Mask-based Membership Inference Attacks for Retrieval-Augmented Generation