<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<env:Envelope xmlns:env="http://www.w3.org/2003/05/soap-envelope">
    <env:Header xmlns:addressing="http://www.w3.org/2005/08/addressing">
        <addressing:Action env:mustUnderstand="1">http://docs.oasis-open.org/ws-sx/ws-trust/200512/RST/Renew</addressing:Action>
		<addressing:To env:mustUnderstand="1">http://BeS:8081/ReplaceWithActualETSUrl</addressing:To>
        <addressing:MessageID>uuid:85A77218-CFF5-438F-9AAF-4A7C5614BA5A</addressing:MessageID>
        <addressing:ReplyTo>
            <addressing:Address>http://www.w3.org/2005/08/addressing/anonymous</addressing:Address>
        </addressing:ReplyTo>
        <Security xmlns="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">
            <!-- saml2:Assertion ELGA Login Assertion to renew - e.g. with Assertion.ID "_aa94591e-5b91-4829-81f8-16ed233a5d60"-->                
        </Security>
    </env:Header>
    <env:Body>
        <wst:RequestSecurityToken xmlns:wst="http://docs.oasis-open.org/ws-sx/ws-trust/200512">
            <!-- The TokenType of the Login Assertion to renew - in this example the HCP assertion -->
            <wst:TokenType>urn:elga:bes:2013:HCP:assertion</wst:TokenType>
            <wst:RequestType>http://docs.oasis-open.org/ws-sx/ws-trust/200512/Renew</wst:RequestType>
            <wst:RenewTarget>
                <wsse:SecurityTokenReference xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">
                    <!-- Reference to the Login Assertion to renew in the SOAP Security Header -->
                    <wsse:Reference URI="_aa94591e-5b91-4829-81f8-16ed233a5d60"/>
                </wsse:SecurityTokenReference>
            </wst:RenewTarget>
        </wst:RequestSecurityToken>
    </env:Body>
</env:Envelope>
