It's going to vary, based on what container you're using. Tomcat6 requires more than a fully-compliant
JEE 5 container would.
Here's my JSF2 from a recent project:
This example includes both JSF2 and a compatible version of RichFaces. If you remove RichFaces, you may be able to also remove some of the non-JSF J3EE dependencies as well, but I don't have any definite rules on that.
Including Hibernate is fairly straightforward.