Looking at the history of the bug, it looks like the committers wanting this in Orbit just didn't follow up with doing all the necessary work. Some committer needs to do the work, and it looks like there are none prepared to do so. I'm not sure what to suggest for such a situation, other than getting involved as a committer to do the work...
Follow up question would be:
Why was batik update only partially. All bundles are there, but only org.apache.batik.pdf is missing.
Was this by accident? Technical issues? Legal issues?
How are those bundles generated, to get all those SHA1-Digests.
It's a problem that no one relevant will read this mailing list to answer these specific questions. They're best asked on the Bugzilla, but there's no guarantee anyone will answer there either. Anthony is minimally active and BIRT is not so active anymore either, so I'm a bit doubtful there is any drive to make this happen.