IRP generates the hash (as the IRN) and digitally signs it with the private key of the IRP. The IRP signs the complete e-invoice JSON payload (that includes the IRN/hash).