<?xml version="1.0" encoding="UTF-8"?>

<Basic xmlns="http://hl7.org/fhir">
  <id value="RespondtoRetrieveTrustListRequest"/>
  <text>
    <status value="generated"/><div xmlns="http://www.w3.org/1999/xhtml"><p class="res-header-id"><b>Generated Narrative: Requirements RespondtoRetrieveTrustListRequest</b></p><a name="RespondtoRetrieveTrustListRequest"> </a><a name="hcRespondtoRetrieveTrustListRequest"> </a><p>These requirements apply to the actor <a href="ActorDefinition-TrustAnchor.html">Trust Anchor</a></p><p>These requirements derive from <a href="Requirements-EstablishTrust.html">Establish Trust</a></p><table class="grid"><tr><td><b><a name="receive-pki-distribution-request"> </a></b>Receive PKI Distribution Request</td><td/><td><div><p>Receive a PKI material submission from a VHL Sharer or VHL Receiver.</p>
</div></td></tr><tr><td><b><a name="assemble-trust-list"> </a></b>Assemble Trust List</td><td/><td><div><p>Organize validated PKI material into a structured trust list. The Trust Anchor SHOULD support categorization by submitting participant, key usage type (e.g., signing, encryption, secure channels), and operational context.</p>
</div></td></tr><tr><td><b><a name="sign-trust-list"> </a></b>Sign Trust List</td><td/><td><div><p>Digitally sign the assembled trust list using the Trust Anchor's private key, ensuring the integrity and authenticity of the distributed material.</p>
</div></td></tr><tr><td><b><a name="make-keys-available-at-distribution-endpoint"> </a></b>Expose Trust List Distribution Endpoint</td><td/><td><div><p>Make the signed trust list available via one or more distribution endpoints accessible to authorized trust network participants.</p>
</div></td></tr></table></div>
  </text>
  <extension url="http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.url">
    <valueUri value="https://profiles.ihe.net/ITI/VHL/Requirements/RespondtoRetrieveTrustListRequest"/>
  </extension>
  <extension url="http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.version">
    <valueString value="0.0.2-current"/>
  </extension>
  <extension url="http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.name">
    <valueString value="RetrieveTrustListResponse"/>
  </extension>
  <extension url="http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.title">
    <valueString value="Retrieve Trust List Response"/>
  </extension>
  <extension url="http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.status">
    <valueCode value="active"/>
  </extension>
  <extension url="http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.date">
    <valueDateTime value="2026-03-12T12:40:14+00:00"/>
  </extension>
  <extension url="http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.publisher">
    <valueString value="IHE IT Infrastructure Technical Committee"/>
  </extension>
  <extension url="http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.contact">
    <valueContactDetail>
      <telecom>
        <system value="url"/>
        <value value="https://www.ihe.net/ihe_domains/it_infrastructure/"/>
      </telecom>
    </valueContactDetail>
  </extension>
  <extension url="http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.contact">
    <valueContactDetail>
      <telecom>
        <system value="email"/>
        <value value="iti@ihe.net"/>
      </telecom>
    </valueContactDetail>
  </extension>
  <extension url="http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.contact">
    <valueContactDetail>
      <name value="IHE IT Infrastructure Technical Committee"/>
      <telecom>
        <system value="email"/>
        <value value="iti@ihe.net"/>
      </telecom>
    </valueContactDetail>
  </extension>
  <extension url="http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.description">
    <valueMarkdown value="Upon receipt of Retrieve Trust List Request from a [VHL Sharer](ActorDefinition-VHLSharer.html) or [VHL Receiver](ActorDefinition-VHLReceiver.html), the [Trust Anchor](ActorDefinition-TrustAnchor.html) SHALL organize, sign, and expose the PKI material as part of a trusted, canonical trust list.&#xA;&#xA;This MAY include:&#xA;* Public key certificates, trust chains, or JWKS structures&#xA;* Revocation data (CRL or OCSP)&#xA;* Usage metadata (e.g., key type, scope, intended usage)&#xA;&#xA;The Trust Anchor SHALL only respond with validated and trustworthy material in accordance with the governance policies of the VHL trust framework. This signed trust list enables all participants in the VHL trust network to verify digital signatures and establish secure connections in accordance with the governance policies of the Trust Anchor.&#xA;&#xA;Upon receipt of this response, participants SHALL process the trust list as described in [Receive Trust List](Requirements-ReceiveTrustList.html)."/>
  </extension>
  <extension url="http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.jurisdiction">
    <valueCodeableConcept>
      <coding>
        <system value="http://unstats.un.org/unsd/methods/m49/m49.htm"/>
        <code value="001"/>
      </coding>
    </valueCodeableConcept>
  </extension>
  <extension url="http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.derivedFrom">
    <valueCanonical value="https://profiles.ihe.net/ITI/VHL/Requirements/EstablishTrust"/>
  </extension>
  <extension url="http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.actor">
    <valueCanonical value="https://profiles.ihe.net/ITI/VHL/ActorDefinition/TrustAnchor"/>
  </extension>
  <extension url="http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement">
    <extension url="http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.key">
      <valueId value="receive-pki-distribution-request"/>
    </extension>
    <extension url="http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.label">
      <valueString value="Receive PKI Distribution Request"/>
    </extension>
    <extension url="http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.requirement">
      <valueMarkdown value="Receive a PKI material submission from a VHL Sharer or VHL Receiver."/>
    </extension>
  </extension>
  <extension url="http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement">
    <extension url="http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.key">
      <valueId value="assemble-trust-list"/>
    </extension>
    <extension url="http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.label">
      <valueString value="Assemble Trust List"/>
    </extension>
    <extension url="http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.requirement">
      <valueMarkdown value="Organize validated PKI material into a structured trust list. The Trust Anchor SHOULD support categorization by submitting participant, key usage type (e.g., signing, encryption, secure channels), and operational context."/>
    </extension>
  </extension>
  <extension url="http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement">
    <extension url="http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.key">
      <valueId value="sign-trust-list"/>
    </extension>
    <extension url="http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.label">
      <valueString value="Sign Trust List"/>
    </extension>
    <extension url="http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.requirement">
      <valueMarkdown value="Digitally sign the assembled trust list using the Trust Anchor's private key, ensuring the integrity and authenticity of the distributed material."/>
    </extension>
  </extension>
  <extension url="http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement">
    <extension url="http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.key">
      <valueId value="make-keys-available-at-distribution-endpoint"/>
    </extension>
    <extension url="http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.label">
      <valueString value="Expose Trust List Distribution Endpoint"/>
    </extension>
    <extension url="http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.requirement">
      <valueMarkdown value="Make the signed trust list available via one or more distribution endpoints accessible to authorized trust network participants."/>
    </extension>
  </extension>
  <code>
    <coding>
      <system value="http://hl7.org/fhir/fhir-types"/>
      <code value="Requirements"/>
    </coding>
  </code>
</Basic>