!BASLa#MiR8ro3jkvqHAG>mjc?x2cZCdHZn0yB zW7?0V*--_IE@r zq?kb(&Q_~g8a#huWM#`_g)6HPoFXZ$R&;sH&3ORK?aWk6Z%iJID%ty9iL1ePg&Mm zyc_cM31?(fY^v^i`%)!&M0wK>@7FbLvnnXj_^m$GtTy3mBqm2&(-*m@^Dbe#e4Zj~ zu>`D2)Mb(;wk(rU(4O{U0N+D`CYEYA42H7JVlhcIntYmKJEu|?JvaaTDwD_%t9{D# zcMM#VDT*HHSy%)rGPxiDXoy|>;Q5S_UMO;yGKs5V%r+tRjW0vBCIk|1Xvb!_@Aie+ zVW*u)-#WTaxEY)~WBjC~|6poFcw<+Rf zY<@)Br$QUKepxSJgC{Y5pGAEm%t=9WGFznw)X$P~+!h7D*-PK5iR_)UUU*WU;1sVE zZ~sdQpg7#~aV1?e+xRc|k_diRZb6SC^zSWGaND}#CMPHUtpi1)*#QJyZhAJ$Ip46iM+eX$_*0rj4=HfAWFevh=t~sdR)U7 zqABuD-enz6`LcO=u{eEsvpxXYC}jq{dEly*s>=Z&xjz4^Y5|H?UeM@LmmO{`sk9Aw zBzLB_uC`f{oBm9Vo<{T?jmfpp3&6Np>xvQ? zV%eDGK~-%7jwSjLldYxi&4I9Fwl~pV9-jY74NGK5_d!=2kTR4Np1qk!6!T==CH`H% z<>X|zY_qSutY5Z*8aA;6wlxep=b8YFQ0)mak7>WN-F@)%%^SFEh@ZW(AC!s2`O&_6 z0YIpMj%=n4|4Ux#KXX-q7nA=p==4wj9@6NtQ66qCRWKq6kLPv%C)vdtlPKL@g*&?8 zTw@+E**=;blXt9cZ&a|odKAxQm((hvu&JkL;3$A!4oe?vxgojouG)i#W^>Rx&$&Kh zX)&?Y?B8&5DB#&WOM1rNQ9v?Iw$3^ES}wAjn%_D!F>(r{TH688f$t^TP4M{N)(}~g zb;j(#OsofAxGN)1Kz+T>pPlm);C3Iy21q_M&z7Id&KQy zM>T9^u@p%FIitLomu`<&IoF#pC=6;;%Is}4Yq0$YNilxuz%;JRWNZ2X%@U2iwqUQn zWI zHb~0R>lWQ|Cx6GO(bayH7mqIhbIKLzjR@*X5MW;N&zTMq^Jl8b=D%G{a544Y!$&#> zH-!w%b@%qxNRo4)|CNetR5)>gdF zdm$SJJ@C!G-4H+t8&@)UcuN2oS;HXDuxT;N3{Ov7cwwDry%6IXcys1gy7PRh?fZYQ zu!9Q_r5;*x6YJQd2ysua?A){5BK;|m#YKvr!}^Qf$rR@Y0AoL!i5AmR<7EWxkH=QD z_Il?EnJ?Ob;&NYx2W}55@MZPMJQCc|A3a*2xEG~Ain5aZVqX+D*C?88C?T3+NZQ0- za~qENlV(0q24h$LO3>0>b|=kz{^9%P{-3Zz@}N>1F8~oqXvZtGFqX}6Cr6{^Uzrg* zKP+|?7cw5u5UOvC;tCK&OAbBDK*oEIC*)IqWTW(q^D6>t8n@PO4BTPCxir#F&bjm5 z&-$|U!fp269e&TJti5qRCC?3iOQZyA{-jR$8+*>OyG;!b$AzqbdhBhNO?F9oHEOrz z`dS~_k;|BTp|*TtH0Ghnc=_u2k9sE+Yw;BO(OYF-a+|%Fq~9D*l5`PC(de6#6b%Vn zN4Ay&mC(MRiss+)aj;8!g-%A_&k-CNF{@}bS?2`(FOLBJ1@q9}YxZ;BJ^gU{X!bs- z_W|k~R926}&a%;2A6{scVtoj)e3s|Ie+S-OeCN`!!rQS$4O^dB(4`c$_rj9XYV^4P zmic2&&ZXV7l~yrO4O9T)f~(6c(Yem)d@iTT>f0RGa(bh4$;|Zt6hFyg50l7YJ;udL5dF-L`>@d(QYcsQBl`9Qz zJftw4s-IXi-ooNxfN!7?Gq; z?W!~FD7Yi9Y&4}{ZL{I?NnFu7NyGW}p#lDn<-|M2Y*y?DK_uPGFhqX#w{-8Jk9TxO zx}EbIf@IiQg1Xe3iPd*ZEX?2_BWy)7S6tpztK2~@=f>4Qjck4Azm(LESN}Ew|3CE1 zf3`dSuI;BKi&I8MD1{Y$XSW*>DN~uko&VWL4NnMF3>L+fFbI;Bhdz8Xeq^j3>S*!F z3se5?yG-JXk`hHjY~NSbH0}jF{X2Y+ETdHl z&kiVW1NQuVy-iE!&Ld>%Nb6@t>X+A8HKKFuM4f*=C3L6G{KK*0#3Bgn`NM^0YDO#4 zm08-|f|9tK=SQE{4TtN4nO9OwSi56yEK718uT2#fSZ!eHS+x_J7cBo|;6sRXWm^)v zae0QkjOFFvk8f{K3cwz$nj<3OijU6 zLQjtIn)v<7rhEG!)pYHm*x)1c5@wmr<}?Os`umPV9#NT?~0;uKYdHH z3LL%>7S}EB`ue2{SmpuTUcV1w>QAm+pew?wIB)i8w zfoCAnKRnYR&T9#dLqu?XeNgfbD4J;hkncic$~RSe>OLgBNTqUL_EKkq;D;yVdgu}K ztEE(+iY4rQlfcLxEP7w;bM+%zp%kr1+6Lv*jnU0CoyjuM zS}itw|NYc62!ws2hM=obnuD*t-|Rx6IM*i-@x!gJ_)(fF*|u@$oFgqEfJ98*#?xE? z9H8#%?~j=DbM6n9-mAR&g+;Hnw!X41 zabT3v_s&;Vj>l3(?SNNg4@urWXB67x(pDSSXu-6yg|Orc@}j}!O8Vp+(!*=MRHBhW zQ|d70Z-VEDnV4Iq#Aw zk&T-=xWUq|^>DZE0|7|fLk zBhK9BeMlm!7Ez2zB2=`vaK||yv>)1{o~C50uJShCyFpbJ|CXgd63C#b3{sysIZfU_ zE}e_i{vBgaV!8K8Qj|?;nxfz=@}CgfDs@uSe!hx2Bnw3$+$e#sUw)=7p6RQV0~p@n zw~c$>zTYM}12~bPY4zD8QesV_=6?LF36WME4$`J{>po4Vr_)+*IQ!GreSUwXD=_>5 z@YveG8Tsjz{XpS*tu`s)G(oa@PbP@FFhPKt0=m@^9a-pEZjJYQ(2D(CDs$}7yU4Rw z@GvdgQN_iX?=nxCX&CVHka9b zYEfG4!=cLV3ij2}E7HoJs4gaP3)!OWSFKYaD!G1_2wzeZ@Xj3j_(w1nN21mdiZl!y z6$gF){Hd5h=;ypv^K^^^GCi+62C=wTIycSUVOeKuBN4dYdJ5~G3A?lQl9%i_hy$1b z6pj;WoF~C*tJCdptZ~9!QWEOfcfwW1@3Ko#5L2`*LwnQ}7cYnHtry^aH`j!T6AQ{0 z9@CvY6K7%F*<#p@uo`Iu2e^s2WHkQ#-Jow!kd!v1fqHfSs??ipg9;jyYVUp|QV>GD z#HPjMVT9PC_KX8p2pb9;iq|tYFKZ;UwdY zQ9ipzP|y-S|JnvbMpF8It)3z~5Sr*9idMh>gTqB0QaeGi!ksyfX%eAi1RngSl~5M6 zYPUSouN|9_$SL!2Ie8KG(9B_}AEx|Qnut&EDgJejIY)*@-G zlLsk&crgLUP5`j&Tr@hCb*^B6fDXaY0TfBm*X69*cD6fgK_E*sJ zCJNSMshe};3yitfZZ};9+l?^Uye!nqd7s;4tkP;Wx9)DL%Q+GB@67x^xdp(B|7N8I z8Y<)&)FdC7XMg!k(USVij4OO;IIxs;UhldHtg4`%0Lrlj`)JqvR9e>I@)f7svHvHZ`gm;brFTnmhWvQ##EDNe0!tHyNHebZ}7Gs!Kx zT^DLsbW%cNiO;HdyxHVZmq2#`NN-C0GwwWLJ6E>^b)~7JdCYRJ!p8v@6#&^hIXQG*id3j*%+sKKVVp&=}EEBcE-)V2g>ipSOD-8XB z?ky#8eYtG{6L`13>5J{=ZplP)(Cn~V=8>ZJUZllpV`FFQIIYrRkM7^r-uGC6&YVS& zDuO@wahlU6U%}d)**s=#0^?p~L7^*@1`(~liYQa(GdBO_c}WjLw9z*oKAZ%0Kj@|C z{VxF7o`>0YDVE%AEV90CeRJo#C+*|q{Z?(|_UjULmcyxHd{9@DW5iMISWW&FGP%7C z{}h8hdC|mRSLZ?YsrtV&$^XvrCFIqT^g|Uv7CC{Meh%S93@$TiJHQyW7UfwAGo@Qi zT|*2yXBn!C#LA`(yjGe*p76d)n0vIIVM%c$-7`LfUT}wAcCQ#DyRA~Hc$uUAdH8GA z{^0%_NAU{VmLPe^T|6%?4h8Db*q`M-)=TW%Td|3yCFr9B?mTpNE#ZH3fNHF1Fn6hG zHE55nz7nfL0cQLHAM%+kCDNPXBs$<#h22Sl#NljaoD67Yc5I6UCn)Lv-5-I84&agX z9@7Zk2>DPQPg51UIa_1fStLZ5JVy4w@lxCo#LL@2)>;#Khzia%fyDMsx87~BL>qI; zFy*J6*Dz>Kjdu73F-`Wpt9ZL^kaLwf=*BMwdc!Xohi7gO_i^M;g6`Q(@SZfu8@H;{ zzt<8DJeDx(u@qc3gLU~p?vp6?P<-44;Pq+H1wee76DLokhb^1X;1TB753eCCXcqnv z)J^)XZilPtb{YN>2GtYgvwMp-KTM~O1P2~(yBx^sgjZZMx>S3Vzl7;J6L2F6V)tWO ztZ|@DBCsC!EZH65ezk17F5~%$y4S&eeWQWgYOJH&En3Q=KWQII-U&=U)(j)^hoFPb z`A@nX2{hx#KPoNA6&MD7W?+JK?Xe{BR!QXO>aJ<74D)$J>CSccspPHAch$;cIrH}p zm82L-qy&Bd)OeNW2sR`PBy4Jt;eS^^$nl}rvu^mM03e<%oMkheK2784JS>S3$eLRnYRG07afz0=Mjtm34&djWU}`Yc_klX^c15t7~)(` zUPH{W)7?SrT1n19jI)yORntY2?GaxiwfhFoKHa+uR=mElE=q(EXW`YByF($kXB()K z-A^Tp?iuC8>g6He519CgZXLWg)$rJvBKYm{$FeUe*xtE`sA%bk$J|G8BpQ+`2@Eq` zXo*DRa<&%VB*`hdwBx{yorEV5m?|8t^4}-iJem%CXuFMcZqESK%$4w(>O{_(eSUur z%HJ-?zkUPiRB08N%d_CNw-(^jTu~Qf8vr6@hdK#^vOlKe*(RL%%LV55%1N;LJvF@J zU5HuZ{6kVll>PWg-2RGc7wI2P;E1Cc7({fyJ{^Al!B4jJ;SQxuGg_H4iA!a)!?$8> zV>qriHv)r`I8V(Tn`@mGv_R$Cxu`i8GN1QBVC-@m*+@spH@|Y57J7ksh-gCyviu zfk(t=^U_wU526NteNB{k`(sy5=UcpgFz<)2J-V(guCkA614NR*KI7IivsigAt4Sm^+^LvVp62p-*n!+ zFElEhk&wQu%a{Mb6dZ=(A?@OP>B`I5Qa9-)BqViGSv*$39M&>()5>hJx1;{U)9`Di^v ziOA#3hSGkwH*ap!7`7ES(6*)C!NCKIv;yk%%B&_Jql2O;N5?+?FY|!~@#vPxVeMb~ zRhg$?G`Eog_mt0!ZeUSAS-;SC{|s3^9x`rm!WCEg6`4k$OJWkP_R3t>*66pif5TAG z@Wgm#fQgr0aw7ZRYG=^dzkxOX1aTxqEoZ6?=*_?C*)~NFliyrcd`FfZ;#jC2(x)Eg zxwDG6;ul7Om5G%a15+=#kj>4<2PkBke#QTU?LEdFddHJ&O?A0Kt~5(#EqxW1UgV=%@+u){@@bzDWRJ?=sZ#*T;(7o4=4<)SJq7;vk^8?iU!!C~ zv;1E6I-|&QlpoOt)f*amZ{K~Bv~8e70$flhg5JywQ8?N3>?%OfOUoiqjsPH*ccrpB ze@DK@XHT0Tsmf!pfy=#Esy8s-fXmEpo%r3o*FkKg1h0RWhz4cnJEyuMoN77sn@!6_ z7vru{g>HTWu>}0X`}AL~ltT!kAHrn1#zKv8#h2!FNO0{rNn#(nJ&1wMv*UwCeD(%R zj-7iVkbxyy(rs$X6dYQpCwlJ z^>g8zM6Fx?Lf!+aycP%%1U=sOKDPEls#aW>osq@oD941^wVVWm)UN+?H2^aDZxoE# z;TRS{yewM~1jaAt`U!ThBI$Fn9&gnEgV<#Tf)E=ob8S8D1$Mzec!Bf5ObRu&=`NpB zv*EhbGZ7Put8T=Q2}%LyhZ1PPETbIks@T^^2GwG8<7z?L5oS%@+m5K4?XanBqxR4Q9*GDTrqI{2*~0MT2+AtonMI zk4TLh%TmsD3#I7+Ge7r9=?#Gf+M1gCn6cQWncUR{Q(}EK!ET&DV z>*pVkj?TWYiEapY&qsCNNchUumTFc9Tn{40{8F@W;8;wi z-7hO^zh_)rHcaAs1Ef-hma{@erTh0Pujujg>>}r?PCW5VXk;u*_M)KGIoM8ns@V$@ ztZFb?vN9^Y5&962k=$DU{4{c*_fSvhl#NMGvPJIhw-Az%g(JhkANbG{C%j@AacG&D zD73Z2-}3gP2a^(W%*VRba_>dn;(A?ew3V~&uyqda6G57g#htw~G+1DZ?F<<~xBkBA zm`CApOEqbc9?3`w&{r70(w-Z7btY1kkB`uk960&lyc7I>~j(7ZQU_NqRA`i0;JO7qehF63fg>~K>_=Aak}zh~}4L!CZ+ z;EE(1FTqD(k?r!pxnuN@6!^zW52O;c4U{|do6cEsGX&{42RBAO$O=_|dNK&;BMl(* zM0$cSUi0}0A2mTf*Y70G*PhF`=@L-TI8 z7s{n@0VD^QjyMLzYC+z&@Zz(v16{HhJ}SSrE1g8oa|P=@US2&_e4UDX!sTD3iVbq+ zS5YRdmS8}({G!#~AQ~nb+MX_iFvbSeNinIGJg`zvUl$?~s-5V6#?fti&%9g9occl; zUx>9sYxnR_&v)>#0lXVVUuAqt_GxWv*z+jS_X@>t%o*cL`@P#tuf4s@^1Bcy(wKo# z$qP0D1rl}~4X)rj(5+!dBh>h+_Qv4u{QSi&pi4dU0@kRZbVDw;t0_t_o&vC;J<+;D=6Q!@oyaH%#ktq4k{)U>$I6VJ%()n( zcU)}Ejs5}6@Iw=pvDycyz)sk$i)f!<8ry_2A3o3`ol4uM($Fg zVJ~l8pfl(ZoxC@(BjL~Wr0;L|EM&`D-YvO4h}_p;cNCmlC2e3C2`<7IL=8)2B07?R zZc|!DdBL_Ez^a5r*b$k}<4?rsd|-T7WQ3X|O;?6RkGsRIgq|Ux*o!TpXEyVTpO68Y z1*DNp}yQrNk+fIE#PvQys&UWE;2R?kC?KICT02Ui9Pl=B1M&j5N@1 zRN_5;Fi8l>t}SibyT@GuA3cgoG?)d}W_VZfZw5#7GQBgHWjuTA$f^GxU{}>sZQ`zK z;hrE>4Go11&4V6+^IiS}(!(b0d~VgZ(#WF3A*zQlzS^2ThP zGqwliZuYl^>;HY?{2w*kcZKGe4)$q+cPTz0+^$M~>-F9qQjk`F`_u78;AJF!%%l40-6w{Ohk2(JVQIf$13f+rJ@rqr^b#@o_h8+$9 zg-5hAUP<_jvW0^ye%>8Ksc{j&%o1HJeXL58Q0wYipXg-IG0b~|+}v@}Y={X46k`<+ z;_N-%5t;fnVg*JSdNtozo$ItlF*}YDfTuO`E#S9=pRuSxfd*unkMLESaF6X=@DFIT z5c3B_paAZ}pW7EwfLxdMA_@p)Nx}n*BDr!a!5ui1-(jQ|^Xp zLke@X8S`P*-JaRy+|;rLxpK@ z*O=VJth2D>LB1TgJT8$;&dR(EaaG|!=+sVr-x(i6kF}ScU`KZ`dPH1RsJb=q`->L+ z?P>_Tb>%ap(gQdH&;NizIT_x8ug!A-3u^WwIP-RLZ0t$x^rIf~*y{R~`$FQ1ahU^U zs*2ExkAz_$xCUsjoDCv*xh}GqPuy^}8B6@*$1%60i`Sh|E6%@WHH1e}+{B+7yWi~% zvm1PY=2ff{1}bQY<*@p!WRI}3shhvHCk(P}WM_N|H$8n>42R|5mf37v%BjJeTd<~* zhc|j`uQiP-sW;wcD1_?NCW|eEsx_cGea(R^L1H`S6m}$Hmmr;i+GG`~v=SNLJN+6p z(8RmDt0#XfQeQ#|mcxCYiQ!u>A6FZoVbD&y+4#vjH2f0F&E7fD=VeA^+2DfzrnfGR z^@ffC7L3}WGV2~!_Z*qu^a?#$1>1uLBwD&^B-WxRg4=4G(o|9h%Gf9UF`xTq1E`D$ zxm!=R4#ywRtnm=&73>;rB!Y13WuseXtT$Y2k>_LO=Th!~$eH+-(pkfWXh7{z)f|jD zNVEKc2U1YhP-8&)!BOIhgTN^x1voK!hoFvjV`!fqa?92z@AcJ_Ogy~5yp*gZy!d?< zkZO`rb`aS|)uf$XRMR}J)mHsds@J=`lrU^De~~A2K7D-k5sBvi@neB%Da&(GdC}NX zp)x;zyD44!Cg>GGR}FMa^v%#yzqD>kj|hhteUreUhnvi9b`-SZt8W+L87W}S++k4b z6>c}dcFVlN0u2nDPbX>VuEzXar?;!q?D;@EZRN_LBne{0WS=C>BXvAe;%ua3bD!=aDkk5vTa;3ZxilB z?sw)QHYF{a=P|x#u#~50lbzz_wig}KS4A*hM{=Dz_)!WZ&`j)TVr{}|v*i6HxYCN> zGN5GGhi*_JkK-2oOHu!$-2y~iq8Q}_pAtU_;`~F7<}mW1QWDWU)?JYZkT~=eqpz9(@U)Int2KR2J4faomLVhj zF|_@=#D8h0{$&}3{8e^I9;N`T)7wtl{Qam%dO=T9DT%-WR}0mxri~$wniaqMt1kGt(~Fhk;rD}jCsG7 zt*2HzOgo0*G)13F6Hrr^>O7YA2nE-ppVxDu*TT| ztd%zQUTvfL_nI|gOp%3w(5Z6O{D>0&wI*E?%O_nLJ+%*H=*%QYkE+mo08X>Q7S;NE zo)2ZV3Tw(Dr~_2ExB1u$)E|&hR91tVtYJfi*;`Zd<_QI>-}8nKyWDf=dX}LlKQ2BR zqkT@h(KxP-*p&Zwjewx#6uhAAKcK3%Q^QVA*njIdVs|HEpTh9e| zpj9(*YOdIA$sun8kH}P;){fa@9vM2@fpa~J8)M5(V@nHG^NW!sZ#BfD9}SR2uSz^r z%SX?&LEppKi99ZRoG@NLJM%FqHLi0Fe45Ra8f2yKRngGHVezAZK$H53umxXEx5*PW zDUENE?>`46a%dFxh7b#2SA(A6jd3$=>QZ4AlwPIccc%?7Lv?F z$D>o~Sum{tA6J5BcVW1Jqui*%@d)Af->O5L_ZMVK`t__B{~ zIBx-=Og+#_(~?yGx83$5IU0&~GeY^g%gLA=uVbTuxVVh2pFwQjQJa?OQ{9t~Ih(8BAo zV42^Sx-*kOEA|!p`Z6Y-;CY<(Uc)&bUbGtp?SQip^s&=vr8|aJLk@Ocg;qUE6^kL$ zgDhX3JY;9Dvl}FH8+HZMyT>!FyYc{cS~;^4foS0javE)6BTn#D4K9=U9I&}U_=FyauG4nS!)$(zcq3PYCVb8s!pCDNjqCS5zgjdHcF`#HLGG*uLK{s&5 zctm$Vc#PoOf|WCv9}maW?~X6s+`sO0uxg>y;5M!hXXoSj%))NT>iS{+-WzPuNgqCC z)guy0r3BEA_{4S_C`OHQ>2n_5rwsSg;IT9&?hI z^@ejX*bIvI^Gd_Mn!zeEO25d7x`Mx-x5T!b-48py$)O4Q?Sn6wVP^ zn(^qDyDIHyldP7L^I9KIfP_H598_q3vg%Zp=Ft>9GRhbB7y6Z*8);t>o&<9Qc}~9a z2v2<-g>I#CNe!MZDbnKnP0)4p@)nXv)MgZ!=ra_`sQm*{42(R#=)gfwsxCeeDf}FD za4CQH1Sc@>IN^5YQB%>trd`}IbOVY&IsM>mVYawUb6qHY~rLjg`oyb6szd)Y#2()kqn`A%b|tG`}ERWI&@5 zUPnE&_R-~p+i;Js(b8;>4NGG^$v=MN!ReIZ%f=~=;}&N*Vpw-VNAujF3c6nKG*qsi zbaDp1QpSnb#z5Wy8wwAe#;9&u$;OhUq4IlmydHU{j6$WRz?ud7OLlI?-m;R+)8 zp--}V)zJDNO3ft8&lGj**jdMae&8*8n}2>1$J|xdL)Ac%A3s;@C*O>!<~aQmA|LY4 zSyFAm(eC93Dc9-!$|+8L*IDxZ9`_aYpox0oE>yiZAFMSQjEAA z9}PPv{gt|xhfl*WQ_kFL1jnRHP1P0c1~N1L zUu8~y@U8=t-iq&!@Y*`SHlXUJ{OgF>^;zb=Z0V(AIg9z?6sA?~-Ppn$%6hXj>kSip zh1&~%g!V-G3PRUI=+~;~W_&;8B#}?GY_BZaM$+0DO4lM_Gk?iT1@E$bt>b)vr{|+Q zW!?TS7X*;oy|LmL0~U5^q-ZF#_Jei?3=PVgZ}AFMHH?)#4`&youFwwVwsqy;)uvdJUr7Z^YNk3HN51ZjD2i*8)gS0jKndqj|ng{U^f9V`w8upE% zmB6W&a^Q)qdcN>w7BE-PGwdKt5pPyHix1WN@R3cKS*VxWM@!=23>2f)LBC=aY&81s z0ujD{6_o$td*2EIQxeB`xntTPJOtq!e5-z4%1HRKX?66LKnnYz;2}#b_%c@tCE5Fx z8LJhB2-qdOA(}=O6eKtHB1k=RtJi48U?L+9g<=t^xP0|~LBliim6y7rNj9-ptuOrz zjBlPtH?b0zdj&bWMmM-Gmi)?e%WmSm|A6EV&S`DnyVWF{$Lozyf<94fJ2h%uop+pz z>?C>RBFpO!C@47nyHGrZ0mv+kAVG1^-qTshfV6Hv8jchj-}(g+BeTP10AM=f^_UCU zj#j%dEBD;O{$ypx^U9%k`?Gs*a>2c>d1Fd}3=B>ujjYK{(z_TPJD!sako~FJ%fM9h zt3!bHFz9qGd35NE{;BMFc70*HOceo@QIBL$s}3!=zBT#(VLK)s9xsmOb!Cq)8&UBa z{n8aAH!HKg4i$j(TxCXAcZCTvGWNZDT1=7HT zNESOBVTcuu+^f4CB4slqVXZct^}&==)>jNlpiWRVJ#FEemmV8LpWaqlE@Sb^PXIC z5v!CE99K0DYVw;5`d0DYr|-<$0tXEv-14!r!|>dnZVxu{a&zSA>|SzOQZ*d-C*&aH>L}94$RZKoPA%`W=ea4+isyl^c5& zK$IrX7`C^*IUCME!J})`jSaDnbLWPUkjP6N#ac;nj_>cm{RSEKR~mV%e^V@cjhWM(H+@=I}f8E5{kFolCN@u~I#x+Y9`bl=x76#{TpN!8f&i5)LwyCiH)H-nxGV6zwpGK+OgK@a> zQ8YXH3KPq)9ac@);uK?eNketbW#zAGUuc_?74Lj+SU|`57X}o)KUawsD`5W@=NU-{ z;XXcgW%->g=@eKv==OITi1yfuYs}|mQRGyixvSesm))OhRoQwRC??+&0(_7pThAE-teiVRk*q1Z;C1cj3l zM^YkQzd>8E;-+gTU{;^e^{kC*^pwJ^EBY@V#}44(M`dSW&Vsbm9YRS;+RKu2%{r*eu+j7L$Q4<|}rU~uciDoVOf z=3Bb+Asd1Wx=T( z^;NBoQuf``nlFHc1kaz+&JdYO1Oh)=qZ)GuVJz6-n*A8GtGJN76@TNWg>7F=t*IyM z@0R8(eJ{aZra9kvS=$wCFgFqdsmzPQ$TI5T0#|Ym2-lE|Z1mRyg)X{?3&d5EYNLv! z_KVB#rF@E8SK|VZbIYqGBVCJ%kFg`Muh1EOtL;f8DUnLCYtxrMu|{JSdnxqva(Eq@ zKdrsYUpFOPAgE(x8Sr(QwK&l**}Y?R6&zXescB-)=>3RnZ6W(2@nf=RJV4&PBk z4pR9%b~#G6MiNejkG=idal*%+dQO-BCq?xnttQudq4D?VZ>Ej(J&Tiunz!5kIl4qF zgW-R3mPihPIlC+VfIRku_NU#W`b0~YK5wc=ux$CP1GZj8K#~CndPbk^`~f*+&_J)s zmcD4FfwP3VHGVg#s1qzm-J7NY0Arsod>KV8{8Q3uq$>?F#hFXBayiQ7^p!eZR~Z?6 zUlxFCVll1wG{5DJ7H;kw25_MqP`l5O8HOGw`#jw?o}IW3#eW0yTWsnbS~}^-?gw*X z^!r{!TudDb30C|XzIByk9FUq1q2YA%&dj1cC{$hVJGIDljFge-=IvjwO&^^ zaHn7UFgKF~gWf%{2VK6#*}{W;F^$T^IYw`=opltNJfRAo<0^jL3)>_fBEO!;%Vm&? z40KqQ#g_8Vz^=9P*M)V~Hkz*Vac~!>2st=>@S#@ZcFbGn+L`(n(CnW|k^g*6lED_I z{01F(Cm2Ihzh`Gxa|8K#{=A^Ms$%!sW$?$&uf9DnX}D+ytA5tp4XeF7kf094vFT@8 z#ko9*$8mN~CrK-D4AHL`s8JmQ|w{|gxTpOt)BG<+qy@Ec@T z68FIAym=X~y&v;pXAMNV9Ffulo-3;=E!}(Jmj3JPaX5Ro&Enf{2&0D}7WDEJ9}n6f zC|0BnJFi<_kE083ed?XJ(C2>1^7joxB_nvwK;*2O9kFZ>JZ1RWm%=4TD-`2ihJA*S zo$Ef=E60&d8-5j8eH^V@oFbu|Y;G?18@%&$lA9?GY)r_*Yq#;$orc3bE(G8x@ae-^ zd?;*O13hHbonR1{t^3NHedb}{byvSNK@k?}Z|}WogvFubl)HR5O6wUIb$&Zvq`mek zG+Y5evs3;vaoi%Sqz1L$p=6f4WZjD=iIL-bHG^VCp%$t=yg7THx^0@1)|6|ljcB~p z(!MED9sAHK%d+7YUkDrx8G8k#cY@cL7NPZ)qfd=p;Mmxqr_4F`N-AVed_LcsGxy%u zBNgw0UHUsHB}n+((}lC=O^`g!)d*V_*>cU`^*H|Za@*^G=$)}{at<3JJjMTTC)k^rO6Y|hiOF)IzwU2s zNvvt`-Gh@E{6(IVtzd-i;dMAe!i%vkNo$=(y85IiuPN7l-*6-Q=?#Sw?&1!@T3GRH zW_ZMEU~c8OlB%wU`?|+UG>gnE&+MBp!vQAH&zauV3PgKTiNOjm4xrQHy~;feD||}v zBEIog{~D`SmDOI6qsJj_QJW(-Re(ahJ7L=F`|L=8b~sqTKMWBKHUg3E8hZNo4F}?W z8;Jt1hQB0=EnMzLRNRx3ySX!R3lhtZ^@wa%Q5(6mjaVxqG`L8e$}w&xCOXEt1V{L2Ta*Yt!VuB&;Gta5-K zB}zHnY9MJFcwNA4lyDXJIO8oy%_~3v(#+$79kId+L2377Ql;$-YO21+SXjLy-7{QJ zimG06m$3L8{c*nhcOZFiAMKB(n%xNivTW_0k_;$MnRwiY_tyNH=KOUh)VdFfLGFBJ+VkVjaLZasf7s; zlR$Y9M$18>XRwcImQW2G9!t<2eBa7gW;7P&7nic4B`>}GZ^g#{GNMXy z2*#BNulq&SUF9?LA1(3yGG)A{F3=@+Uymtm#d3nOb8PPhd0>#N+eQ+oEw8pGrCOJy z))O9sZ$B-6(qNOq*mYC*Yoj;4le05VCItr zyz9=2o1!N4bF*`SzWgcU7gOYsvpOIvQ zH*SA~_j%sZ^l53^H|P4|>U*VkuS|HDl!h58snyLBZ%g7KZAIt_aM`z!lZ)r)6#KYv z8oT`-&Y!vv>^-8? z#mI8tz1!Ds`nbNgHX!Dqgq__19=p^t!_lLFou{|dZV$ppcE{kqb_2R^t^Y&h zBKJW4^|gi%e?>05JXnwLAo2CuFqaD5TZ2`KN=Z7myKOCKbS@xKv9FFudYpKHxUz`- z;i9V^J_R>Xr*#jW*FW9lsj7j`=@)HER{USn1WP4>1%Jhceq)z2ywKw$dwfax&=I0z zx5!Umt!zc#05qdLVa=+(66s0M%GoY_(SAMODJDc+BBP<9w(3o3=}+^lJITKMj~R>% zE;S#XGh=KkhRcfEa=YPc>1iN;%8R;&rF`rggQL`Ww8uO0_N5(p-C}G0{=S0#Q!9gS zLhpJ2X4H!{L=YYg=54m4e1~b6$)V)K$sz`0z~ShAD@3>T1O&6~`W@VraT~t$y`hJw z5v}|O)SC5On9=T0Fopg5WK7 z@bP8{ImzQE)Ib;z27;nofp!KfVt88j^v-23KC5{f9J9H3})5t{fhw3}+DX9rTa6m6Q!eJnR9FLm!!Y$yHLxiqU{DCp7O z5feBAKyZqPYpl7Ls?Ees9qUS!pyz%r@EDQ3HBfz-{G04a>G& zkO3~D(=>pk@DJ#5Rg2@-)&`GD?x~LIi9*j$%A%Sb0IAVFo(Ek!{sbFdv&zHUzVoQA zHo1GI6ID>>^rd#KV|ZVI;->pod0PaUZ|?Af;v!jgA1r8P;gsrL> zN>8oTxh2^-n>r)e!GT2kreVkHeNH4f5#U3rMPt>VD>RU}R<>q&FakSZFqz5AjZOZ> zy9Cq+XQ}Ht?ln#!9#ziMZJd64*6v@&f`&4a_^$Yg5&Tpp zCCJ|A%W0@m&+mekDoTm2eWC}RPqwNe(EnCf3K@r1Sd}z z|DNdL9*A^aPY5R;GS>Yn>sLXY3nTaeIu-d)|Yj>bWZT2Mz(CWq&?$t*&sZ` z5-2|bTSfB04>;Dq;7X8X4c`@!s&pMCX$2wI{MWiQTyOWs9zN4=aqS%cO(*0+{eEUS z8?7DcP8A#=UK73zuXapcW4NeHc(1W}h5DjN=A-k|t$`~g$|*NWY6u3)l?^k=oL?#= zCcLZ%s%l%KHaHRQmC7P+JYQ~0Ee@Efw%ZtE92%Moj+jeT-)|YauZ%>$Dy`GO7Zv!` z>+`*>=K7pd3zvb{>9TwZe?VG!Pg-bu_SQPDwxGaw%Z`T=M@0^m<129}mM!l4jM}4O zmzqN{LY@n*A8@a`0HzjLc)7kAxyC$`iQ}*0r5QKUZSSnXx{6P?`Zx@uz1xXLSX0Bbh**MgMTAaTR zwh;6R?OikHW_h9^3F^NCLX3>i1=-=F&S{IGv=A3a?M^F$n-^=uYA=7{TFGA9JWpwJ z0)=00)a$Gza{2pmP}hU&XRd}rv^V6we{a7m7|-JH1Q3r>UBljC(LH5}gSXo%U?ULK z>}tjSEAAofs3S6^Q7v7qa+Vb`sSKg%><5BANLwwQi$U zos2k63R9b(d|S&urs3o*oKQ`yD!ShZ#WGcbJc)KvfhTxK0BQOLC|Dow^siJ+F^Bo; z`fhJ%Uq0cg#)%IOvg?hrgW^A8N@VxI^fNWD>&I$5qz0H4Y!vS&zr5G-dW+>tLG-;r zjP$nh?-*zbKL7pT)(V=t?z70ADA%FC+qb5@>Hafh622j3$oWZOan)yA)1=tnDXvx~ zzEeJxEsexZ-~ zJgrFywUIeX;zP(v%4--E_N1^F-lhq@h0o&QYHMLg-)=kbu($I8SG{hz7eC-`QW`Xx z!nZv~Hm)la$U<}>CV)Z2DL&wKcivIA+*v8D_qp|oW3_IwL`K@Z`h5PDunmqTMs@Q^ zL!?f|r@2+?6`q`x)p6_&<0q4W$5leVlbpRJb$fCN2XJ7>R!_Kjaet|4ZmQ_W>lB6R zFR!X#zKw^bFvrnXhMK`+XH@@yH%b28<10C$rib%JYrj1JR20p2m|#)eM$nBU|3EUP zCr7IGJ~tuve`l{QM-jY$jg9x?xp0u;)V`Wp(pJ6=?qQXEn}_tPD)G9v(?h*rldj#O zYlkgIhFZI=w~W*U|LQWAcgt36l$_If@bFBKuCr)EW%%~`b5Y@qhI$Lp&wW3e;|2|k zO&lia>xi6+CxJi?>S0GKUJ0oFS8LE7=h{J6#|d<+98zko85fnV^HVjXhBX6fnMNX{ zgMD0)w|I&c;pndr$B{EeHFcnXZ!#d>u=T+i|NZFvHa^M$94V$XLQOhzb5xI($!1|I zIqSOrPsZ-cj7$oH6kZ_;x*#SxP|*tX{W6IR!5K2E=8&nTqFJq?{3X<|MruVuSM}PV zf(D-in9>|!c{;-CS7{?QzuCeYD{~xs@5UVev%BQh?&(GilC=I@k!w-Zt%}r#G_oPk z$_PaB4c6Q|ykvX8a6&;RulTcxVt46{*hU3~?%wUdD>`K<#}JaO)^bGWcgk)!-Ms{Y zBF;VA8GQlO`G|5lvP$ctea-fof&cm2u~K_R1COSD4T(O^Qg*if^hk!*W?6I~oc@kf z<^37o(-%TbO~4K{OhHK+rpYb9@KKxeOVVEm^S_8ZQ}@E+El!rq*6IDssy6|Bs>M#= z;!bMNcvkZaku^M_AgG18vSoVq$W`ZlJ1m9S{}CUaHsZI@ZzM|%^4M$E$&h#7_AChA z*z&*$zGB2sb{}+5SYDAj@Xp<7IQehH3K6d@Ektjm(Y)*k!H;N~{13DWn=K>bl@O zt&F-#Nwl=BL;Y1NSYLC9HON$~Q-8dg(t{n*ZT;v@aQ0GeRfxa4m~i4Fm}zBCL$Cd; zf9T*ZAfRw_HT-(CFm*J@gcL+FN@DQOqPhIK2MZp0o4jW6{&X*Wo_`|bf+`xcoYlNc zWSt4g{R4`3_?e2xpOxNdrrdN}jW-0yK4QL4Hv(N^x}nZ7&gF21tk&lu>KN330yJ6H zyb_2%@>)Oo_9aly2;P1R2blbccVR+$j{=>i4ZF1o)N7@8 zz~^vkV2W(_w3;>=(2;1I#KMS6-QcEDVV#KepJrU5?Rz3bWke@uTwx&vnZiJzl+KUi zMV^Lm1@&l5?GZd;iDFdb+!T>xX*D$2U!I?8P#7QEd7%%ogSSs(KaOy+p=zE5aB*4W zYXB}76SYiyeJ-y!Zaw=C=o*|(y)hk8u&7COwimi5jd(^0cB}iL(y)rOn=d;jzpl>3Vq$FzO|2?drW^=Cjj``hMHgAUW?VI2#ZR1(|1MNEAFNIo{>M4%|m4*$NBeBbl@ONb+7d!C_tSBz~Qk``0X9y zU9d#Dtf7Oe8yhjs>McYCg0`4lfcILNO&zFv2P=UtG%Mc0*te-0|=edbyd`m?_Biw`U~fS`0pBJ7l$eDY z76k-~NhK)LK;BM^@Jt@|s6}vEN;W&3%WBbfv`uZ)(yBUdUM6q#S%b4z(uJ5`$B&lF z_=s#IJ^l|!yJAM^*A9Q}q%@{6B4ESS|7DSk)54tcVhe z?YceRV!*30A=LCnc=A~y%5@&DEbf-wu*8$#D@huSGl&jY?wN;1LfQ5S8aP)2EIb;} zLY5I3muYHiR)f7Cv{X!#v<#;LsHDrlgYU%gXd+XY;K9dzy}sssqvMOPJ7_*?D>@}B z=hq29!B}VmdBKRN6gLoylxuCIP%MAfGw|yOQ|SW@htnM&u*~5Ptg*zjz*6TG>C$ZV z90i*nBtlgA4hq-El75x%7<^(FF?f%pg1gSO2yE6ZU7ZYKyzx%vy7YC+dE4sg8fl&V zSlA>&DK&cjqqEwG6pc^&2inVY$YEq8vg&ylE`8u+7FQSJ)5@fiPLcAs61yIozjNb6 z#V37)*2?Clm7Z=^oJqR&Bb-hNm&C`ph$P=59^5tNi#KnzuBX|4C7!aN<~CJ$kYh%Rz~^v8?Wxg*{&PcAU9iG8R-0c?*qGa2y7sgnDW%k4gL+E(peJdeN`vPy4sed zB~DQ(npDRSWFqx&3PekNp;tUG#H=;xv3K3(?l{MO^@(pys?Jo-n;fIKF?q5~dtqH8 zg`Ci?mrF`G`dlYLY)_bSOI?AaKUetAy7!)^3W$B}bV^*yRUaX}CuTUaC?D}MVA?7* z_NnPq-tF;0tNWtISp{EZF3aXi3q!@CM>eljkMFX{BhlYlv&+Z}~-vyDzv#$)pKp=9Tt0C)ZCTMlp zu3B9Wc%yj9@=$F<A;xM8M5PnIN#+IbSylO39P`#t3zdmo>(^-2c_S;@#TQ%bicpgS|(0DtW_n2@9>n5t;uPssG&2WM3 ze4J_q7+Dle7m;sD#>arRw!;5gSJ95%Q>jza)V#!{Ae9%&Y!XI`iK=oj*7+~`#f{plfToHsf=B4FIO>!-15>KV?{oWq64 zTIf8ggJr1u;p)bNXx@kZzoRx%bAAwAT1bMlvENf7AkP_Mfbkg;uIZA%95tHGGq)6k zQcOv}{>8qV`_s<^z>*guG(!F%z*y2>Dj6HuT+N~SrcAP#k6le1xT*I>Auc?CPlUgI zy5$-{8`)tiHsyn0+J607#W9>8N1y4$Z&eW1HX*%aW#yOK9L+2t-4Q!aWq1LA;B;W_ zOVqAL zKKpVl=|#uq&KjC^Pni_uJ+%jcB+AsFA231U4^+e+#pyB!fgCH@O{AW*n}Aes-J1w+ zEyJ(sjvnMPan1gmEW1{bY`*`*#HTj=mj>C7WU7+tiHoANlON-)_WD-$@%gLLs#-HO z$S5M`gmjI;rJmrN0T1&15@!#uLu(uBTcYs(8*Y*v;X|-xKMf%J7$2A|8=*#;J?9h< zP^E&}I>F7~+6LpuX2Y`7Ib#GfzY#rBJGH(`P^)jI`XI-6}3j!A;yH+}W#oRpb_X0NoO zZr6|m*y--F5+ELKq2k*BLZb}cD0zfJXdreBsEt+G=<8oSba5294&U${mN?}i?_dwN z0v8xpbAwhQ zD>qubO^|M9p%GC1e5t7N0>F65MyHPq-V<-)lg_REQo4EBr`3FMRL*x#JJQ*wijU2k zZ{(N@ZRJ@k47m!WJIw!1Qt#}c8g~#NvD-MB{+s0`iv7S#g6wFt+cd5J^=i8M9ZI`8 zQTevwhI^19AT{l`o`F_En-0hmxjLb;@LUgqUr9wjs{AFxs1AW6TkygB=(;i06iYkn(Z`EmC$<2Uw zaNs|m=bpUV*&Qe`FNeJ0D68L<-Mwzb?xQZ_x9?WUXdi9S$kCr}Q-23InSM|y0c?A1wK zy`ZXevXUT?R7o*)XcAzc*aV9M_QDG#Z*>b#rq4t0lyr5_7p9tgMTvUcVh*3*O8nBj zNs23FJ;fk827rMFJFMfwDjn_^fB36LVilW3UYVR$zTUxtD>`*%- zX2|IG`#`8?x0Sf;EF=wtI4A z)f6cIC_PcNN*oaana?rw7r?b4v)Uj`}QNYK(Fk zjtSjGCMs}ac?c^fF_Xh}i5O9lT<8I|Qb+_qDGjl;rSo>R8lIiP!Vle~f$C(EG4(Hq zqdG}QfpdPR>IopyD*m*-&YQ^1bb9_6)jTdIQO4^`;@L4hQ*CSh3qpp`T{`U)T~FW< z;i7mkmHOU-kuO|g61rz6;{XCS91g z+LCSWF0}-x~%)`2(tzX!6JbVxGS65ZQRuy?4E2M#(MefXJQbmcg(Va zt46>~5&P1BtTgzsfe*MBa$P&SYwoKy;*5S4U`3uTD2tc z1LXQqW}s}zQ#C)Jv?V#SgosuJ-^FFgt*JKvj7v39`>NZ?VLEKr6g|@~{}hTN%yiuQ z0z(AONE3izwG%;?$gWFugR{r-3T!ZUBo9f`jG`*7c(!Sm)iz(6j6bG>ItO%;2Zj$O zYHeODvm4gPHw@ndtQ7r(VacSAFne1m81}r{w?uc8fURwfhFxi>kGcd5q!1joF8Ikd zA$y~jP5*)_Fw>o1H%YMI-~7<<^>6y5k407R zN3sca1$`I%_CC<38&rW{qI^fzNKiQgKS*g)b3+_#-S8c>^1tqbsbX+Bzq;GjKUjTX z6bW3PrbQ+aaj!_%Qc2LeZS5y`J@n!L>|k%yJW&PYs*ku%VljedyQ~tWrAZH+ZbOO3 zfQMhZpe7Z&0+hFhX+>v$AYW}ARPOn|#~%NCWRo(RpawYv7N({j@WL=pHn+nHs3hXa zT=~4~ZKcUi7H7!b@B3D30xH;hDZ^|u|BCZ5%1i)}mGRZkT^jLi?wcmjjnC_*@U~g=*kT>TW6tlJVuAPcVKDd zSe{w^O*j3-Oqy@oBe~lZQho9A>}WGxA!9o74f<8*G&Sru@F;PsehQ#*PK@s*YqDW0 z#%erWnT@oSDDx>>#4kXCzesFxFc;YDzvOn+>eb>nr@KFhhz6Qwqc*ls8K>I=+q#@zr3 z=+W4`+5I6fx8T|r!3n7S!EDAUj9Awp!4Qc}eQMKLuV%uoJ5I>n)gr)!pV3=$TMgcA zyFIdSWGrj(fB*xtv(`naB#&_p3MA3quEur(K-TR#VPmfxlyZBz~$b zK)>O%%$XIaxLW-gx>7_UBbF87+}0A=fJ1sRgdjbYAF(vwlk96eW00$#V;Lb$`?iwP z&NTf@cUhWphU z_8@_sKh3vi!*v$46nZ8#Yr>vQj;T;IIMCV32;4#D*^J%Ld-@`_L*?Cc$WlU)+R_h_`Hg#~6bprs0({$anIzrJa-0T#}~G9hC`kp~E?wE5sjbmM8x zo3d|Cjr?3KaVHwDWJqdvTQo>C1gVepCflM$4~ZLfBDRA&PRNJwfi4?j0@MZaVYx{m z!^>gyQ}K9*+85QjrESJ%m3QLMS8TaWujNzEQ#tAD4;(-LZi2q3XcxhMqK9 zH>LOL{i)_WS_pA9Y~hJc{jJ6mdin()IFnhR9L5~ZmsvGy&+;&Ft$ot*V1;92V~Lqv zt$iq$Fr!i6OVg-+b0$mzFfNLQZ4T^Td`o=i;L!RJf`6xwc4Fo(vmDaFih9()QTwG^ z=o`L1d`{*ss9oT#3V|g=PUfJS#M8**#d_1K6gXYeeVVdjh);L;*@%}#PpjVTs$)#8 z;_dfGrVkOdAFJ&C*4hR0FD#mrkHH^XI5Nd*Ad4r^ zRS|4(>>;jNDS3_E*|QmM9P~^@*EJ~pk?2l9h#yBXhBT}jx8VD3xCfa9qQ+lI|Nif>DTY|C>!Y7#9@JupYTo zvJHOrnj9=aP?JPY$}c%uO}u5V|JpObkKq)WkAK<$)E?d{dElFE7>nNcVhO-g%x-SS zx=zYoq3TZCixZ(l|3b!4h3lpZSDgY?imAdTWbrqJfZCu-rL!aL;Fm~$Cy$1xT^6$X zjK$;{c-#cduLF#(O%^M8Vae1DwW<>u0v1J~Q4902v9PkN<&k)`_Ovq)R*}QY4rA<6 z&war@5--jjSbTpoDjChq_!Wvpeg^ae@rCb}mae^`PTKWvOdf5T4y_S0+q^*EDIWTy%EZ%eK`P;aG7!`L~ae> z*qDuoL|KzHQs7Cx+j&rB!RVUCrbCmXF=}^!fwJp$Z3h|0c)!PmyTb&uUO`~{F9^F` z4!E0x0aHs~Q=(OjF5>)pCQuAZ^_eL=ZbL+<4DnM2XZx`gos9l)ZyHQ!A;;fV>^qK48$)vP&!}_G7w84_(k7$wXDUyyEnPu;Tpxf{5^X7nd(@yO^LDmR-cEJ z<1OhB7k7=IPjzr=3S34&jE8Jr?ZPD_sh^u~$7yN)JeV%18nu{lF)Sqb{KZsp-*hET zQ27CYDzOp-!8FQ=Kp1Ow^h-$DcFkX*2i1IbgqzZV=D63?^Euulv$>)kcS1HNY0;%` zu`|&^Z}n#gLZ#o-DY6#P`$-&YXYSG3(A^w4f)VD1vU9EXg-z*{(?&hn&dk-=#K5(s z5SailBTh$e@YKA_&LcPX6=2H}I?#4UiJ88;w+Q%e`m7od;3T4_{KHz^2J-2q9=Hb* z@zleiz!(WPd4-3PV(uw&B&zt05(I$OL?0Ao;q%p)W^#DS`8xzdnFe5K_AkH%gbGFF z2Bd;4)7vLs+%LBiBk`aCQTf{OrENNcY=Dmqd;yF@Bx(f@xyqW^?P&mdX%)9ykh32b zy2L`%pK24WyT<{hI`%rN>!So9!V+}sFZk#x}oA61T; zCb;^RL07Gi^T1M@sQum}dRX%eKv`cr$OEetbo>bx4wTYmI5UX&o;w2wTK`BZn|Wsf zUWz7WNQslqS-A~nT^%BM7HIb0`fA`S8Q>5P`$#>HgyrqDUJbgwYcb{i zwlS_%kNKTEJ)O@xM}dU(_lCLTV6=$O{fGNm=&KMVRw`aht`!f4{KX#Z4bADZN8JsP+#OK>pux`oQZJ(gUg)1S>GcvM zB2u)yVhcy4@f~i896&(R|H7=4|78Z$1tqpA@Q}u#*I+i~2h60O3J?WO?0tju7aA-^ zKgu+n-rV2G$Z*}pYPs<2)jZKGZhIO&&z5vm=#Ij-0>l--Cnq1u%tOo(ZY=HM!Ev5^ zC)l{G)|M^ceEM!V&?rgN=Af5*E^!=cSv|PR&jsH*RL*=BW=ENg(IL>;oOWZEd)Y;L zx;VmAo3R~mrUINDZ%LJ{e?%r-R?tYIWC=R~DL!-0%fW-=R%5$PrNc*jslS2z3NgqwX%){HETKrtILrMrw8(r#wqGXA!*;bz0TDym0luB1-jxGF-NB#FtWb4Q9>Qn*PmtR zXXw|7Gp0+quJ?M`$pm6XnI8d0y`e>6hkYpbhI?9Ju%N&Aq#$EL%SQ)Nr?A zaf9iM>9&CFGyOv|^Nc33rEkOT>`Zrmv})ixBcr-x0nDign9W&XpnJ<$uD;wGGaZ^( zxYCRbAaF~M_pt%uW|8bgJ_k;|l|izLb`yOAqB7?m5trfuQQ@8p3TeQx`jT`#>@P?; zu@^}4*s&mFK7&yKkE&w{`mqL$e0q&62cpZC8UkHAYOMx@yKi-H_k4f>;N@>iQpAGF z4kl-U$jYZ<^ra4=)n1n}hcgoAn;TgOG2Ij7Zd;!aW>^kih8RgL!1XhqqU@{`-aPGlR&zCFkECL)mViUk=z= z)Nl-A%_m9MYga`gE@ompA-8=QpSMpsakpwZu-`p4eagj}`Sxf(S01kZ73z0U7RduU7;$8( zEl3&DJEa5uSvDfFH&j%}^h)2r{vh41oyU%+D3u75^r262$^*f&#Jab*vLfT+i15{R z*)j=+4|3k)gKo~J)6+xR=%0oWFSydJqjNGp)56NzNFE3$XgEL!jsjy*KoPKl>&L92 z+%VcDD~;pg?L?V_9)Cxq(1OqA%SMw}y9ySQq81>9jeR+{u9hj8smb6gR)j#W3`CUg z{dU4X#~El(peq!(aT_z=mZ-)pC-+Z+bktd^D1L3UI$7S!3P7dT$@yD<6&x@Yx8u3r zAM6wAtM^A*r2J{%gwv0%4Db1UsNst6ZPLKEApMscsm@x*?M+Minnz=#_gmH9Oh$41 zYUuJ+oiGK-T&JrRyE2fdK+Z3~d8BX`lis|l$!-jxvA<{SaRV8IKQEKWwh~Wzwxw%0 z|N8Zi|7aAnSqdG1fAkBhvr?T{f|-ezbIV`Ai7oeBG_V8>q?UB#ig#pnU&(hkZ7(t0 zD}E0b9nE|m^0f9>kPnx_7;)(6?NMM(Z?KfpsPy({|5s_aa*U=Lv5)}lL<(;$@M!|} zN;E3_JL#6$56d!JWMJEKUkmg4Wwz54Gc&aBI;CT@@XX`Z=iTL}UsLq~FMxZOe)&dr zlbEo&gG7WidvEVg-Q*_2(F*q}c5qvb#7|g{#9B2taEbnRKY^_HOJ&9#f1WAJUltXy zqNLnRV8r4pL8EEnlhRr_Rs791zlrxk`3f_lf9U-Ex{OY%pES2Lx4##5GP6!lWH!5M z{o4PQ8u_b=uS0qfN-JUJF3?^F)@!+dc)VH6mXTUhY(8YVPINs}DErKhFXcz==vgV5 zg)v}(S$)e4W^3>7$$QZF^L4MQLaM615>DbR{EBbA`fCy$_68mV-MUDj`rcW~Yxz$B z(QKJOZ5(Kg0tRUg2D2>v$Ve8)fBaT1eo)^S55V5NlwxY&SG3Eb-T6A}OSA|5VndgjnjI8LimR!O8BRG`I*|8gi;?icC_ z!h8SpD8XY|j2KDe1#NBLW;z5{tLYxs_{Q{5{nmay^ga{(wU+ti{#Efy2-DzN;KccM zL0Gn*7SGn$+~KwT_!L~41X>~9d|mzCi%5}WLE(@=!}*9IE5gNT0K}@7^I=PRjW+4w znYO4la8$0Dk9Fy=Zq+L>?fSfFJ6+xxim5Lt`>A5k?v@2|!#T01z;UXLIWM1a?T5EY zi6-JGW^)uzO#|M(x5HWhU@Os~Q`RWX({wQ^iebk(h+gW zw$dS7b?I1|kKBhc*#s~jT*lBLUMNKYuBM8L9k~0UxFLj`5?eNe$3(tFtKt! zBmhv=;aNcIu-ah0?d3!8G}?;-(i>#gI7)16PLY6|ZH>vPVQ=fK8DLPRr8^g1NOg6< zrhV0EB;?9w2x&3KjAx0%;EiipR4 zs>+w=4*xwx5>PK+w+S;9F2sy}GtT+Z1=kD}Or1t8u=@Q49qjRN1Jy?ME zb_R!WFM!&Rvaej^{Hm`vYm)5jvLH}eTxy9~0Dn0c_}4unaH$UO`n`T}>DLT;Hw1)V zq&GY)y@$+JON{L($YhyMg_Fxp25`Ps?+KH=?jY1x-{PSHkk+3(8pr@m;3+I;?*w# zfK_yfiNfNy`y)EL4rj)NKfc?5;%!AA0JG>nPpfqRGd$|(pbDJRvMOjtpSn5SXzdKc zK2&r{dt+dEuQrbw*)h3VF|I{K{CVKi_G{uZ+e&;Uluo5s*ATM_ zB@1!wt*8FreJ5t^KRmj|C=18`x7Ev~e_7)70{aFscLpF?G~bFkfdYH2x^k_dvw3RI z#k0ND(WRogk~NS~a^@D0GH3OfLy0`}s&ut$K?qdx0J@S6tB)sr820<>`&Eao3jvPK z9=KVl1FYn=sY-NkFCE-zi%U~y;r?CGTZuT2U*5~$|5iu$zN#m6o4wr#&|y|y+h|2h zm2|Yg&0@M6Hd=G-hJWy7-){e2F)Jqe=6yKC=Y>w@d#pjf$n0&v(YqaZbgh}_f~m?A zFdZ&Z2m8`ql5qmLWVp*>_F11HBmK6jvJ$s9CVcJAzGGNB{RVI>lYb?CtRnEO9bCnA zdL7V~^wSgorL>+`h5eb7kAL!*^RLCsl+}6vz&_QUyRm-+3dlhQ+w^p1?=dd#5kP2B zeMb0x;L9@KpS$Kz1UC4?5@S~<*162B+_WlUz20t2Q}9Z}6_3uQx2mq}pIgY?nk+Dy zusNc5j;8hukcPsvTfeyV(D&`ok=~56h_Gkn-L1T~#>w1gv9N|g78UV!WA7-(BM=|7 z=;OwLHxr&eqyBp3#_LAH}2%&lMgW2N~p%x^a<7UA-ycl&Bw!cU87?2&s9FVTr;DvFi-GGU3WZ$`*(wYMziorX}yQI=L(x9d5x9+IUXEP%c?+ z+1~X?q|p!2H!kE-{Bl!qfuoJHIm3y+Eg-ONpp#$?xX}X6ppjA4dtNtXbl6Pi?6W@j zTOUum4OZHXaLgDt+)8sW)41Ae`gq8inYMg=a|4XyxA}%(CU9Y=vjOl&LCkr3YnQ|< z5UA|HEYRE}a9O;n@Zb&9M+zna?oO1rFv5_nMTS9b5rD#=fAsQ?Y9 zuept{Ifm^#=ncI_WKDE8m9Pi?cLm~0^}IhC5ZcRK{2{9_I=P0eV3Ad++iNu~Ul$x#|0Y1ImwdzeGM4U4Hw5{-oc5~J zcUXM7v#HdQu&J$4m{ovl^`q2Tj+Ms_%UyfM787}&Zow4~> zioWFVM3r=h*lSL4*2c`MS>DN3sv|31pNU>7!Dc^47e`|iC`diftHERhv+T8v%yQq< zzOILD<8Vc|0hXiEt!zQ#^<=+m4O|-ig0<&5xgO+U3YDxVUOR^05s*w2{f{H6DMK~p zNUZ}A6rh}Z9Q5K`%G>uPC*Vgro@Dun13v{At^&w6L~_KT+F zC_Ozj=dStDFa{N&|AMqC4;lH|2P~7$EGI(b@5USjh;Zn9F&``-C^oX_{VZ{mx^y> z)l%#Cus?$@g~WZ26IR~&0uvLezyNGPh`eOXQKu}5CuOm}5Z8m$x=wo8$klqMSI}SC z718cN8qp)ZGAMX{$<(_Uz{lOWoUQoa@{-3h%Edol_q#$Dv&8Da-QnKi&ndG2RZq1V zYsbCnkyoD0Q)A{T$43v@)^@BNy}I||m`}dVD(8VFc|+p~%`zrIbLd0QaPnJH|Nzz zm5Y>_%qMCPF^Jcl8PR`Y{G!Dzvb!(#uzA}~rC|Z!F-q<1d0L8TN~&mh=IvDPBzcrR2_`+!}cs*WfS|$sct3h#_EH=2?Yf@g%KRTxBgiQ z;LHeoHg-PYB^YE6oICd$=?;0hCeaML^+zFae;u6R=F@XIyP~CS>0QauMw6hx`5-*w zl3wDu&BRvTjZTQkI6?V!R#mtc{hx-<6*VoM(3liK-4-W{)tT@{lg;0#@CpgaT^}p7 zizpP`;7bd(BLmz2WLUo4@d!Zclk>QkIatIRLk93ZS0$H4DDPQD!5S4ANc@CXI2gvF z+Xr?lnAhIT&R8p#?3b{HjmL)=@#p3mRxW8=iX-TrP=`OUS|+Ch#Jn{Yz_6-1%$zCH z$D}LYfuR_s8Sc`CcHDQYxI`(-gMXHX*@=wV2qrUuAP-QE@J65bJ07bRU^5-d6)mx# zhzDb&jU%HZE*TB+x@gWuSMR~g8Rk}t7WuzjlpwbjgZq85>WY@`;ySU{FE$=M*%dj> zDZ0dC9+#|S%_bO!kz@;)hD3K=37*cq))>0By4eTC8Ok`t_eqK5;kuTP*Y@=gzR+|WqYklNfd$aG-MTMfaa{)k*T)8xL^Z@^X8Eo+ z#K=n;&RrhlZx{S{v(M4pWO$w{7*Du?i>)A-;pA6GV^~O$QV~^+_^Z{~&svf+d0IX> ztJqv`yNp87gxL~SJl&A6HvXW*as!Nt+JMQluoe9_;&QOa7KEdVb_>oR_Xv>Wmn*fI*s1a~w#LU9NKS-a;SRO( zg(r5DG`^d8MOi*f_j2G(j&k7*`Zq~xEmhZdS8YOs`J`O!%B*GG-__bQWGJ+wk&>fp z=3y%8qrfolhll-HE(&Z|q3U{sRMZ^wr$Zky{QElC?5L=R1+L|)To#v3!I9aLy^a7 z^{tNYGD=?`Hwzxqs=oOcWL8A*e*u6vgZSeFIgQn`97?0(*7Q}kowpyA`7iE%5AL)j zn_rNce^#=q09x^6xC4q7i5WG@--?( z;B2s|0~dPhbFw!@5~uj_PtYK-d?ot|_y`o@JxF zc-9_Sg{T6~n2(0gN}WIMLe+NF{l1?+)i9TWLas6x7DtB_ z7RHqe3M&heC8?3W+;^(1b}Fjxh<_Jh&A+uGR#(%lPZ@f3C2YFuI!@~bq7FXz9r4aP z8L>)+{VXLD8Akp&UgmUJYBVv3O3Uq#lp(c*8E@Pg+?F#XYZ>Rfxk z)F0wd`C^6>&)DhgyNC_CmS#6@chJy~(v7R%?<8EkTU7mh6tK(~tY-6->T84VvEo%8 z_OF2{oz3q0`7t6rE%|9imk!r@2mBlOYU9gKMmhj|=s%|_V<=OpVY|lDuyPWYk!s=5 zwiN`4H1&x<-T%rQf3@Z5{=+a_*;GR6hYU5wvvTHg@ zgfbgmc$qSLf5&i>dhzqEp#ZTaC60lPc@l8hqr)+scTv5YI`04BB!<#i0=m2QmnG)2173G=U_oSHx8 zUjEr}PMbQ(JutXm!}l6=@{c9ey&V>Bc)5|r7a&j5!{xy|w{EHDo2{X5p$d(gYTZj* znCgQrj%6}u#L-QJP09^_WvO5HA?Gxpl{?ih3PR)nAsH_6%YwyVzHh=caWie@MxlKS zgC&rL#j9(XA@5!8LUtf9lc(=pS-9=|VdeA#~H$qn-@>pKQ@9Y#3OP~uJ zz4{&5mDLF-{h>ijdqP!ghoEh?zC;Z=pkr68;=aU+O^8G#a~lUV_~;XK9ArLKaYE4p zv#-JLnDuvx5**6@%S^HLX27>#dMx|cR3p{%jM4`gt`C*m3&*sW4F;QB1H#OL0G7~F z1DCuy;_38Q$a@a{*ke&RON>J&Oue$?c=pFJY?>v5<(rAfL5gLLUVGfhhonu8o6FoCo1n0rvWmY@JM;hzV1>pk^ zf{oa9RxMPwS*DXwROG+KWlO7titu%hSEopV$#DDg&C?N_7Yyrgs*Q`r9H~eB3M$)T z{9(tkDdL{gkR-xJm=K65-LJZV!~kl68!&+NoSRXeB-nj5!ohmGZcW_ZvubNgeiQwK z=Du?JpPX6OD`vARmj~g)CNP|kOAjmx(jc6MnOt=_b0PK$QdxemW^ zhWbv_at(`x=*Sl8Q4H>s^uTWWK0Hk&=5#zlEt*fv7>*N63Xls6#tQ?fN_TR3?Cz#W z-6(PRW27$qT4~*2lK{o2L*EBe67w6X<6&1+aluvV)hpK zSSiMq3)~S#=WNhY z@isw8r#%%1V-qHRcqWrp5_udT>!kcV zJCU2}#B}iLw^J{oX--8}FmBJ%}8&2ZuLUw?I2%~a^QJLy%XtU?A!}<8* zd!V4gkzoIHi4&J^qjNJW)q69m6c}hX6l}aDDaZUwFtfy(2`sm7Yy>BkF(pYev4N8T zNPqs1Pfr|-HCP76bHA#g)1`m6sGp)c<)K_Kq$W(qFR#UHH=;$u;EGsLSue=LXuC2Z zs767AAS=ccQFsKp#__6?+Ks?5kgV_^P$oI&<%=K6jR-FhN}#XiF&0y6gXPjl*pQd% zf3B5pHZ)Ho^0>lXs>mbX)--pxLzJ{ttz0qSS7gBy%r;VtnsUDc&=PvU5eZp2p~GT* zR@Xqi&sPAA!#x--=3fjqC$1N>;hXN;$W|Wm?fm79u@%5GjP$I4^Q7@wNo|OK$_q{Hb*?FGu^ABlE0w*rD4W5d;-~6~8~reet}Snc@f6 zyCvIwXlA#q=nLaJxpRhkKKPjZi9FK+1%|EM^ijvv1B3@9RwrtY2d`BU(!u;?d%8O< zL^Iy~a07*Ua^nh>n)P*BkTlcCLnBxdAi6v_wIL=_3`Pbj2Lo}$vonJEc5&5WqRbYJ znxv{(wy;QEts=33o+1p-a#RO!S)riC-mH#8qxaPM60giI8C|vZ)7u;q{t{v9)0St) zz&hnl@7By$%QprCWSWep_QYE8CJ4Q_UZnA>IhV>=r?BUdWY=%BtEW*~Wtve+gN}^1 zy@JBa4mZ19kVh*9=rzn0moQjEaO-LSdjN{5r9QH^&Fl;*{H7^8TkjuFC9TBEIvL?! zFT-EIaD`bNM8GZ~Rz5-~sse9f!v?abv)8H_G(7@m3?`X4TTQ%eE4fS)AO46}w^>O# z{1JyWFUB0Lh;+koe2II*L0HB$CqyJc&1Z!>cW2Z*_DMtSlsN^b8Az8xH_~;4ogK4A{HTsyGfkQIh7IR)=;D;)xgW07yNt=UQ?$5CWGzb2;}@%Cc6aVd6{FLho`?qtmZ3-x{BKUeGDw*{!m zO&oUZ?jKkh<)=MulfF?=5_KBgOI&e|HY0_h*ctmS?01kidlu$v1zX*(T1#91^C2fzL(XyaN|VFr$uh;yi&S5D z_ZgYiZ*95WX2~-}YK9Hb_@z*lzS!C1v^yMt_$-(K8|Qy~v~`izZij3vd5Bb3lJ$6h z|Cw|O@7~&0x8W_>r=WlS>OX-RD~sTM4%4&mV~g{DL8a}@mh^pm#AwFP96Ron;~!)G z40NInC~6Z2UgW&gdNEM!z`-5oBPF>zc4=C@PWGdcd9e!URV||S_x-ggaiCaPvcAcd zT;pjif4ycUvDlt;kb(A)QKlNI?uwAK(haU(0_kQYgw*tgq1EUG=6Dl z(=O&)>ZpA~7YExeSQ!+Vc;#k4JK#ELKg)~@3G$U{z z07GXU_}76CYGx|E;EeNuK&AYkWfADb=G~eKZ2zn{gmr4V# zVC~vkGo6wQ7wrs^{PtbB{3g(kC6&Hgllxq56HH_PXv@bW$?8+7h(N(20`nx#x%KbH zfbU+vUUBYBH|ZDdMc)BvgIR+=EXmfiwU58mWO^2A zIC1(1ewM;B71ea~%R{yvb&sjNbv}y#FesrJfww0S*2{BmS-}*h<~wZ}30}CD{pQ@i zc^Fx8OUHV-G0JkqsL$9GX-@f35h`(P4F`9I z>Y60`O11au)Ae4_l0*j;cxQ%1mtXekYN_z?9#mckI_*|a*`OVYn;nkfV_f=qUvjmKf-Vhxp#^hu-GS3VOTIJ*`nicFj8G-g?ZEfzZ*T z6!Q3=k-X0iek`V*5QEDz)))Zm{3m)JQ~b}%;kAESwoo-wSW*3#PxS+Ks@!B46YhJ- ztC48X=8TgPuEnGukC?s8tEm#xU$GAzLZj}X+Ulo1U&bhEH`yEWI=$i+UVc>;YB zFV5t_ce+&|CZ4i+Ozdx5t)cSjmf!pA)FnDx$WG}Ufj zi)DZK0!VJ*4ALDE9i0$mw^QoOcu4%Z%M#VA2jwsq%FmUd*bU6lJ`jFPGA+H{}} z{vhh?t*;5`O;dQvxLQ%18_ysCY!5l#G>^Bjwka_#PJq)Ykt^G)v4rb!yjKN5p4O{? z0u%A(1P&~`4{~h_2teqfuCPQ=_To>b8^97B4XvEdeEb6w38EGz8R4xU$pLPPU;b)) zcr5yHkGzG7N zhXP$_GuGZNYFrvD020{{WGt_H_N>W`%{U{KwZhd@nzirEtmtg-9hzPz&woM(LlsH= zl2C9k3l4gk(Wzz8LlVp#G?-}Y6!5gQM8qwBcd}}U@LGzey^9uXcD?Fdp5Wz#*(bIe!9|{`ZwA^Gdi1vn1;~uIt!ZmSzmhLITeu2$5 zbn#{ku7xADBezWETc7!HW;SJB2@Y)plBPt1$5<+xqY%yz8e@B7t%@IRE-Q)Piey`p zHQ7Rk^Dmdzo?E|WwaVta(K@Si7x4*-e7iOPp@G>YvfJn0^F^05OjkK>P%CQ61{kp{ zabIIee=y%qJ9x;&M!|Id8)P(4X^kaQfrB=m;@+=03u~u?%iVV2vy zlN+BG(@ymboaPVP4uZgF%2kU2a0C?S(?H_8Ztr@x?SDeo{Bk@O?HU_+^n4YSBzRd@ zMIRKG;4mS0t_Zwg>bTy%ED>}$Ww-*{4*-r-7%mQ$4GOHwF*NOC7M?{J-F0aozwW+d zk@c2(KH6o6)GiH);mLj-TrYk2LyFOgNh@_2dqNr=lV+XKNM-0G(SMTaLdJJUO{v zm!g9!Y@8FTHB}O%p>KW1?c{OTC-%&JgZAksES}d=TTbtN`WqEkv#voI_`SJPZ)a>hrHWF7h9{%+K0?Bu{S7X*HwzlmP%?hf(lKiq!Ng<6 z?q{H8DkhVw_c0W#tjPM&APwo8sEd)9lA%o4c!+$464cTQdA_%B-@veE@SdC?CIzxz ziwx5JFKDz8sI@A@+V85Gl~SkWJdfVzv}D6T&kB>=v5%sOM!07!n zw&=SfEX3nfYmdoOkI<%fo-6|LTD*w!ko_R!$!lPSf)1nXK{an$@PjQzFD*o1=wEJs z>?(drHNQ!WoY{{PoHTn^{_M?&nHnXaT?o2QWP6AC|AGvXKjeW;3+j(6O|)jjx4eQl zJX@P`eAKvY1bPV=wdcMP`Tz3j;_$-yph`l!t`LN=lmpPH8QxJP%mCc2%;G0q`+bJ* zRzY7My}R?~mHSUcwk$#@7D}LFU8|0V+JQq!lsXi?<*TY;Ynos>`;@;R$L?ZNz*}z4 z*w({ru8oPW%^@JxE{!L^?wQCDf6$O2c3H$PXT%+iJy z4n{Vm3TL0rXYytC3{j~LFpXQj*m#rhhw4QQ8(?zu7lad_=!#ttiQpg`BRoXGV}r%8 zA|Z|hH!tpcg?7zHcJ&WcHe!uL?!=%@mH@GYaxE>#6`8n;#Bg9(Fc>|D(ja1 z9v#Fw<&B?n)ZcF)kd~)Y#Q5Xt56Brb1%Rggp|Sgcw>YP~L~zO{^3dl~x^q$#_mh8q zS3PLmBxIsGL`WPqcx^ivJLxt7I!(InkiNu(3&|=ToEM(>At4(pXt?TIW!Vt>!lgba zhv)VZ_tz22*R^+&%_x7vnqBr1S9Ri+>&~LO$Oxjf6CHx3xLMwh&0}*#wh_z5`G?NfI}Qaak+rxoM!$2t?NXDl;)Rw#RB?%5Vm@Le55U1qHhaTvE7jo$YA+LZ*1;};2?AviVB%xvLd+(Xd6idw zo>Zb}Tt>dbvlNc95|SIDYtoTh!45br0L^!f%W>kZaWkhD*wN^B*v}UhVU8V^tI;l& zCR72Dt*x!K4rT^>mOp_|_O=wKICrLXY0i+*t$_^SzKCg0#O$a#j;6@BPF`@3gBdF^ z7<*jlyu_F?jMtX;UNfozX11)47$nkOCzTn@x08o3bo!jy+@D-n(6}G!lNY86+gZ)Mej{b8>MRG!Z;dy#;;hj}!w`e= zuW0LHAiH|o)xlV9SiW-T8dtKv7~C=xT*`F^<5wwgXy!bCUqus04>0Rm3K_D@UV=;m zMmqX!%@zj|L9U(M)UrXgrz8R-)iS&E7)2!T*)TRtJ zoBLsNk*6QWq4s75r#Zyb4y{$R@a}-j&D<~)E0}h6VX=ogn|ss-W?4LL65*haA zU52^OvV!m`tn+`~wbt4dwm*mv6?}j~e1qe7Z3ZBr7m)Xr6$+fjH*LC?sIiHWjQVEs z?`%4;yj59godyFg7$&=K ziECnQD*G{3xW0JKEGlP7q9tBoPN3m7)BoY@Jp-ERwsm1t6cD5-0#btX4pOBhHb6v- zA{`+hAWcA|g&F~+L!>JRh%~8@UM1261f)xc(0f7&ffVm@pY!g!&-0`ol$}Y|UVZL@(MNIss&Z7D#n?2Y}CGbK_I>iN*{mI6HGJ+9ph|mBK9| z7w+Aa9^tc0XY@B%qv?d5LClv0DdU*7HnDA8b8OA5o8y_+2sxjfu2@DEz$o=#n082%*_o;Icy zsi;DN>t&!)|o=nT(Xs>3p~{+FhU(=&(c+L|w5&#j4sr<<(E8JP({%t4)yOa#NZFd`iqk`6&a zRwh;Kqiqt_E3~YuBkelr1h0^$$pr{&=wu}(ybE=ffL=gGG;u-N z(BYT8dl%+t;rYFf8Y)5`)!vByJS~*bhn}>5qcw$4$>8U-yLnX_Vba8ysTkeT@C3nX zSDw{Q@60@sJ1meOq15n8ebJ43KrosmV9VIss;*lkO;#n4L5kyNo2Hh8ZB%c?G?+E! z1;IhI<$3(bpeEah&tFQZpug+m{_DBnuX~9l^ppf%4~y9L!6vw!+0>LgOy?h0RVt{J zarBB?3h3mNy=<@}+qQZ~VDp~DaCc?Q16Wi+Y|B7OE`aC&9X3pqa$?*?7_BM;&OWKU zmS1r1lY0^jV3i8j>N#bkIp*w5;c3VvBzw#Sn@8lgzp0!q;6azvufDr&0m?F{j=jlR zoGFxSBfixp>=5x@mq`}2p%>&GG>a(jFU2k18>U8U{XWN-E(HOdM{c?-nYGs z6tKQIt@9>p$ymtbwU0m!8PGCuv0%dIV*3VOlgwQ`nIdL6&s{*=$uQ%*d^f$vKf)#e zl4N^qtHrgw1b*`VoQfcsDQfRI*#32ZX435x$leKnPD}MbILaI!Dc9a@>?DF>35fQ( zA4pl`Iot(fG1DeRM?~+5^Onx`c44Vt?FScyW`SLxWr-Gp0Op_nyLnE>u)h~+a2mneSP-jR%rv7{nKEONpZAEq{v~iq*(%cQ5Z;a zN^sSz9CJy1{_<@=ePUtQJfoTXFY*#Z?uhzK?WcM-dP4qOySpxRxngGavs)HGpE`kE zLxo#T*}#48%K=~T$j`rEtbbHuu2WhD$mgUGc&CG?eMH1>s{K>{RE@cD_TdQN|7bqE zJmeK2&`_P>t#he}hZFj=Ak-L8&XH6ViEd&c4$!GNoj4s1m)Vj@HbavO1AL6}KkgpH zYqR};yR}bhcWzr01b-X!OpWa*c}?dkEz4<}qMmRy2B7fJL~>tVHuM-FG-DP!8qg$( zSh3mb_aqzg+U?I>=i2#JqN)R?Jv2E|rp{LLTYYt)XX>)^{N}J*i2%#Q%;c+tTcMv$ z#g?*jcYe!0=%=OH{)|!>ZUWeBKIL$K48Ks-9`jo#mXI1BNk3_mM1}&2Z+#2IJ-s&X zA5VZLex{ZrK4UOnkO_X!t+@GC!%U;Jo9PwP zqfY=n1*J@Q;X(fTo60&GMNaw3-!!){K6vQ-SFo$}6YWc$i8@vd)nxsZFgu8CG&GG}(fY&}4rf?6&#_ao7l;iGB_4>~1Kzx^u zvm|ot<~^3XKjd^DX$09&ra5rqjopR35kD|WK<^&`qVPWggosUd3=m@u7P!e{;BrH^lIMqN zVxHStLTR&}4ok6}hRI>He23Hz&lXAas;hbV%v;<8o!Q)1AA6k8U^rdiA$ta5my8rP zICJ#eH=YKf`r#zwpGrjTmXg@SO*zfdwZv$iXFpinJYotTcZb<=%w6Oy9s#|-Yn=wA zh4(;M6iyx#(0v(`d?CFxy;K&o6<Dog~}2$2eX-rNNgNjOL>wM#x= zOzE7io}{-;MlJjGHJ>kgiyHAd+;<($6kzSc*jv*?%TsK;eAKEtX4(SR%LJFFPZ*(2fs5bZ z!`@IVwe&9|h$FUXaLOS&=iV39$^|r*?tGEGydtZ$dy^ldc_^@~+$6Rrs(xGYL@WD@ z<4JWUc+g&~S5%!&z?C{)8QXyS^~TD8$~(E6FwnY*`FiPB$F=Il;4#e5LePOS%U+y@ zwxJzGP_iJ@!tTtR-`hXt;Hg17|4kN#{9O*~?@{YtUrX%M<44KS0go_q7pH2dv-#Hs~FY(ML)eDtW|+DIZTPgcrbR$23{H z5%q(5jC&VQQ4ON|r*4(E74u8aiMz}-vL+p~<(^YvXX$(0)-_G(oU48ChN$_T!a=%Q z4n#R!jB9j*)Z^QA7uet75G5(2c4|F74)5OcujzhfRUXHI=&jw~IokW4CJ#}BG?q0f zFY_rsPFy4uQLEgXU3H{d9!7S|SjyFPt?E*S`^K*EC8=FdRL7rCbqIv2)U3w8%FqAq z%8|*B#iwFQd0m)HZ(;AB^G+x!$z}7j?rD%^C{dw4Es=^X`}*0`iRN3g^jmP=dG^}6 zZ-!rkAE&LYhZOhik+hyh*&6lchmYHvL1k5eW?}}74#4yRt+EGiC`C;z@ z1NDT0&>K8@Z0!W?j>pbS?%B@qr8SiWF6<8r)l8JU^)CBf(+M#+q-Jw_ujl=r7S}+g zYlqji8K;GIU}P>dw3PfRWLC2k{Os%OTizXu8!uAg@#RnkddtN!m)D=2(9X`npR{?n z$gocRK>I24=6n_i)92KozOo_FPcqEjFbh1!b-fmt`>X|U$%D_=evy9AmPuWh@YG{Y zd``la%1?+b60o^kw-g^-822<)|1M0!3FLHcIn@trURH)ld$fFGGgQ7^?XGF;bVk_y^h?`l@T&t>NnAB}^57z{l*)V26 zHu5MA%uY#@V?3N(Z}5sk7TnBTkEeAhwK4e=>nF~4zDVO02MUb63#^RPCnI3K-XHoY z45I@@ zd?-tM46|?jl7snPgX$iNtBjKeD&7NV;g#_YxBF!U?^yp-_f^RpvIizbC8vukUzA$_ z4hy;1GTDDL$8TtW^oL8lVpRi09!Kc8cyVb;x(vp*7(L#)+2Iaj0z3*U>acOuS5qGj za+^2B9_7D|nd%Q*LIQZp{HVohKQ>=vY&c24ZzT(NPMSZWH1;>u*Q%YF)FXYhP)p7U5o&NF!Z-7+&tmHXsw zcDXyg7QGG1L`)R^B_m&_9sKj6to(8s$=G154_vr5kcQb|?ya1r-kTmu$WZZ|$gfE< z8&Sp@L1fnPQttS!?RB$nBD}P zri>#lLF||!WP^bJ=R-Tg^PlRL%W1QFRNf!!lIyR}`?*pZ3K~Hld(9gJkB6!<(9y^#9ck`>(3@&-GL*e7Mc0;Z=Bh z<`vqs*)+~l)Be$9F2Io)sLy-O$&)16x+Fpy7f>uFgdA<8aXCY9MZ%p$R!wo93QfMP zwQq&IIlw^Buc@H@k@73AZgtw?pFqYoH(28h2XybLMTPFJ4)^)n3Qge z%YVzOj0?qw5}dJTFfL`u&QfFLrJKDg76kh{Rq6U888@!VB#e#ngpt1yM^6tpN)lp(^Du#yH!gJG^Tfm6Rx-xl z(utz&>gIMj9hXa%G1z)V00G^nYE67CITbJS2EmLNRHT)*o%yu5g!JADBBC_JSAi_< zoZ<5jJ2RWHFz^N-6q@4-ARHV`%jN7yzr222d{P_{c`WDcle}l2%(ZN)H69hp!AB(q?F_$lo>DF}I z|8cA})8GA;{vMI<`2mvVkKG&fLHf4L!fK4?Hh}gVST=Pm#>7f5>Q&cSoz9h=Rjn?3 zJAXFj2T$DTLPdO_yB|Ju9u(bt77+Z|-Xh&zn0Yz%JifU%+Weg$CpAm5oxoWW&@HBW z$If`gamAU_P@bSZuyAv#LHdGsHE)Ks&x=06y|tsUFLREqj$ElJ9QjIHGbVR9_Vk2P zZ-Sl!{g*TUYycDo+SnCN^cFZ>6U5%n6O7aR2V_j0*=h9BDGVU`Q$Y~2ml}^jrGRML z>7{dg_~;9mj#oV-vJQE2l9Ao5fcP?sx{+KJ#0e+r)K_Amp#k=bQjBa`Hf<2$R z3cPsK^uFxQXEktY!2I@Fi^cwny17xa;r(9H@0SLf+C`Bw;U> z9qbU3Y|6CTy#JY@t&&yM5TLD&vQNt33#NkD{!F8EM?~t8uF+WudW{~$ohDCIv&1TT z60$grplZInF~?HXcLm1wWUW=jeyGGgObu1J15-6LWi;tvk$X;6X>*42`{f1`CZ%+I zUsYAiG>jxeh`c0mH0{8uSLLI2H9?0_gG~pI@*!yB+7@747U$ep0wl-yN3T{VP0eUl zFVt6m@CsX*w9}b?>op-RVe{c>6AEub2F4-w(8U&jZLpB`OkQ%OI&ZPf=XJCE^c+HJFPB!qCnq0wlZppL5MQa> zN^OnC%*W38-u0J`y}pzI#97TtMmGQawt?ak@`wKa@1pv@dtaiR0uCC;qDMGFsi4?h zOxcIpngqM~_b)0Z`$DLH>V!P%40>%VD}ERC{8Iy#R=LDZy2*wTVn3a^v*NpoUA<3fGSi?y~ojnQx|qf<%186pRR zIuCd50&_QE!(*OX0sWX;0vGy#@dtl0*JnF`imkyUkVbk;2qj8T20>Urvw#g2;7Sf( zO@D&5{UNQ0q@AvO(89i}pnH^iDrmD{_pR4HyW+`yX$lU8`|yIWI__kcm37Yxgb0KB zDyCPf^aSqHu4!yGbWa=3Y%R!07YFY;5_B`jZVCp0BMezb(pd-$8G2=)<`42PhRiUG|#2Pqqk}Y>d=L`4w+W~&iRpBxZn6U zWCWNAcYjhZ<7-k{I7u)?ZVhv|_*UID!K{~aZl#@POfE{*#<3&F4=~iBwFhQO=qkgN zY-cwcEO8+$jX!E=Si7-lL{S5}d_k~MH)u$xe7fV@&-t^RV*~FH*?Q979R2KS-U+A7 zo8O7|tt|J2J$*C1bLCJ%b zg6j0RBo&**rjTBs@m76MOh|*KR!CkY5DMu8}3-; zPIdQ1G%0TifipO@f7F6JhM?jgcxtR0CAi1{Qk%6s{*ls#X4)nhekQ;SaXhmh&D0*b zT-3Ja4&8}v94h5jL%*T&<)WcSzIzJrRbA0}LDOh%DRrGfgwxCgu9l@~U$Jur`31q{ zbliSND70b*mp1NlvU@f>WQc2%t8P+kdq=?ZX^Ikut>+8Fq&Ql>P&1w44MBwJT=_VO z4TYhJ@?rukj>*{v04dMeyCEjpId2Ux%Q=~L^roYe9Ke5~cqTTJU+9=FUOh1c{iO@nDs$82Nb0 zb!!?}82UEJ1G8FZx$639$;QHqB}(!axQiqCH}vD)env;@4x*!Y<^iRju`0-E4D39v z-diaj(el{9xqCK`6LA_%NTBdM7!?@D=qUwCX$DT30n6rblyS<^~ ziyJnp?zJ$z6SQ&d={*~Y?|pCYxQEwKzn~#myp)SUKPgO5E|S2Q^=L`lpm_F_V&j*A zRCT@ZSn@lM5mprxS5(~@wv=I$9(}_vLj zb$0h>VeU8}!WZt?x?Z|nzIEx5W&r0&-G9^fr!xKk-)SX6)8@J+8MMs%BxN%%ZMr{e z=d|hax$hg#v|BbC=RCOf@w}gRj!p48)~Ug^SmWytXGwjro{H-|U+{b@WyZ;C_7rBs zW#!kxt?Ox(-R}8`Ln`&Y+uByDz03!*Ij`9^lBkSZ=dh0<$Fis>5dJKJ%#nPg=S#DF z3Y*!rSlhyMIe>dakhu$EA-&OJCjd48Wb{!@5R zG|G|;Y7ScX9?&b#IJ_mb;cw$L$)ETLmGjF4|3yrLaXX5(J%v|z(B7(+~1T7uwz|JG?wdGJe`Egp5@1xtx|)70>+CS~W!Q z*9~zYWBO6=Os54~@_dkXGC=?{x77#ydg27fQWEv($FV~-E?s|4FRibYb%Q^462i4( ze-={rUS7F#{Y+f)F<^NH$RnWIvnIuNco;>SPGQ@0ShN|w%t4Es(hBXE1f!%mb84s( zIc75QJSuLygyhUf_vk6#uNls(OW7{P-2JhiEZ6hshV-(bv4@S+n=>M>XxM_@7@}Tt zyVWluPJz#m)W~TR4oBb!+I+dq{T#C3%yM*kq_nLhsgXTCPMO#HqXBhBQBKtHI39>m ziT&j4-&C9XZJ?89agER^7`|i(VG9bW4A7~ow9tLrP#4#Azv7v#PMIykM0~PIk@gj} z+B4oiUlm$u@4H~5Dd%BCod7Ta5OIs`ob5FV?@(46Z=hsa?akZP-YvblmuE5b&E~b> zwQ~C>Z~GIJJg`lg7+#B%rlP#rf?) zRFv*4tjQ+&vNJC~U;%x9de+>rwk+jDIsD)PtMg|UR({<9DLg}huJC-GG8>l<)%!_s z2^koj0lHjt6bK*-3gT(zgsT%mG0KsP)y^J)#WTOmvf-FlPjs$)FC<3X@L)dwq>wu? z6wki3K)g&6AtwbGWAtq1OZy879A*Wt^$Nc_0(+;sym-BnIU)F%U#*M{4cGd4PWF<_ zxS{^%#HK&_3V4cED1yLv+wO!eY?vZV(jF_ofnv8h*YrLl0DfOFZ44|1C8^xD7nNAT zNfk6{CykWz=0MeJgF&8+N8mtzz zX+nF+J+ZV{ucfp zhjxG2WQle&woNHTOQA2vlT{zVVqw?^2!iNtbPyO`LOM$Tzy_Ci#hu-%9c!^&OQi?S z%*jJ0+C7QBzVA&>cdo}*pGV5$jcUJpY$@4=n|zRHn6en&BK7z4U?im--~{(dFT$%CQ_}$QTzRYnU7i%!#S3 z#+S4^kp$tc2r!7y(X1ZyZE^}O(*E=9o&yoTK7PZtLe!-v7`>VloGtPZ$%*=&%PNXk-2ql||ER zt3NsyA3~UJF}-m92H+ZHCZgxj+bRo>7ogE;>OR?!#n~Om%*>SXQTB%my*mY>bM5(P zaYQA=1xgUUlj#~W9AHGa>GsO%Il1wExO@N4GYZx>H_m+XFS)bQys+d8VJ05mHVM!L zP#$tYOLJt^^oi!TS)byMpTmnI2x>0U&5q!?iR6~McNtYsq&p$)yC4Y160I2EphxquTpB21)u=~c#6ZwXbEygKa zoO-S9Gm6ie_m2XiA>UTuCN>ot<;C~R3N`by`Ve=4uW*0h$=|=ol_raYx+cTy-aLh{ zSt}!R-=BY!vS+xXcS_D_yC{YiTYYyr3gJOCn=`uj*?^bOtum>i)P|BY~FegIHS zYw_Dbscri)qF=A&BgeV6^BS5(DbU;irQOJ0B*u+P9ar(e!l)J15*8GRT{f9zTD6bY@%Z0&KmMH8p%@84T>ciAgJ?ndV!_4ra55+g%P zf)K)S%ZO((yiRGW;TS>&7Wtrh)Y!OgL`Z4RQv1Sa)CN>CVaB}kehToLRs_6i|IzZm zMQa{$7smCQ3eY2X1*_8N%P+-g-_Xr4e!%toP}lTX#fVfFMAF9_b*bg0&aWr=Iz4;N z%K-m32&iEzkK!bSM}bokr0Ys)M)e3@U&nfpYbxSXU3GkR=IOzn7TYjQhoxIS0%Ar~ zp|FHW#W*ccq z-Z@*3Hdu6=Js>^XDtyy#yipPG*=MWLn+!i^ z&2%?EfP%-3^Y{UY3_{BnBoA}`Z!B}f^%B+ShmJY4X0gA?5@aOHbkz6LsZg+j&uXL zGPlr=`W%2DL|YTpNnBM4fiR=Sq_+I_viRv4bDE2C1F{BQHF{(__tUbh@JNU}m_)d)5EfDOPitG&2?T zpUpPk>lp41tg1g+$Y)Y$C%cv`b1EcOSJxH=DiD!B;HcIgj4n|pGdewTjv~&^ZU!fg zN1!4|IlA3#qHTfNPn&dcybY`}d#SH>FRg$5|5A)6OL>k&Bj}ro7B@crUd`o)+IzvW+)hejKxer9(kci_!R49DD1Z z4g?@55QX3di#lOReyLrxW`=WNLgPEh)=}f_5^T*$X*3_C`qCV6c|E=Omp$KlS2A+1 zMAd=DKw-@S0kVWXf6Q)pg98Q7(|GNQU7MUKUH(u=lP*Xnp-G9q(&Y}c(w1}PIJ@;< z(gH3j1^Dx1WB_N0<4I6>DS&@v1hpH-y4Vz~H48QkeQatJ-LF!r$wZ{s?ky%j#i>E! z@-E+m(Xv3oKwTpAcBZX%?4EW)T*|@bz92b$sj8?LKXfs^H{@l0m!#~dw)WDg!F}KJ zSH6$qNU^wjVQh(6GeQ}37A!+Bp7)6W3pi&A{yc!t2iT4^iG8-1Bg}3Pp%t(#|Keoi z{qc_pg9R0)O4`mI@?5#+%ss^J7gnXwgBn5D9cUQj034tRY!=ibz&j-Qc#(LD(%*)U z0I@K&BO`d#6Dcex7Tx@bz^wL$*CxTrR$xK3^tkGi+U)hL+Nc0Ke>Cf6(5b|Q-KiZ; z7niE9j})`MumTP2+b>T-%>zG54_qU~#@u$%{NA;f0gOC;;w+Ku+w#h<58W;~`=tkH z;auyp+e&~c(qq!H51+191DVX^s*Ax)3Z2tzeAOXT()0Sucbd&Tvm|syd6DNx0kPTC z5l)<(Dr*F1%uGV}%Y@@3hzQAK@qUHhRQ`Qu{h`xGzM0W8j@AA(cq4u16FU%AZ!T0B zQa9dYyx3qxpD~x>JnuMIYxv>I3i#-mWz0v5%6n@q>Tkd zd(pe-S~l^IwV97sn`=B%yQ8TxP3Z@atu=$TRc^U(|O`(31qA)vDXa$^d+1X08`8%7`(u7z=qmO8yY z=G;5uWAxS3Wm(tRL?Cl#>C^F4tJah6*T3s{14eQ zP=^~2SNC0%iQpATZ|4i#%>cShhHuY<_ z#ahWmp)M9Rv)kx(0n}@PF;n6KxG>zMxMpgm7LcKu!F6 zar5847Er$;`jH7JuqHtix_B%S<6Rdd62Q@zzR(pr@1d?5miX?YZ~fKWFu8Qo$YqS^ z%y-x1{V^obnKC+89)_X`M!4=W^p+6<>cXZvCU4O&3i5hss-L<|n^I%+&=xmzS zADsh7>So=>UC33&8{gA+_Kz4d$$dO(!Odp9r6qB&g=&A_AM-+GTPX5V)sz0wtCaKU zC~RZbcapLORzF$NVBeCh414{(v-F*eD@aP_pm#KSUpvL=sPQ`VH84hPW)FCYEeVn* zJSv^s^b2^`JJoEa1Zk19XX3&gSr`zF3ygt!sRKApysbm>?E-5hxUmeaJ))ohLi1@sDkPlCgeyihhOd z)}ot-pcKDf(fN&bxQDiEK2BZUd@8Rv|DcqO!jqp0hYfObKsa$KnkMt`Ri;BzWjiye z-V4eUjdf*GwLZ}7huC~B^Joo{!4@DDxDb~J68bejeyV1=Fq&Je@PKxJ@pb4i&Vnb% z*eEGmgsxbz!G1SMqP2wWp8f+FgR#Q0b>Qe?`p-l0+1u`JZa%K~+Pf7U;z@tp4F40I zdM+Q32eY|_#RnHVoTRqEcul4@#+2@bsQIrYU?eg$`mJUY!i@K#-lYo^orA!Qt?ht~ z(421D@GJwcub!RIt7p-6JkO^TuCyfj5c1L&iF`|*HnMM5^N$sC3F2Fi7;yiT;y8Fp zN-^mj@s`!gjvK5WcW}YeG0fwNNjjlz z4Nu`wn!hHCCU41@dT&p$SPH%n6vY2sSwv)9M5hgU^QT)1uOnfS1wwl+?z zY*zM`!XAHE(&wj_>IH2VOFc&((nOFvumF(UKgS`H8`qiYSmLfw2Oht+?z%e=vX zCHS=AC#PqHYs+hq`t`BaY1>b4s>f&dmp0H#8vN` zRn|IuR_+~sXD^-VbcQg3dEvceD`?9ID;&=W`J8w z6Z%>`@qLH$+=XTyc=5fepG}WGIyNN7zB)ZQyD`T3>9zRwX$3Fwcb4aVUSG_6f-MMc zVw=}hQP@4RhF4W=8d%X`i*52=+kK@h*Iq<#btrYKUc{A4WHw`4YB}F z{O|8eydorHix&nuW$63n0Z~`Qvif|zqmK6k|}kvb$D_{gsyFBwl5^ zC{*M)QLr@F7u)iveJBOQa`w88X?~&}Ff1J}B(z{)1mUa>)GJkBmck4)c4T-h2!7Ap zZ{sO zp6FDi7=Z~R6ATt5c!MsJR7bZJOO@RBo|yJjfRL40|oN3}$hM%d3*qr&A{4!`W@~!txQ$K*mOtUz?HTAh|foW?0o6i-m zdN*mAOAhhJc)1f!7F|&hfvX(KWH}yjak%eo-mfUer)+K~J~A(XLrtxD)%NTKw4k$g zr@GO@QAUN9CS|A#{YYDHU!Sy-@wU-5-Q)Mf3!1(nt!_xjIf|+yjX6OZqs!xWmebvZ zPp)g2{9GzhKs}DB26Repdf-A#4)+7rTzfhf(W>DC zr$2H0N!N=%0|1uH3%=pOXiVxT3e45J*X9Hs%_mNL|8)&{a`bkq%l6vIc)>UTG#qy8 ziv`?oMSnEJMXX>%$9MHuI5JO7$!TZQ&);Rne`LD#haIlp_GDP}(*N{YJgy*bJ#F-LgHfd$+f2!3g~>C`1m(vga$oq6PsI<}9wk0ld*7mS zz1u>5Ul%h#Vjaf^;=(HbIA^qS?lyB0QsgWpwohwC@g4W;)mas3d~#^;LIIKuuhEqA zK14wj$tcaRpc73u<<m&)6(1Sf_C*f0DTLyr_b)yO~`9~!C}8m9_r zazadId;yIdO*ZW6hIT647%-2vTYdG5#okkJ#B*`t(TBiKr+!mCS$?rW^-TvjI9%|H z^&M|d*L|n(Ssj+2?f>;0tVSF)o4}ms%73Prpz8vfJMR~4v7I+sO)fDWa}^A;HP*Jg zEx{0?5%I?#=4~GO%Zt06_Wah=9gq;ja$>Jv8Gjy&yG2i@-?$(BmoZM3B?a4;Ns^!j*2s(BD*f zmDo(kZ>of;@ZVHBz;4tNzzYM|ncjgJp#Shs=GkfBp6UM&6#swPQ~&PI;vB5&-jwcK zQg=Q7N0J146VOaXy#XsCT9nYXZm|Q>IfVpA1s?s|joT+zFYAYO&5FMIwyM6oD59~s zb0RU(4UYz;jN*TtA1aW>xdh_p2D22~NnA;*2H@iKg={mP0yYWX;w{qXd&1aU1(I|L zf_EezZFS*P)E#qfA1OdDGSoe26iB$WIZjNtp|buM=m(rt2AttuYJMSqX}+*&$*su; zF33Bhk-c@76(n<}aO&kM&sT&^k;>C3cpBY^>UHs+HonjnYM*n>s}z0>hG*|r&Slt> zaO6?whinHl(T{j_2^SI!n9|NiFCSL0SR)&%rQ=QAq2SqWfp@=}ciw?}?9 zttuBmT|+`b$B#}|7BBF6h&H@C%YDb#>~YL*sy&0_@qW=Mrh|xu&w7vg^3=KK?rW+H z0a;@b@3yQIRQ1S`3EPX$CTBFu`MQ(jahZw5P-&$p?U&IW1NW!uO~V3*zGBcCU3R}> zq_lM}>a|+rrXf5aRy~y;c)?NaR!*I{Ad_yL!1XF%-tM0H_P>nVEjbZHJ<33X#lhsW zoW%>$T+zN)#BBWEFvPts7UPK!I9G&dGobWC4pbc>1lHuOu5gcYWuKwIc_H-}q%1Ah zjoHF^?ozJ*rh30SN&tE=)W~&QBBhJ-Hx;1r3BY{A3dtW3Yo0?0tdPVWP#wR=K^Mkb z7jRI@W#LN49E3AG-?hn|{B_w@~O_gY@n%OEX zZODqi4P0EVzTV4U%5aC<<}mYF9+$+Bj>T-xuJcaN;-KXjAbve20>8`8^;}?}cn|1? z{g>CqD{~vOHh>NNJ|M-!I%pdJIoZ(5dkV*JlnC8 zzHbLEx@yA=1wNNX;a2Ii9>^IvoTwVwTrX^y(RggG06bG2>;FvV|7qd+|E+ibUC{V{ zeV+m_1c1*m0bR7;p2CS>>@rhv_J-J`Am*<%t?}-D!bJZWZl;4eC2AssXgbq*ZD3{} z(ZU?0K7D6wpE7tQv2(sy!tv-2PcO94DikJ-XpwbAKi_nV0t5&b;-#9dx;Gr@QO1Bw zUosmLFh2K;sQhcfk8<>5j?y`MNIXj}1ft7_-&7ynT0z8JU@p3tJZ0Fet99pTNsvX* zPY6~Q$w}#(qnBxxC7F_Qs^JP6!gr}rjEP=q#RKAPoF?OsM0V?zJh{ia(`vWIvFIm= zQ)_9f+d`$YGVRH+2X|Mohf9%sDYz~69~VBefOZ$He7rf=VYQ%3V4$FCF=|#Ih;J^8 zcR=V#Tw@2i!(34N7n2LIKOR(ERkNd6_F_=kkm!JJITF3OkPH@}FhE&q;GDR0#Kd@| zE$c#Ak~VQ?xKXD+=&9py(IQGI*C3m-fKws|cM&796^%vS#KPJ$oEK_4-jj4o1LO=` zwDnTk_Dlp;A4Wq1Q<;4DNfo-8%u9?D-^oGbaI`IIvaLM}sG-Axqynf36Q2qG#Jh8B zgKi1B=^QcaaVAZZ{HnKnKH6^(z%;GJ zrkR!0kP^QDjr1NQA4|SGk~K_LM@2&mVhL@o)}|#lBIzHiT7l{ z$@@{ja!Hn1337!?P|o)fnc*EQt|TZpTJ}8h#ub7uw7YGu)dHrpuoIVGkut0=5cI82 zpQ1On=^&j|Zbt$Kjy!@l1#RWNd>43ob4P5H(5Fmdp^Udwa5hr~Sm2C9fAMq^2b3N0 zN+?@IsUG_lP!k<`pII5rO)KVPiWB7CZLBpK)4twrOvf@BXg6^E&ob8)AvBJ zA<8%m3-rur5#P6o5be*;iE|S^+4~23mb)iofT#@a@i0ALF?&!-OmIz>a3B&9Bruy_)nZj81o2s)R>&;|m4h9sO#eGP&>^SIc-2E~QwZAH~y_B-D zFe@x%uoD~kIGIM^<2sDN_)z+BV#xym7H&A$IHj1i04Bq_v%2qp6V z96_}aFgQOx7j=Xfm4uK;z>*4e0@9~;H=_M!C!n-e1R+3g1M4gchG-opCm`06`hXuP zM&rtgR-xp~X2Ae@TvtpJ-FyKSpSO@V{Nph=+rz7FX8QScW0w!&vP+<^oj}R9xrqn` z?LE(8M^6tz4vOyW$(JN>+`~KKO{z4F%E;v zp2ZrXL(xqR{W=94!fB3b`85z%0FZR7galwZzcdgB!l+z{6(DHSQ1o(I(0C>onXY*K zJcS>FJm$n8x*%k+tPOUc82^q04g!|I$6Kcb@&guG{8t<1{|Vv$|B_-TUO@JIgV-|w z1_?|jWZ*GKJwShoqCADn#{p973?yzs9&VU&c{SS8jUM4JyAHCYjH7ES_DLxt>H`u3 zo^zFcu2UI}VSZ8M2_Ps=k%2mAt&{+qfN3Uy1qLdM!Ub%-dmgBv8PEpg=vpFBE)1Gu z?I}!Ezo{q?ZIaU57O+z^-2h2$@Gx)`B-?x^UJ5t@b{jC^Nb(K<)@Ruj1m#1ivpIzh zNb|xM=b>fAfR}}N&v7s1d?Zny@&nC+um*wPG7CrTP=?KhjsqilV3xNr=A$gnHX@br z`bCF?+S?+Nd2TA`O`xC&F{6y3EAvx{DsUOR@0hxwv&|yCPqWsS22(2rKoGzEZ5Q_* ze~Vy(^@D~F&*Nc=Ttw5|#Av9ss)m1Sbe7UKO6IEy*>l{EK?%HmnD6k@ zs{D-LybnLRp(19e>~fyztyFdUUcr&|Qnu?No=cf=GT9U(oV4a`9&M)cfF5SyeoNuw zqQhjT1S9v*2OIY$ceAlVY{c+v5+hbBJgl0DB|w*8UNE8K!n^4#CABi*Dq@wJ%&%}h z_k;M}O~IxA)!Ma3L%FwYZKTki$}y)=PB}-)cARWQwxrlOGjfczSb123T<&YU_Jefn^v)@0z^{w^3YrWr}&zgUp_0049?)$p#>%Ok* z=J6;wPUp)s7{{Wcn)u4_nq1fJQ)j+zwRN;+&Z(`r;`O97Inp3D7nfM4DaNbCLccp7T5Vf8{sGx?eZm-4=bYvzGXJRAS4yre|8fD~Bvra>}#6+n>H3IH!N` zNl#VSr=J4+8}538e8s(xy1(nP7apGXQhQb&ZW1;0@Bq06JLYIl_O3%{M0C<$oZ{mW_WDlP@ChX(4|J*ZivcImp>XwG# zdgn{9M)8F~6r>6740_x+Wc1rH)4?z?n!3|_f*)wE(6EkluFp>HmB zZQahO*DXuXE&*qX%M!_#OD@X=826UT=f$dp#M^StJW6O2-sQkW(%V3fCXFK<9Hs7= z9ZNJBVkqZFZ|-UhS8||C=i#JXSx?DDyV3klU0y?zKL?L=DeY42!EXPYyr=G|J-f*s zJRC8KY2CDqO*T}p1ANWq4Pdj~_(r5a2w=dD&4~6>nu--ZqQ#;!QWsasxtJb!6Rm4z z7r1qj2H`k$Hu$w*o_>ff^nDu@3R;ERno*c!-JPOFX}RkT0}wsVxJcS@mY?x-0(FIB znM2iZs0I$q^>U)EN4$s{6%|pUzk&j)ygc6-$@L8Pyp1x@UTQL#_qaU7EBvPDJP#Mh zBSkwIpk&P!2!AAS0RHMI@7mlVeuyj<`A6+N^xow_rVoJ~`}X-p+x2bAiv|5tpMGcj zITT?%l1bKo;5Dh79p*!4o?e%&GYpOS>*hD6Rromv(;wpOcT-nc?|RyEl%M% zz@0ra>Cc$?U4X8?pn}ZQ<)X8UiD83_!(^G1TanC>q+LgW`n|`oGC3;`R^x8%)Vt?* z?gM%USBdeFY5vB`5E7+}9i1wkDP68zH#%0ttZ#qrFP6DMm?;Qb*R|qG43ScbK=b52bw28_9cc52+Aj5@bTG2 z27EG^_efZO1bP#?O|%chr_u&%-T-Raa_rmrVbbzXw`X?MMYpU2DNWOU^r!^wp;M28 zhmFi0?@|5s4mrCvX~XLVUhu^MVmA!(V^#bFIBHq+=Rz?Q7eZjvx;s*n!~EoIJeq&! zj%Hi?I^lzM!}$UfUSB#F9m#y2Sb?c^N?b^Av7GK7|B3GmPjNZJ@T{=9_(!)ce*)yj z5A(q7w+)^PcP&R`AnM1=GiaficZH(F6Pwzw`-24`HhU;`lu;{+5&52L(+Yi#0gAEp44Ut;X-h4!`T_Xu?t zQbV*p*_!zUp5lBwz*Ln%6qvZx%Se6=f^tJe(%$s|k!Q_a?Cylg0L3=D#BWBPLun9O@s<%J|K=;^- zj}b^$NPlFz=$O~%ncmlS&ad=LuL@I3--TM{`+)e$+17>iP8=1&0p|%|JB5@3O3_)V z>L0DaEQ-GG3(p6CV21PG?8{o3)#*4&4fFVv9enRt?V{H{1*vo}Pz3uG|2t*htPNx* z0xwTNM6!&lj~pH<^~ji(gE6r?8lE>ceW=lD&&WLmi{?|3N z4#WEGrs%uJ;?D42F7Jg+ju~*ZJ?zztCXO5nP z>IvY&c6%Lxsjva8g*yZ`oZGEj?^jO3sW9tpkA{-%33krtf+J zPPScwVsA2_dyia8w?2%}u2A?2Zu^Re2R7s06Mn=&Z=2&H0X+hK!r6HuyzI_%UJ) z=_;$o0xQ!G7MW-FW~w!dp=$_8k+kt6ge6t}Jvx$xnbrj!)B%;R6zy$}rut3z$*9YK z{bhk~TqLc%6|*XLXIX(1w{DgXNQ*;X!=|LVXBt5`50r80lHrDG(awkJ2{{(z34X_IchPp!oS~m(SR{8#G%P9X7Sx4Pk#fE zEu;-8R~*iSU6BqW&a zF6qA#tf0rMp?<1d17`sLiYk`+Z; zOAmGZep0e20gi_@Lss^&*RE4FhsgPGcrz^!HVegwRGS#`xqiz|*st@Qs~(mrsspIysMC zLhvJQe^sY@&iApT@_qi0_3DTPOR(wOr(-FV-tcVKE9|4qKr#$-gy1yk`e4|fBb%5> z83{FqSRwr!7bNdAVIp+y%Zg^sx|iPoGP&TgVIFsl*Ty9lpu+jV0P~o`91@d3KjfDZ z)U$Mu^g4L-z^HLt1{f!usK_=oKM|_PIvy&9w5Ri-X)kd`z!C20Wwsvpp+ZoGgR5CL zw+ws$rB|1?5Yv=zSy$_ruZtQK0_Dz=awu3;BcCV4(aD30!Kilb4DUP#*#)1NVw=)w zSz8fBvjpc}4dqdkeaUm*-n~7OnN=-c)_)q*_uZP!z1=ofx?WH~Yt)956q|X-z0u22 zm4P5f4rTBgWv@0U{Fu1Z>e`kZ4vRNZTaBw{eo)~rfkEl(87GAW=vY`b&W?l3{|AfZ zq{@4vWxnV8jWd#Q>O=T}&QY?P9f@AIlmK_pR(*8i)7X&0I?h+Qd1aen9~D#?(2Yep zUvcJKWUl@G8Nl*Y9UCpag!_F&?xl6WWK8O4&y!~uuaVUthiJWp!9JX$~otJQHD~z1ju5Oqv#;)kTG5u-zF%SvQtH2{$APRPuTc8_aJk+^h4(GM*V- z80UUBuOnE0JGBfj<7);9bcAv7!_7Q@Jl{9t2$q3USk-I27^WhloPeQWv%rxrx#LO4B0vYiXE&>@_`A%RkD;D;}* z-Z^N=IfN3Api94`sF)*RmS3k8{to>mE;ssEnl~N9{U*b6paWpH1jkT%D@!97T9HDcLo5h7Gfd8om#jP6A5_A~2hTtrA z`?XZFXb=GI3*G_fyWZ=2dw_qe(SHZoPP5S-Ubf?`4k>%jo3qVU{L0PgT=@@Bdx5R6 z3`9(xvjthU+t>uTC1eL{vo|}Iob21EVEstQ=iL&vnAZRAbyLhpwN~% z1)DtFjow$^usS$}P2f`N_S1)`{w9xdpINCwLJXG-^aCJ$YZ9U^ zG#S3KU@ONim?-NOsm4aS0SU9e#Kcl^d%KQ$dqj;Vrd+m?tf`IRH95y)E8VT{2i(J2 ziWLPbU$MM}W)(vfW2sUp&Mf=3*DE`$^v|UmRsIq#Z&5f(* zkf!>DZ*SR`Wh@HXr3VHSZBYY1kHA^IE9!j53)7l_8whL*f{qNL99fVX<`yEQtXDl( zueqPW$+%buj|O@;7gcyQk&CYHHeCy2w2NnKjh|3^1L>iq!y1XJtDG5L{TM9@t^p8V zY8X?w#)30}OG;aDPbP8r+4=isLnLf#4&p+d#saiGRJ#|oYGTOq$kn&}N7Hmi5(LrE V{}%!2|DkRAcg5mA{r%U({{XW9W